Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/U2287J4J4a5TItt_acqYeE36-Sk.roa
File: U2287J4J4a5TItt_acqYeE36-Sk.roa (raw, json)
Hash identifier: j5zqw2WKaovfLjE2Ba+Shv1vJkhrqXjtl9nDi7TrtKI=
Subject key identifier: 53:6D:BC:EC:9E:09:E1:AE:53:22:DB:7F:69:CA:98:78:4D:FA:F9:29
Certificate issuer: /CN=541fdc7a2f11a5766d3ad7bdf625ce5e119a8fdf
Certificate serial: 018225554C390A3BED1AA22987C40788ECA8
Authority key identifier: 54:1F:DC:7A:2F:11:A5:76:6D:3A:D7:BD:F6:25:CE:5E:11:9A:8F:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VB_cei8RpXZtOte99iXOXhGaj98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/U2287J4J4a5TItt_acqYeE36-Sk.roa
Signing time: Fri 22 Jul 2022 09:55:23 +0000
ROA not before: Fri 22 Jul 2022 09:55:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 185.104.32.0/21 maxlen: 24
185.104.43.0/24 maxlen: 24
185.101.168.0/24 maxlen: 24
185.101.168.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:25:55:4c:39:0a:3b:ed:1a:a2:29:87:c4:07:88:ec:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=541fdc7a2f11a5766d3ad7bdf625ce5e119a8fdf
Validity
Not Before: Jul 22 09:55:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=536dbcec9e09e1ae5322db7f69ca98784dfaf929
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1a:f0:a9:d7:77:a0:01:44:f9:25:c6:c9:65:
5f:37:5e:27:61:10:38:9a:d4:f4:1f:a9:48:bd:7e:
2a:85:8c:63:9a:4c:d9:06:57:42:e7:85:54:b4:63:
87:5b:59:a0:3b:78:16:2f:6a:1d:84:fb:15:38:a9:
73:d1:d0:75:c4:b2:ea:ef:69:b4:98:96:79:32:c0:
34:7c:df:a5:51:38:93:8e:1b:e9:0f:7b:c6:78:7e:
7e:f4:f6:5b:16:84:14:92:33:2f:59:3d:15:47:bc:
49:10:9f:05:0b:8d:a9:a1:ef:90:d2:ef:5f:a9:bc:
77:37:83:56:99:90:32:78:d9:f6:66:e5:92:1b:9a:
93:50:90:6a:0f:35:38:a8:0d:14:04:0e:c8:e2:0f:
e6:00:83:60:9b:a6:76:f7:09:a9:63:fc:d2:0e:86:
ab:05:e8:73:53:ae:07:bc:89:e9:b1:cf:b6:87:c7:
c0:1e:df:45:96:18:cf:ac:d6:c6:60:4d:16:1b:18:
31:2f:61:5b:ac:7a:26:85:e3:62:aa:f5:b0:16:58:
e5:e0:2c:06:36:ef:3c:26:b4:2e:84:cd:55:5a:f0:
cc:3d:a9:2e:eb:96:c8:73:1e:f4:b4:6c:0c:3f:1e:
9d:fc:5e:af:34:c4:dc:c2:c4:f8:09:a2:fc:1e:9b:
da:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:6D:BC:EC:9E:09:E1:AE:53:22:DB:7F:69:CA:98:78:4D:FA:F9:29
X509v3 Authority Key Identifier:
keyid:54:1F:DC:7A:2F:11:A5:76:6D:3A:D7:BD:F6:25:CE:5E:11:9A:8F:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VB_cei8RpXZtOte99iXOXhGaj98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/U2287J4J4a5TItt_acqYeE36-Sk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/VB_cei8RpXZtOte99iXOXhGaj98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.101.168.0/22
185.104.32.0/21
185.104.43.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:8e:2b:3a:0e:2e:87:bb:05:51:c2:c2:e5:90:e3:2f:59:69:
92:b6:72:81:32:f3:b5:dc:d6:69:a4:11:e6:82:ee:63:7a:9d:
59:6f:ef:61:28:ce:a4:0b:51:71:d5:8c:41:2e:b2:ac:cc:1b:
37:b5:01:d8:b0:62:bf:e3:73:8d:1a:41:e8:d2:ab:f0:c4:79:
50:5e:a4:76:ae:42:da:61:7f:e8:ea:45:4a:c0:5c:2a:0a:a3:
46:13:bd:e3:4f:f3:5d:38:5c:90:99:8d:77:71:e2:58:36:37:
46:e9:1a:d9:a5:24:43:1a:ed:8f:fa:1b:52:73:3f:38:78:08:
00:ea:6b:24:54:e8:28:d5:f1:e5:f6:35:dd:bb:fb:0b:e6:05:
11:f5:dd:18:44:de:b2:39:df:58:ce:7f:53:4f:b7:6c:fa:e5:
85:54:c1:f4:9f:45:be:24:fe:80:8f:2d:8c:6b:32:c5:f2:fb:
f2:a8:7a:81:92:6e:2e:21:79:62:56:cb:c0:52:8c:a2:1a:d7:
96:7f:0f:17:8b:85:ec:ad:45:33:ec:e8:1a:e2:29:3a:75:5d:
fd:31:66:cc:04:d1:fd:a7:ae:37:e8:22:1e:ab:dc:30:ff:3e:
56:60:df:73:14:5f:13:28:e8:2a:4f:30:db:4f:cc:15:38:6f:
17:17:68:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:57 2023 by rpki-client on console-fra.rpki-client.org