Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/VLmbH6YdtkRxO69YCZaeK8IfwGY.roa
File: VLmbH6YdtkRxO69YCZaeK8IfwGY.roa (raw, json)
Hash identifier: KV1sypfbC1S+igunf9mre8RGIFDnBmtn319gx9EI+y4=
Subject key identifier: 54:B9:9B:1F:A6:1D:B6:44:71:3B:AF:58:09:96:9E:2B:C2:1F:C0:66
Certificate issuer: /CN=541fdc7a2f11a5766d3ad7bdf625ce5e119a8fdf
Certificate serial: 01840B60B2F05BD181B2A9E33F145F295E33
Authority key identifier: 54:1F:DC:7A:2F:11:A5:76:6D:3A:D7:BD:F6:25:CE:5E:11:9A:8F:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VB_cei8RpXZtOte99iXOXhGaj98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/VLmbH6YdtkRxO69YCZaeK8IfwGY.roa
Signing time: Mon 24 Oct 2022 19:03:17 +0000
ROA not before: Mon 24 Oct 2022 19:03:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 185.104.40.0/24 maxlen: 24
185.104.43.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:0b:60:b2:f0:5b:d1:81:b2:a9:e3:3f:14:5f:29:5e:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=541fdc7a2f11a5766d3ad7bdf625ce5e119a8fdf
Validity
Not Before: Oct 24 19:03:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=54b99b1fa61db644713baf5809969e2bc21fc066
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:9f:a7:34:b2:ae:5b:e2:9d:c5:26:0b:fe:b4:
52:a5:83:e7:d3:e8:37:6d:fb:6d:23:b8:4a:b7:2a:
7d:58:50:2e:f0:73:05:70:8b:04:90:ea:75:80:a4:
47:f9:37:f4:f9:5c:ab:43:b3:df:3e:67:a0:d6:4b:
ee:b7:bb:17:bc:ea:31:b1:02:0e:c8:66:e7:90:39:
96:d0:56:cd:a7:88:b1:8e:da:e1:8c:fe:0f:81:cc:
3d:b5:83:14:7d:74:e8:ad:32:9b:b4:41:8e:a4:6f:
31:3a:d0:8a:32:78:ff:81:8e:2a:b1:48:80:7c:a1:
f0:8c:89:cb:1b:20:8f:e0:24:1b:3d:0a:9e:12:02:
53:67:4f:36:64:7e:7d:a7:26:bf:2e:19:b8:88:5b:
87:1a:0f:05:29:f1:b6:00:6b:dc:fc:70:7c:5f:e2:
7f:e4:7f:e0:66:0e:c4:c8:e5:24:d9:4f:f7:94:d2:
0b:b2:3a:d0:fd:6a:20:74:a6:9a:cb:6a:ab:54:9e:
6f:2b:88:ef:51:a8:c2:d8:a0:e8:ce:a1:cc:cb:31:
ef:74:2f:d4:fd:5f:e3:7b:05:3c:b0:dd:a2:10:cd:
ee:b6:93:b3:dc:d7:fb:e7:2f:3e:33:a2:27:8b:c2:
d2:92:25:14:4c:bc:aa:7d:61:0f:09:5e:69:2b:29:
59:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:B9:9B:1F:A6:1D:B6:44:71:3B:AF:58:09:96:9E:2B:C2:1F:C0:66
X509v3 Authority Key Identifier:
keyid:54:1F:DC:7A:2F:11:A5:76:6D:3A:D7:BD:F6:25:CE:5E:11:9A:8F:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VB_cei8RpXZtOte99iXOXhGaj98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/VLmbH6YdtkRxO69YCZaeK8IfwGY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/VB_cei8RpXZtOte99iXOXhGaj98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.104.40.0/24
185.104.43.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:46:04:07:51:ac:a1:23:ee:a6:58:95:93:ef:b9:33:cf:ae:
25:2b:4d:26:78:8d:24:7d:c7:e5:cb:f7:3b:a1:3e:16:6f:bf:
65:9c:15:f1:83:10:1c:fc:91:03:04:e8:56:8f:6d:40:93:df:
3f:8c:db:dc:ef:7b:eb:dc:dd:75:af:1c:b5:de:96:44:d3:a8:
f6:7b:2a:78:4c:5e:e3:0e:21:3e:0c:73:7b:b0:49:38:d2:b9:
48:25:cb:6c:33:ed:ac:cc:91:2c:12:d0:1b:d0:ff:41:7f:c6:
94:82:4c:5f:6a:0c:86:bd:44:c3:f8:21:18:ad:92:0f:f4:99:
52:df:ea:0b:0e:00:64:70:52:91:6c:a8:af:94:97:5b:5c:be:
7b:dd:b9:82:c1:ee:1e:53:d8:c5:ca:a2:20:a6:55:36:01:12:
ef:4d:2c:25:5c:87:92:96:9e:80:6b:fd:97:96:50:49:be:3d:
85:94:be:28:92:cc:ee:8c:c7:58:e3:ea:f6:71:f5:49:e4:c5:
1a:e1:9d:e1:e1:ff:98:6f:2b:4f:ad:f7:14:97:b7:e9:01:7f:
3f:b5:ef:50:15:2b:b4:ee:5b:ef:ca:5d:52:00:53:0b:61:62:
36:f3:ed:a3:3c:f0:90:f7:e5:a7:f9:36:a9:69:e6:da:6a:5d:
00:3d:b2:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:39 2023 by rpki-client on console-ams.rpki-client.org