Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/q5zZ-rqEvcQZkqU93K6362hIQi4.roa
File: q5zZ-rqEvcQZkqU93K6362hIQi4.roa (raw, json)
Hash identifier: 8ooQBt4JefQcT/MaxbVUU6SLP+PAiKZcdpMflD8dx+w=
Subject key identifier: AB:9C:D9:FA:BA:84:BD:C4:19:92:A5:3D:DC:AE:B7:EB:68:48:42:2E
Certificate issuer: /CN=541fdc7a2f11a5766d3ad7bdf625ce5e119a8fdf
Certificate serial: 0450A0EB
Authority key identifier: 54:1F:DC:7A:2F:11:A5:76:6D:3A:D7:BD:F6:25:CE:5E:11:9A:8F:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VB_cei8RpXZtOte99iXOXhGaj98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/q5zZ-rqEvcQZkqU93K6362hIQi4.roa
Signing time: Sat 01 Jan 2022 13:55:46 +0000
ROA not before: Sat 01 Jan 2022 13:55:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 185.104.32.0/21 maxlen: 24
185.104.40.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72392939 (0x450a0eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=541fdc7a2f11a5766d3ad7bdf625ce5e119a8fdf
Validity
Not Before: Jan 1 13:55:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ab9cd9faba84bdc41992a53ddcaeb7eb6848422e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:1e:a4:9f:c9:ce:44:21:2e:b8:d9:51:f6:de:
c2:12:a3:e3:99:b4:6b:51:30:ec:ac:f0:3a:82:89:
dc:c0:6b:4d:b2:86:08:8b:2c:b6:1d:96:5e:68:f9:
f3:c6:60:d2:eb:0b:09:26:49:c5:ad:5b:98:e3:6d:
6e:c8:26:6e:56:5a:6f:96:fc:6f:0c:4f:ee:b9:f9:
71:e3:18:f8:4b:24:23:21:66:fd:a1:51:02:96:89:
66:04:4f:5e:de:3b:72:fd:3c:c9:05:ab:e7:82:39:
28:dd:d0:ad:59:5d:f8:76:32:11:a0:43:e5:91:b4:
51:29:8b:39:c3:8a:01:42:83:6f:63:ce:62:71:cb:
cc:66:29:14:22:76:4e:23:87:5c:93:75:ec:60:e4:
cf:97:e3:4f:7e:e5:3b:85:02:7c:03:8e:a8:b9:ae:
b7:f7:b7:ef:cf:9d:3b:04:5d:00:28:6b:4b:40:ca:
b2:13:96:b0:09:71:33:0c:37:cb:f1:9b:63:15:75:
1d:e3:fe:2b:1c:6c:76:0a:5f:a5:42:c7:64:8e:c5:
8c:1b:82:bd:89:9f:50:91:26:6c:63:f7:de:f1:5c:
a0:2e:a9:49:31:01:78:da:d9:88:1f:ec:4b:c1:27:
8f:83:19:0c:e7:92:7a:67:20:78:0b:b0:4a:f3:44:
e6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:9C:D9:FA:BA:84:BD:C4:19:92:A5:3D:DC:AE:B7:EB:68:48:42:2E
X509v3 Authority Key Identifier:
keyid:54:1F:DC:7A:2F:11:A5:76:6D:3A:D7:BD:F6:25:CE:5E:11:9A:8F:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VB_cei8RpXZtOte99iXOXhGaj98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/q5zZ-rqEvcQZkqU93K6362hIQi4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/VB_cei8RpXZtOte99iXOXhGaj98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.104.32.0-185.104.43.255
Signature Algorithm: sha256WithRSAEncryption
ab:1f:e2:de:07:e0:75:a4:14:e7:a8:88:72:35:b1:34:78:e5:
f2:51:f3:33:40:e6:26:60:45:1d:64:c0:45:42:53:c3:57:00:
7f:41:18:b2:e7:ac:98:f8:aa:75:ac:1a:b2:e1:df:ee:36:6c:
16:0c:60:c8:a1:0f:10:ff:d8:03:d4:5e:ac:fd:95:54:d9:59:
f5:b6:56:ed:05:56:3c:81:0c:f5:64:a0:11:19:b1:c5:51:9c:
a0:49:bb:2e:58:3c:91:28:41:f1:dc:a5:bf:cf:e3:23:22:75:
a5:38:2f:43:35:d8:86:0d:d0:6f:33:5f:10:ad:24:e8:9e:93:
27:94:c1:f4:9b:38:af:4a:3f:e0:98:be:05:e8:f8:4c:72:12:
d2:e7:a4:dc:15:a4:31:a1:0e:68:75:5b:4c:6e:df:be:d9:be:
80:60:4a:2e:b8:87:44:9e:e3:0d:1c:37:9d:49:16:8f:30:10:
3d:38:d8:0a:cd:e9:d7:82:45:32:8e:16:d7:4b:5e:c2:6e:18:
df:19:6a:85:0f:82:40:99:d3:3d:0d:d7:c8:6b:5b:43:50:45:
6c:3a:5a:06:5c:34:ea:9d:b4:81:8c:14:84:aa:3b:02:2b:5b:
45:e4:2b:1b:43:c8:17:7c:55:c0:7e:10:83:d3:dc:8f:74:a9:
62:21:f7:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:57 2023 by rpki-client on console-fra.rpki-client.org