Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/jKh5fQIQrIFsba3NDCns0HVY8yw.roa
File: jKh5fQIQrIFsba3NDCns0HVY8yw.roa (raw, json)
Hash identifier: KhYxDP++ZteWYsBYgrpWlfdFvJUWChRF0Btb/HhrFiI=
Subject key identifier: 8C:A8:79:7D:02:10:AC:81:6C:6D:AD:CD:0C:29:EC:D0:75:58:F3:2C
Certificate issuer: /CN=541fdc7a2f11a5766d3ad7bdf625ce5e119a8fdf
Certificate serial: 01847A5FB949A55B2E4BD8BD7BFAF0ACF199
Authority key identifier: 54:1F:DC:7A:2F:11:A5:76:6D:3A:D7:BD:F6:25:CE:5E:11:9A:8F:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VB_cei8RpXZtOte99iXOXhGaj98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/jKh5fQIQrIFsba3NDCns0HVY8yw.roa
Signing time: Tue 15 Nov 2022 08:20:04 +0000
ROA not before: Tue 15 Nov 2022 08:20:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210439
IP address blocks: 185.104.43.0/24 maxlen: 24
185.104.42.0/24 maxlen: 24
185.101.170.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:7a:5f:b9:49:a5:5b:2e:4b:d8:bd:7b:fa:f0:ac:f1:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=541fdc7a2f11a5766d3ad7bdf625ce5e119a8fdf
Validity
Not Before: Nov 15 08:20:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8ca8797d0210ac816c6dadcd0c29ecd07558f32c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:15:6b:24:a9:a6:aa:01:51:87:b0:3a:19:e4:
ed:f8:d3:db:a6:e5:88:12:8e:9e:78:e2:66:fb:db:
b6:b8:cd:ea:be:74:85:8e:b7:c6:a4:4f:b9:d7:e9:
0d:89:6b:91:08:25:32:48:32:f0:36:b5:18:4c:3f:
c4:3e:04:de:ae:53:c2:51:aa:99:32:c6:92:c8:9c:
96:c3:b2:d4:e1:3c:6d:0a:8c:a3:f4:f4:db:00:2b:
ee:70:e2:c9:88:96:99:9a:a2:e4:f1:2c:e9:9f:27:
41:5e:b8:ac:e3:cd:c6:de:d5:2e:6d:4e:8c:f8:b6:
76:2f:6a:73:81:fa:86:74:46:c7:72:d4:00:d3:5f:
08:69:33:21:90:95:b6:81:1a:3c:33:2e:fa:c7:a1:
9d:06:97:d2:77:17:d3:71:e7:44:f7:4d:3c:38:18:
0b:9f:1d:67:a1:e2:e2:48:70:2a:ec:0a:b0:28:81:
18:d1:a1:b0:83:dd:51:7f:17:51:74:8b:22:17:e1:
b3:eb:d0:5e:35:1b:a7:a6:9a:de:0b:7f:8d:29:70:
7f:84:1a:3e:bb:76:3d:e7:29:38:56:91:4b:6a:38:
08:4b:45:5d:3e:ac:b5:8a:b2:28:73:16:db:5d:af:
53:88:29:e9:4e:c2:ca:f9:d0:07:0b:f6:dd:a6:e8:
bf:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:A8:79:7D:02:10:AC:81:6C:6D:AD:CD:0C:29:EC:D0:75:58:F3:2C
X509v3 Authority Key Identifier:
keyid:54:1F:DC:7A:2F:11:A5:76:6D:3A:D7:BD:F6:25:CE:5E:11:9A:8F:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VB_cei8RpXZtOte99iXOXhGaj98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/jKh5fQIQrIFsba3NDCns0HVY8yw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/VB_cei8RpXZtOte99iXOXhGaj98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.101.170.0/24
185.104.42.0/23
Signature Algorithm: sha256WithRSAEncryption
90:56:60:35:45:fa:81:7b:79:08:45:45:89:35:4d:94:2b:40:
06:93:f7:24:48:de:a7:c4:6a:97:6a:2c:0f:21:85:7f:d7:59:
3f:50:0e:8d:8c:1a:86:f7:8c:53:d1:a7:db:2c:78:5f:9d:a7:
ea:63:96:d5:c6:82:42:b9:f3:40:5f:e4:0e:b2:9a:03:c8:42:
e3:f8:2b:5f:f0:84:20:60:12:6e:5c:2f:8d:6d:7a:38:01:a0:
3b:30:3d:00:02:4e:da:6c:57:4f:fe:e7:95:6e:8a:d7:63:84:
5f:4a:42:8f:32:5f:2f:d0:f3:82:ea:1e:39:e5:d0:cc:b8:06:
32:c9:35:73:ae:4f:b6:f6:cd:fd:bb:28:d2:e7:68:3e:38:52:
a0:30:72:af:62:dc:41:c8:90:87:54:af:7e:54:9e:93:35:56:
71:53:28:e2:fa:ca:9b:6f:33:52:7e:35:9f:54:e6:93:9d:55:
0a:22:ff:4a:40:0b:2f:af:2a:a7:f5:c8:b6:0e:8e:82:9f:21:
20:3d:15:fe:a1:7c:16:27:b5:21:6f:40:65:02:7c:c5:e3:19:
bf:73:55:a0:4f:70:e9:c9:17:56:c0:cd:54:da:c1:e8:0e:a9:
bb:aa:76:ec:bc:9e:54:a1:50:f1:e3:7d:93:e6:28:1a:49:67:
e8:94:09:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:57 2023 by rpki-client on console-fra.rpki-client.org