Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/hCRPRxSAsEyYRtNTYWx-x4ELu-g.roa
File: hCRPRxSAsEyYRtNTYWx-x4ELu-g.roa (raw, json)
Hash identifier: tI2EyWPU1dbsXl3JAsw15443jHCrXoNc7yNbWaEfhyA=
Subject key identifier: 84:24:4F:47:14:80:B0:4C:98:46:D3:53:61:6C:7E:C7:81:0B:BB:E8
Certificate issuer: /CN=992b86095ce558d2e9618728a44228a27be9098f
Certificate serial: 018323307D004619738A842ED492059678E5
Authority key identifier: 99:2B:86:09:5C:E5:58:D2:E9:61:87:28:A4:42:28:A2:7B:E9:09:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSuGCVzlWNLpYYcopEIoonvpCY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/hCRPRxSAsEyYRtNTYWx-x4ELu-g.roa
Signing time: Fri 09 Sep 2022 16:58:43 +0000
ROA not before: Fri 09 Sep 2022 16:58:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210439
IP address blocks: 166.108.248.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:23:30:7d:00:46:19:73:8a:84:2e:d4:92:05:96:78:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=992b86095ce558d2e9618728a44228a27be9098f
Validity
Not Before: Sep 9 16:58:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=84244f471480b04c9846d353616c7ec7810bbbe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:fc:71:1b:5c:64:64:d3:f6:1b:cb:dd:d4:5a:
a7:46:18:b5:b3:d3:55:af:6e:40:96:5f:6d:b8:27:
0d:e0:8b:2e:fa:7a:72:b5:20:6f:1f:da:97:84:0d:
3d:97:a5:6e:7f:6f:43:87:93:7a:73:37:e1:7b:e5:
96:a2:af:5b:fa:75:dd:11:ef:b8:35:42:2e:38:f6:
4f:42:3f:7a:b0:0d:d8:16:20:50:3f:ff:3b:8f:58:
c5:c0:a0:e1:7c:8f:fb:4e:68:e4:b8:3d:cb:3f:5f:
77:6b:f0:7c:17:49:84:26:f3:0c:52:35:b7:ae:ae:
79:28:42:61:5a:e7:6b:20:4c:4b:fa:13:6e:62:ec:
5c:68:da:b4:88:2a:e7:a2:26:fd:1d:d1:42:15:82:
96:cf:44:92:9a:44:16:c4:83:9d:c7:35:13:82:42:
03:ed:d2:07:95:47:bd:fd:ff:3c:a3:da:d3:70:4e:
f5:2e:eb:df:4d:a4:47:83:b9:8e:53:d0:91:0a:0c:
71:ba:4d:f4:39:17:25:d8:d2:3e:a2:2a:b3:e1:28:
e7:93:f7:f5:c5:6a:89:19:65:0e:f2:3b:e1:37:a2:
8e:36:14:fa:dd:83:05:5e:e7:c1:63:8d:a6:07:9a:
e2:80:1c:39:03:8e:52:e5:25:28:31:97:57:bd:3c:
48:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:24:4F:47:14:80:B0:4C:98:46:D3:53:61:6C:7E:C7:81:0B:BB:E8
X509v3 Authority Key Identifier:
keyid:99:2B:86:09:5C:E5:58:D2:E9:61:87:28:A4:42:28:A2:7B:E9:09:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSuGCVzlWNLpYYcopEIoonvpCY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/hCRPRxSAsEyYRtNTYWx-x4ELu-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
166.108.248.0/24
Signature Algorithm: sha256WithRSAEncryption
06:f9:9c:96:79:61:b2:6a:2c:d5:60:51:67:d6:9f:84:d1:4e:
2d:7e:28:5f:11:91:24:83:13:22:73:9d:92:6c:ca:db:69:04:
02:eb:ca:61:6b:a9:b3:6e:1b:2b:52:ee:64:48:30:cd:83:bd:
9f:f9:44:c2:81:d0:7d:ba:1e:9c:0c:69:1b:1c:1e:33:e8:78:
b0:d5:26:0c:af:f1:10:52:78:c7:2c:38:93:1a:a3:dd:22:67:
62:63:13:36:00:3f:8a:1b:b7:ff:36:7a:e6:28:d0:eb:ea:c3:
3d:81:30:69:e6:0b:68:ae:f3:08:90:01:13:40:f9:ba:15:90:
28:a3:53:dd:23:33:d3:8f:dc:e2:89:3a:b7:e6:5f:84:53:5f:
b1:58:d6:06:40:bf:5f:12:db:d0:c7:16:57:94:48:b6:8f:9d:
fc:65:f6:63:3e:e9:6f:d6:e6:8b:6f:74:09:4e:cd:a7:04:ff:
a3:b9:4f:ce:01:33:07:94:b6:9e:ff:f0:77:65:90:ed:89:d7:
09:b3:41:56:8c:60:b0:48:8c:cc:e6:7c:30:40:6c:f9:ea:5c:
cc:cf:ee:84:02:ea:51:6a:e8:86:b5:3c:59:49:81:f1:e4:1e:
9e:4a:b9:96:20:34:27:28:f5:81:92:23:4b:c7:a0:ae:ad:d5:
6e:bc:1c:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:43 2023 by rpki-client on console-fra.rpki-client.org