Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/AQst8Bh2EUltzfTYdDrdEB8vbtM.roa
File: AQst8Bh2EUltzfTYdDrdEB8vbtM.roa (raw, json)
Hash identifier: 9igieYfD5+UCOmQj8yL4WH57yFa8Bx6LWdM2pgALVoQ=
Subject key identifier: 01:0B:2D:F0:18:76:11:49:6D:CD:F4:D8:74:3A:DD:10:1F:2F:6E:D3
Certificate issuer: /CN=4292b5da4b4ffeaf720649518fbaaa10c5cb2811
Certificate serial: 03B7D8B2
Authority key identifier: 42:92:B5:DA:4B:4F:FE:AF:72:06:49:51:8F:BA:AA:10:C5:CB:28:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/AQst8Bh2EUltzfTYdDrdEB8vbtM.roa
Signing time: Sat 01 Jan 2022 06:58:58 +0000
ROA not before: Sat 01 Jan 2022 06:58:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212516
IP address blocks: 27.123.244.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62380210 (0x3b7d8b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4292b5da4b4ffeaf720649518fbaaa10c5cb2811
Validity
Not Before: Jan 1 06:58:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=010b2df0187611496dcdf4d8743add101f2f6ed3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8c:ee:5e:0a:c7:23:b1:1d:85:05:f0:77:8d:
0f:20:b6:5c:cb:65:fa:c1:70:c2:3a:48:14:63:26:
77:7a:fe:79:20:3d:db:5b:94:a8:21:ff:cc:fc:10:
d7:d0:31:34:cb:bc:b6:44:2d:d6:50:f7:97:01:f9:
9a:62:dd:49:01:38:33:32:eb:b5:d2:0d:90:aa:9a:
00:51:07:28:c2:fd:3c:fe:1a:75:80:e8:2f:1a:d4:
ab:95:2e:cb:97:ea:f8:07:f7:b5:72:de:6e:3b:7e:
e0:d8:25:13:6c:a5:d3:5a:82:05:4a:aa:97:6b:68:
bb:68:aa:83:05:f9:9f:6d:7b:19:8e:50:38:26:bb:
a5:56:ca:e7:ad:16:7b:45:76:e7:37:96:bb:ce:7c:
e7:e1:e2:18:dc:51:94:1a:b1:26:71:4d:fa:bd:7c:
31:21:c3:6f:b5:f8:b7:b3:f5:db:b9:a3:cc:69:b9:
c3:65:ac:16:3e:5a:de:88:e0:10:b7:54:1c:be:ac:
49:c3:fa:d5:23:ed:05:d7:2c:63:9a:71:5a:20:f6:
18:30:69:fb:09:b2:db:34:26:77:4d:98:09:30:a2:
f1:81:9c:dc:f9:8f:69:25:f1:53:3b:f6:00:10:5c:
bb:6c:3a:48:ad:f7:47:61:7d:56:23:c0:e6:6f:9f:
6c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:0B:2D:F0:18:76:11:49:6D:CD:F4:D8:74:3A:DD:10:1F:2F:6E:D3
X509v3 Authority Key Identifier:
keyid:42:92:B5:DA:4B:4F:FE:AF:72:06:49:51:8F:BA:AA:10:C5:CB:28:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/AQst8Bh2EUltzfTYdDrdEB8vbtM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
27.123.244.0/22
Signature Algorithm: sha256WithRSAEncryption
00:e6:f5:dc:28:6c:1e:3d:66:8c:1f:56:1b:44:45:88:a6:aa:
c2:67:30:9c:e2:71:34:e1:b5:51:15:3e:69:5d:20:0f:75:db:
1a:57:dc:b5:c2:0e:21:9b:23:e7:d8:75:78:46:7f:84:aa:37:
f0:04:e4:a6:75:8f:79:b9:46:61:cd:56:7c:04:dd:29:8f:b5:
e9:b9:2d:8c:30:82:04:8d:30:12:a6:eb:ed:03:06:1c:0d:2e:
c1:bf:5f:73:c3:3d:d4:64:db:fe:7e:d4:23:24:24:31:23:08:
48:a4:99:bd:4a:73:bb:72:4f:b8:69:f2:4c:47:08:b2:0b:0f:
2f:4e:a9:77:1e:e6:49:2b:98:00:03:89:4c:12:1d:5c:86:6d:
83:86:fb:bf:ff:48:c6:53:13:b3:b0:d8:f9:cb:fc:6e:e0:39:
a5:b6:cf:93:85:b1:c7:7f:39:c9:75:e7:8b:a1:84:19:f9:65:
6c:a5:46:9c:70:d4:b8:4c:40:64:59:d7:ba:78:51:fc:7d:08:
36:45:f7:e0:4b:77:ec:12:eb:05:e5:42:33:b3:11:27:a3:39:
99:5d:b7:eb:45:d5:4f:11:ad:b2:62:0f:b7:5c:ab:97:24:fe:
d5:36:d0:ce:38:53:25:1f:b5:55:04:5e:98:b5:69:43:39:95:
11:8d:42:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:09 2024 by rpki-client on console-fra.rpki-client.org