Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/yfAgsALU7yS3qj8vLS2J_KjCaVM.roa
File: yfAgsALU7yS3qj8vLS2J_KjCaVM.roa (raw, json)
Hash identifier: WGBITS7A60jwD7koXsY53W8xZQirroCGXLSr81qpQKA=
Subject key identifier: C9:F0:20:B0:02:D4:EF:24:B7:AA:3F:2F:2D:2D:89:FC:A8:C2:69:53
Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Certificate serial: 1ABD4768
Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/yfAgsALU7yS3qj8vLS2J_KjCaVM.roa
Signing time: Sat 01 Jan 2022 00:54:13 +0000
ROA not before: Sat 01 Jan 2022 00:54:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 135376
IP address blocks: 188.209.116.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 448612200 (0x1abd4768)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Validity
Not Before: Jan 1 00:54:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c9f020b002d4ef24b7aa3f2f2d2d89fca8c26953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8d:c4:56:6d:08:e4:2e:90:83:59:18:bd:89:
6f:c2:82:92:63:13:a8:ea:d6:da:af:20:56:74:9e:
9b:c8:7b:c6:f4:f1:b0:20:b8:43:2d:84:f2:3e:1e:
71:f0:60:7f:ac:49:2c:2d:8e:76:21:64:66:76:57:
2b:72:18:bf:82:04:57:44:38:96:ad:c3:d2:a2:ff:
aa:07:e4:0e:b6:a6:c3:d0:a2:15:a9:2c:fc:9f:e7:
ad:ec:51:3c:60:5c:ad:9c:33:bd:91:9f:bd:2f:1c:
7a:c4:08:c0:60:e6:7d:f5:a4:1b:53:2f:0d:b6:65:
75:b8:ba:21:48:e3:4a:82:c1:60:01:29:d1:47:9a:
c5:08:f5:b3:33:66:3c:db:51:24:cb:84:d0:de:60:
6d:6c:7f:b2:2b:ca:d0:b5:3a:5a:6d:b7:d0:4b:2c:
6f:b8:f5:47:00:ce:51:f5:5d:a3:9b:cc:82:67:d4:
26:4c:51:38:b7:e8:31:4f:81:7c:cb:90:f6:22:22:
0f:2d:29:a5:fe:02:31:1a:31:e3:44:ac:31:ed:ad:
cf:89:54:4b:8d:25:cc:86:84:dd:8f:11:8e:4e:7d:
c1:3a:d1:bd:c8:f4:46:d0:86:ae:71:15:37:37:67:
ff:d6:39:53:22:0f:63:26:3d:5a:1c:0c:31:6c:e6:
57:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:F0:20:B0:02:D4:EF:24:B7:AA:3F:2F:2D:2D:89:FC:A8:C2:69:53
X509v3 Authority Key Identifier:
keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/yfAgsALU7yS3qj8vLS2J_KjCaVM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.209.116.0/22
Signature Algorithm: sha256WithRSAEncryption
69:a7:e3:8b:64:b5:34:02:f5:57:c0:d1:fe:4d:2a:f4:32:0f:
5c:9c:37:9a:37:cd:1f:e6:55:69:bd:46:ac:2e:a6:d1:46:77:
68:90:b0:41:da:74:70:23:82:bf:75:0f:3b:83:d0:ba:52:7a:
f1:05:a1:eb:83:9a:d3:a7:ec:7d:69:5a:3c:95:0a:fb:76:38:
41:0a:b5:c5:e0:a5:1b:05:d5:f7:11:db:ba:ea:2d:d0:a2:f6:
94:f6:d7:7b:81:40:31:fb:d8:e9:f9:b9:13:67:c5:0d:3d:66:
d2:d3:00:f5:52:1b:8b:c0:15:04:f4:af:a1:1d:2d:b4:83:ce:
3b:51:31:2b:6d:b2:26:e4:4a:fc:5b:5a:fc:9f:1f:b4:11:e2:
d0:97:ed:87:0a:a7:8d:91:7e:2d:d0:ef:70:03:0d:54:cf:31:
27:1f:80:52:d6:25:57:7e:9f:32:0c:a3:0f:45:1b:cd:99:57:
dc:cf:7d:12:87:95:82:5d:13:47:16:6f:0c:97:35:62:04:f8:
c0:ea:7e:e7:71:22:21:a1:06:ea:40:85:75:ac:ba:3d:12:aa:
ba:b2:9a:3a:b0:db:ea:47:af:ca:d9:f7:5d:dd:4e:71:ad:32:
2c:f4:21:de:b9:65:35:84:fc:fa:8a:5d:2f:a4:c1:be:c1:31:
62:c3:4c:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:10 2023 by rpki-client on console-ams.rpki-client.org