Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/O0kycGU8u9z-foPEuf8M3kwTDvQ.roa
File: O0kycGU8u9z-foPEuf8M3kwTDvQ.roa (raw, json)
Hash identifier: 8vb8M68q4047ogcHIHGagoJ8ihcURNEcRsK+I/e0BaE=
Subject key identifier: 3B:49:32:70:65:3C:BB:DC:FE:7E:83:C4:B9:FF:0C:DE:4C:13:0E:F4
Certificate issuer: /CN=541fdc7a2f11a5766d3ad7bdf625ce5e119a8fdf
Certificate serial: 050A9426
Authority key identifier: 54:1F:DC:7A:2F:11:A5:76:6D:3A:D7:BD:F6:25:CE:5E:11:9A:8F:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VB_cei8RpXZtOte99iXOXhGaj98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/O0kycGU8u9z-foPEuf8M3kwTDvQ.roa
Signing time: Fri 18 Mar 2022 08:57:00 +0000
ROA not before: Fri 18 Mar 2022 08:57:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 272541
IP address blocks: 185.104.40.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84579366 (0x50a9426)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=541fdc7a2f11a5766d3ad7bdf625ce5e119a8fdf
Validity
Not Before: Mar 18 08:57:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3b493270653cbbdcfe7e83c4b9ff0cde4c130ef4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d1:ba:bb:8f:a3:ce:19:5f:69:17:ce:f1:cd:
0c:c5:90:0e:e7:14:45:5f:59:ed:aa:93:8e:de:c4:
7e:d2:19:2b:5e:e5:ec:5e:cc:5d:7a:1f:5b:86:d6:
8c:df:84:f4:dc:b2:cb:31:65:a6:1e:cd:27:e7:ee:
a8:d0:8a:3b:66:65:df:20:80:1e:a2:a3:f4:56:18:
79:dd:5f:c8:22:15:e9:01:06:44:a8:7c:e4:3b:10:
d7:ec:2c:70:20:81:c7:fc:b0:5a:8d:05:db:76:55:
a3:89:13:b9:13:97:d4:07:16:3b:24:b9:6b:5a:74:
ac:a0:36:37:9d:16:21:bd:46:cc:60:e6:0e:a2:84:
c2:59:a4:46:e7:c9:1a:38:07:46:a7:11:57:30:a3:
89:ba:f7:62:72:15:72:d8:9a:9d:6f:05:6d:1c:b7:
86:90:47:2f:e0:ac:b7:68:7b:b0:17:2b:4c:0c:a5:
1c:e3:b1:be:5b:1f:d4:78:f6:62:f3:c0:06:98:a4:
46:dc:a5:eb:af:f1:ee:22:22:05:af:ae:98:5c:e2:
36:a0:d9:7a:c9:21:91:d7:f6:26:8c:df:ce:5e:d9:
e8:df:0a:8e:a4:9d:0d:5a:ea:90:b8:f1:b4:38:b9:
db:35:e0:89:86:6d:b6:1f:80:b3:17:b3:14:8c:cd:
21:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:49:32:70:65:3C:BB:DC:FE:7E:83:C4:B9:FF:0C:DE:4C:13:0E:F4
X509v3 Authority Key Identifier:
keyid:54:1F:DC:7A:2F:11:A5:76:6D:3A:D7:BD:F6:25:CE:5E:11:9A:8F:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VB_cei8RpXZtOte99iXOXhGaj98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/O0kycGU8u9z-foPEuf8M3kwTDvQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/VB_cei8RpXZtOte99iXOXhGaj98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.104.40.0/24
Signature Algorithm: sha256WithRSAEncryption
18:62:48:c2:52:9e:af:d8:e5:50:58:37:8a:34:e1:2f:24:6c:
27:b0:56:73:37:3c:24:b4:17:1d:c0:ee:14:0f:c6:82:f3:63:
38:62:39:6c:db:14:e8:2f:f2:db:9d:6f:d5:94:17:66:8d:32:
17:23:6d:79:df:40:f8:ab:c3:ca:fc:b4:6b:f8:31:cd:46:68:
ec:61:7c:ae:c6:52:4c:3d:b5:b6:15:4b:20:b8:1d:28:7c:b6:
15:f1:93:78:fe:75:32:0a:9b:7e:f1:b7:10:8f:40:bc:08:4e:
f4:ec:ef:66:20:ea:aa:7c:b9:69:f5:e7:ea:f4:f9:6a:c2:92:
9b:a9:58:25:eb:e9:cb:a1:c0:16:4e:1c:df:24:92:16:4d:3b:
21:f2:8d:ae:56:7b:83:4b:d5:02:51:78:15:e1:49:43:48:04:
50:ed:9b:65:87:b4:7d:f5:c8:f0:f6:b6:92:8a:47:1b:3e:57:
8e:4d:e3:67:07:de:14:2f:4b:d1:79:a8:80:6a:e4:bf:0d:16:
56:e9:ec:34:67:00:de:c3:81:b1:22:2d:0e:c3:8b:12:be:97:
95:b6:66:ba:61:a5:84:38:da:c6:25:7b:35:61:03:a0:41:cc:
99:f1:bd:69:a4:b3:32:2f:f2:59:b2:d9:b1:6e:87:d7:e7:b7:
ee:14:dd:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:57 2023 by rpki-client on console-fra.rpki-client.org