Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/OE84CTdPUZdUz12Qy12F_qNFP-o.roa
File: OE84CTdPUZdUz12Qy12F_qNFP-o.roa (raw, json)
Hash identifier: AZgNCDOlRte55z1Bn8Gt+b28rLwQmIZBkrBlot9bYFs=
Subject key identifier: 38:4F:38:09:37:4F:51:97:54:CF:5D:90:CB:5D:85:FE:A3:45:3F:EA
Certificate issuer: /CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Certificate serial: 5756A9
Authority key identifier: 0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/OE84CTdPUZdUz12Qy12F_qNFP-o.roa
Signing time: Sat 01 Jan 2022 02:52:03 +0000
ROA not before: Sat 01 Jan 2022 02:52:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211252
IP address blocks: 45.141.236.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5723817 (0x5756a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Validity
Not Before: Jan 1 02:52:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=384f3809374f519754cf5d90cb5d85fea3453fea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4f:60:2c:f9:6f:ac:73:74:19:56:87:d1:7e:
93:dc:e5:0d:81:8f:75:10:64:45:f2:7d:87:55:63:
b3:8b:35:23:f9:99:e9:6b:7a:8e:b8:09:b0:40:cc:
44:5e:04:c2:ab:79:8c:e6:62:92:10:6b:db:0e:78:
db:c3:4c:dd:23:71:11:e7:94:39:54:59:c9:c7:b0:
35:c4:5f:93:7f:21:12:73:22:c5:73:80:73:04:f0:
b3:02:02:1a:a3:21:ed:4d:e5:7a:e8:36:97:31:32:
9e:64:86:a9:02:c9:8d:e2:8e:57:8d:bd:9b:e2:e8:
23:b5:d5:ea:df:65:ec:35:b7:ea:36:2d:22:3d:56:
31:d1:52:c6:f0:5b:70:b8:ec:b7:63:a8:eb:28:40:
bf:04:7f:9c:1d:1c:44:f4:c9:5f:a0:09:15:54:08:
56:fe:60:b8:e0:af:6e:0a:a2:72:f3:a4:3c:64:4c:
b8:1d:97:07:ac:7c:79:40:c3:ca:ac:07:4b:2e:cc:
65:b6:55:6e:11:20:8f:bf:7f:66:7d:58:c8:5e:3f:
e7:4f:8a:42:18:0c:4e:71:92:f2:09:4e:2c:21:25:
05:34:af:4f:33:af:90:d3:5d:34:10:3c:20:f7:0e:
8c:01:0e:48:e9:47:d8:75:ce:1d:10:9c:a9:aa:c6:
76:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:4F:38:09:37:4F:51:97:54:CF:5D:90:CB:5D:85:FE:A3:45:3F:EA
X509v3 Authority Key Identifier:
keyid:0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/OE84CTdPUZdUz12Qy12F_qNFP-o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.236.0/22
Signature Algorithm: sha256WithRSAEncryption
4f:6d:7b:d6:c2:da:f4:29:75:65:8d:7c:25:62:bf:55:d0:b2:
7f:4c:e5:07:e6:87:9a:de:ec:05:d9:c0:ff:f1:ee:bf:ee:38:
14:a7:be:a8:65:84:fc:ea:52:68:e7:1b:85:96:4b:8f:e8:86:
62:2e:c0:fa:05:8c:fd:70:7b:9f:4d:b2:12:03:3e:70:fd:be:
af:21:5c:66:7b:b0:0a:c6:d7:ca:f5:19:63:07:60:07:a5:05:
7d:9b:16:71:b5:7a:dd:3d:ba:11:a9:c3:eb:63:59:8f:5e:f5:
e6:e0:be:9e:8f:9b:10:7b:a2:02:d1:37:10:e5:1e:ec:c6:5a:
f3:bb:4e:e8:2d:fa:04:7b:c0:58:85:e2:35:54:48:69:9e:e3:
43:ac:a2:ee:30:a9:8f:eb:3f:3f:e3:27:89:16:13:1a:1c:8b:
94:15:22:f8:42:75:38:f7:eb:bb:b5:99:e8:8f:d5:e4:37:fd:
8c:2b:04:5b:f8:1c:4c:77:95:d2:61:f6:3a:cb:20:1a:01:d2:
6e:05:43:3f:b4:d0:d5:27:36:a7:91:22:59:74:03:27:bc:0c:
fa:df:ce:86:6b:4a:1f:17:92:53:c9:b1:08:ba:b0:e5:2f:d0:
b8:5c:41:7c:f6:89:31:27:37:e1:6d:25:9a:43:b7:16:20:88:
90:2a:c9:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:06 2023 by rpki-client on console-fra.rpki-client.org