Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/VEWBvDjEKYG5UzO4B33LN_lLmOI.roa
File: VEWBvDjEKYG5UzO4B33LN_lLmOI.roa (raw, json)
Hash identifier: K5Aad1NAgrUffsa1N7Xe4fti7GagtDmHWkT6PxEEhYY=
Subject key identifier: 54:45:81:BC:38:C4:29:81:B9:53:33:B8:07:7D:CB:37:F9:4B:98:E2
Certificate issuer: /CN=cfcd73f82c260da87386dcf7be26d5c5445526fa
Certificate serial: 061BBBA9
Authority key identifier: CF:CD:73:F8:2C:26:0D:A8:73:86:DC:F7:BE:26:D5:C5:44:55:26:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z81z-CwmDahzhtz3vibVxURVJvo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/VEWBvDjEKYG5UzO4B33LN_lLmOI.roa
Signing time: Sat 01 Jan 2022 06:56:42 +0000
ROA not before: Sat 01 Jan 2022 06:56:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208992
IP address blocks: 85.158.184.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102480809 (0x61bbba9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfcd73f82c260da87386dcf7be26d5c5445526fa
Validity
Not Before: Jan 1 06:56:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=544581bc38c42981b95333b8077dcb37f94b98e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d6:6d:b7:db:13:ff:97:49:79:8e:d7:60:18:
15:dd:c3:f4:93:4a:e3:1e:9a:4e:8e:1e:f6:99:03:
5d:0b:4b:01:88:4b:06:7e:1c:f7:a1:9f:7b:55:e4:
8e:a3:89:d4:f4:eb:c8:33:95:a2:51:ae:2c:f4:eb:
84:b1:a4:0d:35:ba:5d:ea:76:db:06:db:7c:ed:69:
fe:2f:95:6b:55:58:eb:83:68:2e:67:75:40:b0:19:
09:d6:dd:ad:a1:45:15:5e:19:44:d3:df:20:c4:6c:
fb:1e:37:aa:ab:43:ce:0f:ec:b6:a5:cc:67:b8:35:
d9:33:d8:90:2f:5f:54:9e:0b:27:0d:ff:42:0d:b8:
39:ef:bc:a5:70:6f:3c:94:5b:8a:ec:58:69:ea:68:
c6:1c:7b:37:55:0d:b6:b3:36:bb:5d:7e:7e:fe:93:
37:6e:19:a6:2e:28:6f:75:5b:ad:c7:59:33:d7:4a:
1f:24:4f:ec:d7:d2:da:3d:9d:e3:11:cb:fd:a0:97:
e6:ac:b1:19:fd:2f:e2:f2:6e:7a:59:37:b3:24:01:
c4:38:c4:0b:fd:14:eb:15:a3:1b:4d:15:f7:e9:e6:
90:6d:b1:26:36:4f:91:c7:06:df:53:85:c0:09:6b:
63:33:a6:6b:3a:4f:a6:34:0e:2a:2a:85:ea:67:b4:
92:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:45:81:BC:38:C4:29:81:B9:53:33:B8:07:7D:CB:37:F9:4B:98:E2
X509v3 Authority Key Identifier:
keyid:CF:CD:73:F8:2C:26:0D:A8:73:86:DC:F7:BE:26:D5:C5:44:55:26:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z81z-CwmDahzhtz3vibVxURVJvo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/VEWBvDjEKYG5UzO4B33LN_lLmOI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.158.184.0/24
Signature Algorithm: sha256WithRSAEncryption
34:93:fa:f2:95:54:88:9c:35:b5:49:90:d6:91:ad:47:32:ce:
a2:ba:fb:2e:66:bf:dc:78:63:e5:c1:16:ee:61:65:f1:a7:ac:
5c:e4:5c:56:16:cb:ef:ee:1c:86:a2:cc:62:77:fb:3c:09:09:
e9:1b:1e:ec:76:fc:9f:dd:b8:8b:dd:11:ee:20:5d:32:1e:91:
fd:b0:33:10:08:65:58:32:44:c1:21:40:1d:cc:81:e4:48:ab:
18:4b:d4:ed:98:24:11:4e:66:fa:b0:6d:3c:9f:0e:15:a6:8c:
51:c1:0c:fb:7e:ca:93:9e:75:f3:65:f7:4b:a9:04:b9:1d:5c:
6f:bc:15:de:d4:d1:53:c8:61:ea:5b:42:6f:e9:82:9f:22:d3:
1f:a8:da:61:e9:f5:a2:a7:ae:55:a9:0d:41:20:a5:f6:da:7e:
57:74:29:13:79:8b:cb:34:35:e1:d0:33:fb:2c:69:a5:ea:6f:
ad:17:fe:5c:bb:03:21:52:9b:4e:1f:4e:71:a1:19:da:77:be:
ed:e3:f1:04:a1:56:e1:20:9b:69:23:d3:32:02:df:7b:24:6c:
f1:40:6f:1d:02:dd:8c:47:1b:66:50:ae:68:37:53:e4:1c:f4:
c9:8a:91:ca:26:95:b1:8f:b6:e1:1a:47:f3:e1:e6:2c:ab:a4:
4e:7e:a9:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:34 2024 by rpki-client on console-ams.rpki-client.org