Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/321ea6-eff7-4514-ab2d-5b4b85fd5ae5/1/Yo-OQ9ekqDDEtgNrh0Ojl7syROw.roa
File: Yo-OQ9ekqDDEtgNrh0Ojl7syROw.roa (raw, json)
Hash identifier: xuHwJ6zgwQduooFIqEvG3wB0fxfF91olgQDlYxNLlFY=
Subject key identifier: 62:8F:8E:43:D7:A4:A8:30:C4:B6:03:6B:87:43:A3:97:BB:32:44:EC
Certificate issuer: /CN=f1b8bbb1e186a599d4cc058cabf4df0e252f31fa
Certificate serial: 05CE409D
Authority key identifier: F1:B8:BB:B1:E1:86:A5:99:D4:CC:05:8C:AB:F4:DF:0E:25:2F:31:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8bi7seGGpZnUzAWMq_TfDiUvMfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/321ea6-eff7-4514-ab2d-5b4b85fd5ae5/1/Yo-OQ9ekqDDEtgNrh0Ojl7syROw.roa
Signing time: Sat 01 Jan 2022 02:59:19 +0000
ROA not before: Sat 01 Jan 2022 02:59:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 64439
IP address blocks: 185.228.232.0/22 maxlen: 32
185.159.128.0/22 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97403037 (0x5ce409d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1b8bbb1e186a599d4cc058cabf4df0e252f31fa
Validity
Not Before: Jan 1 02:59:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=628f8e43d7a4a830c4b6036b8743a397bb3244ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:8d:15:96:a3:f2:fd:52:8d:72:7a:49:f0:9e:
67:0a:f7:84:ed:78:8c:08:4f:fb:9f:fc:cb:da:7c:
7d:8f:2d:23:46:54:ab:69:62:40:42:f5:46:ca:8b:
93:f9:f5:a9:f8:70:67:94:f4:40:ae:d6:8d:f7:06:
f4:7f:6a:7e:84:fb:81:24:31:38:07:a1:d4:12:8d:
e2:e9:95:32:26:41:c5:38:d9:87:c9:bd:53:44:fd:
90:0a:7e:9c:f1:27:64:fc:71:fe:67:2e:00:00:1b:
b9:a8:8d:9b:e1:ee:97:f1:6b:a4:d1:16:32:2e:00:
eb:92:bd:fb:0f:f5:ca:75:af:9e:fa:8b:74:88:45:
b8:85:73:84:e1:ca:59:9f:2e:66:d5:68:c0:82:67:
c4:5c:34:07:43:fe:f6:ed:91:4e:9b:19:24:95:79:
0a:75:cd:7b:6a:38:b9:78:77:a9:60:7a:0f:ba:67:
ce:43:a0:bd:e3:a5:f0:6a:e7:67:8d:d0:eb:c4:ec:
19:8c:a2:9e:74:06:07:c0:ba:64:a1:8d:fb:0b:2b:
af:8a:8a:15:ca:8e:64:74:67:14:37:90:cd:72:c9:
f5:65:9b:f4:68:25:28:62:10:f3:19:83:6b:a7:e7:
6f:c6:67:c1:a4:b3:02:df:52:e9:88:e5:f4:1c:47:
f9:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:8F:8E:43:D7:A4:A8:30:C4:B6:03:6B:87:43:A3:97:BB:32:44:EC
X509v3 Authority Key Identifier:
keyid:F1:B8:BB:B1:E1:86:A5:99:D4:CC:05:8C:AB:F4:DF:0E:25:2F:31:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8bi7seGGpZnUzAWMq_TfDiUvMfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/321ea6-eff7-4514-ab2d-5b4b85fd5ae5/1/Yo-OQ9ekqDDEtgNrh0Ojl7syROw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/321ea6-eff7-4514-ab2d-5b4b85fd5ae5/1/8bi7seGGpZnUzAWMq_TfDiUvMfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.159.128.0/22
185.228.232.0/22
Signature Algorithm: sha256WithRSAEncryption
1b:e4:bd:e7:44:ab:69:a6:30:e5:9e:80:95:95:43:68:dd:7e:
d0:9c:da:1c:e3:a0:b5:3a:8c:33:e8:1e:3e:96:bd:96:f1:5d:
e2:1f:6b:20:a2:d2:26:c4:18:b2:e4:d0:8e:b7:3a:fe:c2:81:
e7:08:24:39:58:29:38:e2:db:79:21:2a:77:00:38:9c:fc:3a:
44:16:c8:ee:05:38:63:6e:a7:9b:08:b9:41:66:78:12:f7:0e:
6e:83:93:66:78:b2:65:c7:de:7e:49:f8:5c:37:a8:9a:61:f8:
78:95:49:b5:46:86:68:c1:0c:dd:3f:dd:27:e5:31:11:49:a8:
d9:37:df:09:dd:3f:a0:2b:0d:48:cc:65:ad:d4:c2:ae:f3:4a:
59:c4:76:5b:ba:e7:79:0d:9c:11:94:8f:df:84:19:53:90:64:
25:53:e1:83:eb:5c:3b:39:91:40:2c:65:80:ca:e1:d4:6b:7b:
0e:53:2c:4f:4e:c8:33:db:04:11:6c:04:61:ef:f4:e2:e9:a8:
f5:91:52:20:cf:a0:68:38:a2:10:e7:b4:68:a2:de:37:18:3d:
03:fa:fa:b9:4e:12:24:3b:cf:7d:d1:83:17:90:8c:8e:4b:27:
93:cd:d5:78:c0:c4:2e:5f:e4:ef:e1:99:d8:32:bc:e2:f1:21:
d2:95:9b:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:02 2023 by rpki-client on console-fra.rpki-client.org