Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/48c072-22de-44d7-bed8-e80f32073f3d/1/u7WBPFbpmVTuCJhZtfxW3kUxbCU.roa
File: u7WBPFbpmVTuCJhZtfxW3kUxbCU.roa (raw, json)
Hash identifier: tTctb7Cp2WlD/Mi9voyTUtMOU05UMjirOIxw2H8Z5ts=
Subject key identifier: BB:B5:81:3C:56:E9:99:54:EE:08:98:59:B5:FC:56:DE:45:31:6C:25
Certificate issuer: /CN=a57d4cfe60f8a30a4d0ff94b94ebadfc88c9ac11
Certificate serial: 62B445
Authority key identifier: A5:7D:4C:FE:60:F8:A3:0A:4D:0F:F9:4B:94:EB:AD:FC:88:C9:AC:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pX1M_mD4owpND_lLlOut_IjJrBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/48c072-22de-44d7-bed8-e80f32073f3d/1/u7WBPFbpmVTuCJhZtfxW3kUxbCU.roa
Signing time: Tue 14 Jun 2022 23:58:44 +0000
ROA not before: Tue 14 Jun 2022 23:58:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 5610
IP address blocks: 151.236.224.0/20 maxlen: 24
37.58.0.0/21 maxlen: 21
37.58.8.0/21 maxlen: 21
91.191.64.0/18 maxlen: 18
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6468677 (0x62b445)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a57d4cfe60f8a30a4d0ff94b94ebadfc88c9ac11
Validity
Not Before: Jun 14 23:58:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bbb5813c56e99954ee089859b5fc56de45316c25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ae:30:ef:b3:7f:e1:d3:72:dc:71:ae:5e:e2:
56:df:d7:a8:df:64:bd:ee:51:11:8b:44:0c:24:9e:
30:91:07:a3:c3:a6:90:c5:18:fa:50:c2:a0:15:d1:
74:39:08:0f:41:a6:35:bd:fa:6b:22:90:99:34:00:
84:ef:50:42:07:ab:43:aa:a0:f6:61:da:6e:73:86:
36:06:1a:ab:9b:57:73:93:73:55:be:a0:a2:cb:b1:
ee:3c:8d:fc:6a:22:86:ab:b0:bd:8c:8b:05:2f:1a:
d6:05:5b:57:22:9a:ec:e3:b9:79:0d:69:c5:b5:d8:
bd:87:32:49:02:72:01:82:6f:a6:9f:0c:6f:80:eb:
ac:7a:62:42:13:f5:ec:9b:e3:32:ed:1a:73:bb:bf:
6c:b6:5f:87:57:4a:94:fc:e5:ef:4a:97:eb:aa:95:
7d:83:00:26:f7:94:ea:87:84:1e:97:e6:ea:20:b8:
4e:f0:ec:64:ef:38:da:95:ca:5a:ca:e0:87:a0:9b:
99:8c:ce:de:58:0f:92:9f:4d:e2:10:5d:cc:5c:3a:
8c:ac:69:2c:2e:97:cd:a4:39:25:27:42:42:f2:f1:
6f:86:30:9a:e3:1a:8b:ac:3d:f8:7b:33:c6:ac:7c:
3a:14:a4:06:28:39:78:22:32:9a:a9:74:6c:b5:f2:
2a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:B5:81:3C:56:E9:99:54:EE:08:98:59:B5:FC:56:DE:45:31:6C:25
X509v3 Authority Key Identifier:
keyid:A5:7D:4C:FE:60:F8:A3:0A:4D:0F:F9:4B:94:EB:AD:FC:88:C9:AC:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pX1M_mD4owpND_lLlOut_IjJrBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/48c072-22de-44d7-bed8-e80f32073f3d/1/u7WBPFbpmVTuCJhZtfxW3kUxbCU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/48c072-22de-44d7-bed8-e80f32073f3d/1/pX1M_mD4owpND_lLlOut_IjJrBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.58.0.0/20
91.191.64.0/18
151.236.224.0/20
Signature Algorithm: sha256WithRSAEncryption
9b:2e:43:63:d7:71:aa:4d:a7:7f:01:77:4b:13:ca:09:e7:c0:
9f:2b:46:fe:52:68:a7:c2:f8:6d:f2:0a:26:15:98:df:b0:04:
0b:8e:58:60:27:a9:e9:a3:11:7b:72:b8:b4:02:ee:6e:cb:4a:
8e:8f:ef:62:65:27:7b:c6:42:dd:88:51:a7:d3:17:50:8f:66:
fd:5f:6b:d2:43:e9:37:72:1c:5b:86:23:38:b0:ad:53:cc:90:
40:46:55:10:a5:1c:47:d0:d5:11:3b:7f:aa:69:5e:dd:ca:97:
55:1d:da:23:5e:5d:7a:3b:95:61:40:f4:55:1d:ed:0b:a3:0a:
7b:26:5e:c5:59:5e:01:27:dd:e2:39:fe:da:f1:2c:14:e8:d0:
35:4d:45:f5:ca:1e:db:94:19:fa:59:b7:1b:80:6e:23:a8:70:
66:59:12:26:b1:b8:a8:4a:4f:0b:90:f4:b3:e6:81:11:86:49:
12:de:02:d8:47:93:fe:bc:3e:79:ef:f9:3c:4e:95:e6:b0:df:
a3:b4:69:7c:e0:45:d2:5c:93:3c:78:0f:6c:c4:4a:6d:eb:d9:
d6:bb:56:43:19:36:05:3f:7f:c6:5f:36:29:e4:ce:ca:a9:64:
21:2c:a8:a8:91:64:1f:89:d5:77:ff:7b:57:04:7e:ee:a9:b5:
5f:6b:15:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:06 2023 by rpki-client on console-fra.rpki-client.org