Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/66b74c-81c1-410e-957d-a8d65dccb96b/1/_Z_gZdH1if-awx3v9M5eVryUQg0.roa
File: _Z_gZdH1if-awx3v9M5eVryUQg0.roa (raw, json)
Hash identifier: PCto8JHQQsjqEH3H880pzNnY6r8zlaTJ5SsCoY413Ok=
Subject key identifier: FD:9F:E0:65:D1:F5:89:FF:9A:C3:1D:EF:F4:CE:5E:56:BC:94:42:0D
Certificate issuer: /CN=72e4baf99ab840129133285fe9ad7b83fd130c39
Certificate serial: 061CD7FF
Authority key identifier: 72:E4:BA:F9:9A:B8:40:12:91:33:28:5F:E9:AD:7B:83:FD:13:0C:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cuS6-Zq4QBKRMyhf6a17g_0TDDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/66b74c-81c1-410e-957d-a8d65dccb96b/1/_Z_gZdH1if-awx3v9M5eVryUQg0.roa
Signing time: Sat 01 Jan 2022 02:55:54 +0000
ROA not before: Sat 01 Jan 2022 02:55:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212228
IP address blocks: 45.11.180.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102553599 (0x61cd7ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72e4baf99ab840129133285fe9ad7b83fd130c39
Validity
Not Before: Jan 1 02:55:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fd9fe065d1f589ff9ac31deff4ce5e56bc94420d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f1:f2:f2:a2:01:4e:e8:56:d0:38:41:a7:35:
d5:e0:88:cd:98:0a:37:64:17:25:93:79:fd:61:9d:
49:22:c1:d5:4c:62:1f:2a:e8:70:a8:ff:3e:38:ba:
8c:86:d9:49:2e:a9:83:b7:81:11:55:03:9e:95:c3:
5a:71:98:49:13:82:e3:f9:8a:c9:d4:3b:b0:96:cf:
2b:0e:33:63:12:3f:9c:42:c9:88:78:15:43:08:ab:
65:e6:58:b4:10:34:d7:cf:cd:9e:7b:11:9e:f8:0f:
19:fd:ed:5a:3d:37:5d:44:48:06:37:b5:91:ff:8c:
80:87:74:bc:27:7d:52:5e:53:bb:96:5b:8e:83:69:
80:b6:1c:6e:1c:62:6d:02:b8:ef:53:05:d8:0c:82:
f4:2a:9a:d1:89:b6:9e:51:b7:a6:18:6f:ca:18:46:
b6:75:81:e4:9f:db:cf:80:c3:35:84:84:33:d6:27:
48:c9:ac:71:d2:91:f8:09:10:30:59:39:df:8c:e9:
97:99:b3:76:7c:57:0e:08:eb:aa:1a:a8:78:13:8a:
16:7a:47:15:7c:7b:f1:78:68:3e:64:b6:ac:d0:97:
54:ed:ce:c6:99:d0:03:ac:af:0f:27:ba:46:28:31:
3c:f9:54:52:2c:09:5e:9c:e0:86:91:c7:1a:8d:5d:
95:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:9F:E0:65:D1:F5:89:FF:9A:C3:1D:EF:F4:CE:5E:56:BC:94:42:0D
X509v3 Authority Key Identifier:
keyid:72:E4:BA:F9:9A:B8:40:12:91:33:28:5F:E9:AD:7B:83:FD:13:0C:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cuS6-Zq4QBKRMyhf6a17g_0TDDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/66b74c-81c1-410e-957d-a8d65dccb96b/1/_Z_gZdH1if-awx3v9M5eVryUQg0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/66b74c-81c1-410e-957d-a8d65dccb96b/1/cuS6-Zq4QBKRMyhf6a17g_0TDDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.180.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:43:29:74:a2:6a:77:0f:7f:70:72:83:92:f8:a7:c0:5f:b6:
da:9c:a5:cd:c5:2c:9a:61:2a:e1:97:74:0f:e1:a0:9a:48:a3:
23:d3:5b:be:94:13:3a:46:95:82:8f:a0:04:ea:4e:ef:5c:ce:
a0:7e:bf:73:31:48:d5:9e:b3:0a:96:24:3f:eb:21:37:af:1a:
3f:7d:f6:de:27:6e:28:31:d1:aa:0a:43:b5:54:e2:78:40:fd:
18:1c:4c:59:de:b5:d3:e7:54:6c:87:48:6e:8f:dc:43:15:6f:
d0:f3:f9:eb:68:c2:ed:82:bf:6d:c9:91:a0:7d:a9:a5:0d:e9:
19:76:e7:3c:16:e2:38:27:38:0a:c8:46:b4:a1:2d:09:be:22:
fe:9b:ac:8a:f8:3b:96:86:ca:ce:d7:ce:19:6d:96:ee:5a:f4:
7a:61:54:db:ff:c8:57:a5:ca:7b:e6:92:7b:48:e6:05:41:50:
6b:8b:26:61:5d:c3:d0:38:4e:6c:ed:d3:4b:1d:7f:0e:7e:56:
37:f3:25:b8:0e:ca:fe:22:49:6b:c3:67:2a:87:87:53:26:ce:
7d:89:4c:b9:33:98:c9:b0:15:2a:d5:ef:39:2d:1b:73:ae:a0:
bb:c2:28:9a:83:a7:0a:7a:d5:7b:4a:5c:8e:f6:6e:ba:1c:8c:
81:db:1a:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:46 2024 by rpki-client on console-ams.rpki-client.org