Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/Os2NKnpMiY9OcZ06WOZTq6RciQA.roa
File: Os2NKnpMiY9OcZ06WOZTq6RciQA.roa (raw, json)
Hash identifier: ivAv1y46J+s5q8wC59eX0zuo4uMF6zuJl/xGP7UyntY=
Subject key identifier: 3A:CD:8D:2A:7A:4C:89:8F:4E:71:9D:3A:58:E6:53:AB:A4:5C:89:00
Certificate issuer: /CN=4292b5da4b4ffeaf720649518fbaaa10c5cb2811
Certificate serial: 03DDDDB5
Authority key identifier: 42:92:B5:DA:4B:4F:FE:AF:72:06:49:51:8F:BA:AA:10:C5:CB:28:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/Os2NKnpMiY9OcZ06WOZTq6RciQA.roa
Signing time: Sun 16 Jan 2022 20:31:14 +0000
ROA not before: Sun 16 Jan 2022 20:31:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47392
IP address blocks: 27.123.246.0/24 maxlen: 24
27.123.245.0/24 maxlen: 24
27.123.244.0/24 maxlen: 24
27.123.244.0/22 maxlen: 22
27.123.247.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64871861 (0x3ddddb5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4292b5da4b4ffeaf720649518fbaaa10c5cb2811
Validity
Not Before: Jan 16 20:31:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3acd8d2a7a4c898f4e719d3a58e653aba45c8900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a5:7e:5b:02:91:d5:59:1e:e1:47:7a:45:00:
dc:2e:92:a3:df:5a:ae:d8:fe:66:a2:ea:8d:bc:29:
3e:31:de:40:7d:7b:56:6a:30:4d:cf:39:31:30:99:
1f:05:1d:cc:1d:a4:2a:45:7f:3c:57:9a:e0:68:57:
0b:73:03:dc:25:72:19:75:e5:04:a7:9e:3c:6e:8f:
78:28:73:89:b2:d1:41:8f:4d:9b:1d:aa:11:f0:d5:
42:9e:cc:f9:af:7b:8b:2a:58:ff:82:68:f2:ee:d7:
8e:38:83:8f:89:ed:0f:3d:2c:25:61:ef:36:05:99:
8a:32:a3:c0:74:7f:83:dc:88:90:25:ba:9b:4e:24:
42:a5:d5:57:e5:3e:22:1e:03:bf:75:8a:0f:77:ff:
4c:a6:4a:43:b5:8d:4c:8c:fd:e4:18:29:e8:3c:73:
15:5a:28:35:cf:50:e2:3a:91:05:2f:de:07:60:82:
7c:fe:11:8f:1f:55:cb:3f:74:8b:60:0c:ca:03:f3:
3e:ee:db:2b:d7:9e:e6:1c:ce:1e:d6:38:30:08:d0:
c9:d6:8d:c2:22:77:47:fa:8e:90:20:de:98:99:2f:
60:65:55:e7:17:91:01:3a:d7:c6:98:cc:a2:97:77:
f7:4b:d7:4a:6e:04:09:38:bd:f2:d9:6e:e2:1e:04:
38:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:CD:8D:2A:7A:4C:89:8F:4E:71:9D:3A:58:E6:53:AB:A4:5C:89:00
X509v3 Authority Key Identifier:
keyid:42:92:B5:DA:4B:4F:FE:AF:72:06:49:51:8F:BA:AA:10:C5:CB:28:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/Os2NKnpMiY9OcZ06WOZTq6RciQA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
27.123.244.0/22
Signature Algorithm: sha256WithRSAEncryption
35:69:67:05:98:51:c5:96:3a:9e:e3:2a:4b:ab:61:db:e9:ca:
9f:91:56:b1:6e:fc:23:18:df:b3:45:94:c6:42:21:19:0c:81:
f5:d0:40:2a:3e:e7:8d:4f:d2:e2:b6:f2:48:e2:e1:c2:5a:81:
28:b8:e5:d7:bf:12:de:1d:64:e9:99:98:62:6e:1f:07:46:de:
9e:06:94:29:35:ce:da:60:eb:ad:69:4d:dd:2d:a2:4a:a5:3a:
d1:88:c2:56:e3:8b:16:58:6d:dd:44:a9:53:fd:b3:56:27:bc:
17:40:03:a4:17:29:bb:9c:9a:43:4e:b4:5e:76:99:3a:79:d0:
3e:dc:03:3b:c5:a0:3e:ac:22:59:6c:ab:42:d3:67:48:55:36:
35:97:de:1a:30:93:62:0d:e7:5b:9a:35:99:50:92:13:f1:b6:
f3:0b:2b:22:3c:ae:e5:11:a8:96:a0:b6:6e:67:3d:05:1d:50:
00:fc:f3:62:8e:0e:b7:d2:e2:2c:75:39:0a:e0:bb:60:6d:4b:
4f:fa:1a:f5:1c:88:5c:47:f2:10:42:c5:d7:0c:e4:a9:8e:95:
39:8d:a7:52:9c:c7:a5:d0:51:b4:6c:95:77:a0:d9:f4:a4:6e:
55:10:a1:89:93:f4:43:b4:bb:a0:ff:33:de:a0:a3:4b:9f:be:
74:bd:eb:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:15 2024 by rpki-client on console-ams.rpki-client.org