Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/Ib627AISBBtwmnKDR8qlOUeXllw.roa
File: Ib627AISBBtwmnKDR8qlOUeXllw.roa (raw, json)
Hash identifier: NTHrw63gGex3zYXMxpfSehzSD9N/k8EdINygZL9cZ3s=
Subject key identifier: 21:BE:B6:EC:02:12:04:1B:70:9A:72:83:47:CA:A5:39:47:97:96:5C
Certificate issuer: /CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Certificate serial: 01856BCA167BD24EA8B33DF6024F188EBCD1
Authority key identifier: 0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/Ib627AISBBtwmnKDR8qlOUeXllw.roa
Signing time: Sun 01 Jan 2023 05:24:44 +0000
ROA not before: Sun 01 Jan 2023 05:24:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7922
IP address blocks: 45.90.116.0/22 maxlen: 22
45.90.12.0/22 maxlen: 22
45.148.56.0/22 maxlen: 22
45.93.172.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:ca:16:7b:d2:4e:a8:b3:3d:f6:02:4f:18:8e:bc:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Validity
Not Before: Jan 1 05:24:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=21beb6ec0212041b709a728347caa5394797965c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2f:77:ea:2a:66:dd:31:ee:04:17:9c:81:aa:
ec:64:5b:0d:65:83:d6:bb:7b:67:97:30:d9:07:e1:
16:a7:f7:2b:99:a7:0e:ac:34:a0:51:85:bf:e8:41:
e2:26:99:91:d6:5c:56:7d:77:f6:38:12:14:b4:5f:
b1:d5:ff:23:8b:ec:c2:11:e1:ab:3e:ba:e3:47:1b:
d4:06:a6:96:a9:7b:c1:46:0a:fe:38:d4:de:23:38:
e1:a7:38:9a:f6:a1:09:d9:4a:f6:a3:35:e5:a2:66:
93:46:f8:a1:d9:6b:e5:08:67:27:5e:b9:8e:b1:60:
15:74:3e:6a:bf:a1:fa:6f:11:ff:8a:d7:b0:fc:68:
45:c0:db:33:6f:08:56:a5:08:ee:3b:cf:e0:fc:42:
dc:f3:19:8c:c7:c5:e1:60:ba:44:a1:88:1c:35:1b:
65:c5:81:5a:5b:a0:0b:8d:37:9e:5f:df:6d:79:23:
b0:06:39:60:3f:43:97:61:1f:57:10:25:34:6d:0a:
ac:5a:65:d8:d9:72:8d:88:fc:f0:f5:41:ca:25:6e:
6f:b5:13:16:b2:19:88:52:d7:35:92:bc:8a:90:71:
e4:a1:fd:ff:e1:aa:a6:e1:2b:99:7c:9b:a7:98:26:
1d:ec:a3:73:01:02:52:b8:bf:bf:19:79:b1:02:ff:
fd:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:BE:B6:EC:02:12:04:1B:70:9A:72:83:47:CA:A5:39:47:97:96:5C
X509v3 Authority Key Identifier:
keyid:0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/Ib627AISBBtwmnKDR8qlOUeXllw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.12.0/22
45.90.116.0/22
45.93.172.0/22
45.148.56.0/22
Signature Algorithm: sha256WithRSAEncryption
2b:34:fb:1b:f6:6d:72:1e:a6:2f:bf:e2:65:d9:ab:62:2c:31:
c0:f4:84:8c:34:49:bb:87:b9:bd:76:af:7e:ed:f6:0a:79:0f:
29:1e:e7:3e:e9:53:d6:5c:f7:d8:b0:3d:51:30:8f:de:5c:dd:
1b:eb:3f:2b:30:90:ef:62:b6:21:e9:ca:3a:bb:bb:fd:e7:77:
29:e7:48:b4:08:43:08:c8:cd:3a:4c:5e:34:fb:6b:39:ac:44:
00:94:e1:44:5b:f9:39:ad:d1:ab:f9:61:9c:cd:8d:c6:a0:d7:
2e:0f:9e:75:d8:0e:30:4e:5e:bc:96:84:87:37:52:eb:4e:cc:
77:65:08:05:b8:30:6d:67:a2:b1:80:df:02:15:7a:ac:de:85:
ff:b4:2e:88:e6:97:5d:aa:33:13:5b:75:de:5a:6d:7b:ae:f4:
5b:81:19:48:3c:0b:44:5d:d4:d1:50:7e:3c:92:f9:69:be:3a:
53:4c:db:60:1e:56:d3:3c:53:d9:cb:82:4d:b7:70:da:02:ee:
50:ff:f1:7c:db:03:99:e9:73:62:7b:4c:02:03:c1:e1:fd:51:
4e:10:fe:69:26:5c:cc:95:3f:42:e3:e3:6d:a1:aa:ac:a5:d4:
45:24:3d:f4:33:15:19:35:6f:9e:a4:3d:e8:cd:5e:7b:89:71:
45:43:9a:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:51 2023 by rpki-client on console-ams.rpki-client.org