Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/ShUSyOirkkYKmOi2DiQ3ujfqch0.roa
File: ShUSyOirkkYKmOi2DiQ3ujfqch0.roa (raw, json)
Hash identifier: QZobDE6Ctd5F/UB9htxtDktcpU+YEHF5qo5jYdxmj5M=
Subject key identifier: 4A:15:12:C8:E8:AB:92:46:0A:98:E8:B6:0E:24:37:BA:37:EA:72:1D
Certificate issuer: /CN=29be02dea0a086e9880f564c86872bbc597cc672
Certificate serial: 0184AA3383A6A3E897DE07C4D121266E2FEF
Authority key identifier: 29:BE:02:DE:A0:A0:86:E9:88:0F:56:4C:86:87:2B:BC:59:7C:C6:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kb4C3qCghumID1ZMhocrvFl8xnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/ShUSyOirkkYKmOi2DiQ3ujfqch0.roa
Signing time: Thu 24 Nov 2022 15:13:33 +0000
ROA not before: Thu 24 Nov 2022 15:13:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9002
IP address blocks: 139.45.192.0/19 maxlen: 19
87.245.208.0/20 maxlen: 20
87.245.208.0/21 maxlen: 21
185.82.8.0/22 maxlen: 22
87.245.224.0/19 maxlen: 19
139.45.224.0/19 maxlen: 19
2a02:2d8::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:aa:33:83:a6:a3:e8:97:de:07:c4:d1:21:26:6e:2f:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29be02dea0a086e9880f564c86872bbc597cc672
Validity
Not Before: Nov 24 15:13:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4a1512c8e8ab92460a98e8b60e2437ba37ea721d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:87:e9:a7:6f:dd:6f:d7:88:ea:ea:12:cd:df:
89:8b:76:80:a4:69:6d:b1:f5:ef:6f:56:78:13:49:
b5:ff:29:b9:a4:7b:25:07:42:05:e1:f9:77:9b:72:
ff:3c:fc:92:b2:a3:73:eb:4c:8a:b8:56:83:e2:f2:
9c:39:ff:29:55:6c:68:b4:27:ae:45:52:a5:cf:e8:
4e:c6:05:3e:c8:27:b9:1c:28:9e:c8:a8:be:22:97:
1d:a7:07:be:68:00:44:81:79:42:c2:2d:2f:c9:48:
27:3f:96:31:ca:09:2a:4a:64:14:cc:05:ec:b3:44:
3a:f9:c2:2b:6f:a9:b5:7f:31:1d:ae:1d:17:e8:ce:
11:9c:50:ea:8c:f9:f3:e6:82:c8:81:aa:2d:5c:fa:
6b:11:30:f3:6b:27:2d:db:88:5f:d4:a3:45:10:bf:
fd:29:3c:75:29:d3:fd:3d:52:2a:d3:f8:8e:41:02:
2e:f6:b5:f6:6f:4a:77:1c:b0:d5:bc:f0:e7:e6:89:
68:18:07:af:66:4e:ee:39:6b:e5:33:61:16:b0:c8:
e1:e8:56:dc:7e:69:7a:b4:a8:35:8e:ff:18:08:9d:
4d:69:11:c6:5e:74:10:4e:9c:0e:fb:7b:31:6c:da:
29:cd:d8:4e:4c:0d:b5:3d:4c:ad:90:9f:ed:42:4e:
f8:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:15:12:C8:E8:AB:92:46:0A:98:E8:B6:0E:24:37:BA:37:EA:72:1D
X509v3 Authority Key Identifier:
keyid:29:BE:02:DE:A0:A0:86:E9:88:0F:56:4C:86:87:2B:BC:59:7C:C6:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kb4C3qCghumID1ZMhocrvFl8xnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/ShUSyOirkkYKmOi2DiQ3ujfqch0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.245.208.0-87.245.255.255
139.45.192.0/18
185.82.8.0/22
IPv6:
2a02:2d8::/32
Signature Algorithm: sha256WithRSAEncryption
95:61:47:19:e3:cf:23:15:da:56:39:94:b7:9e:15:2c:ff:73:
23:c5:b7:de:a7:67:05:4d:04:c7:31:92:2c:9d:23:82:d8:11:
05:e9:af:69:93:c4:66:2e:f3:8e:3c:5a:3b:f1:2a:9a:6b:4e:
92:32:4a:48:27:99:5b:97:00:f3:96:13:3e:1a:ab:b7:46:bf:
dd:20:b6:c7:dd:42:d2:bb:b7:7b:0b:d1:ae:e0:eb:17:8d:9c:
be:2e:64:a8:d1:41:df:e8:10:77:49:0d:4f:27:86:ba:1f:cb:
f1:00:17:62:d9:fa:db:e1:08:ae:65:42:d6:ad:52:e5:38:f2:
81:32:3f:30:de:f6:01:c7:fe:df:8d:f5:27:f3:15:4b:bb:ef:
1e:cd:40:92:e3:6e:58:ae:03:6d:bc:4c:02:26:7e:64:3c:5e:
ca:f7:b7:84:eb:49:d2:ef:4b:67:fd:3a:3e:47:b1:ab:08:8c:
08:61:71:f9:4c:4e:5f:57:ea:c5:c7:0e:3e:93:72:07:5f:2f:
cf:e8:28:4a:c4:6b:81:3b:a7:6b:1d:1b:9f:26:8b:a8:e8:00:
0a:63:c2:7c:97:7c:22:84:95:83:26:e4:33:cb:14:8c:0d:4c:
25:34:9f:ab:5e:63:3f:52:33:ca:16:e4:05:85:6f:fa:3d:77:
d9:03:40:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:09 2024 by rpki-client on console-ams.rpki-client.org