Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/a9e8a6-1cf2-4c87-b49a-5228823fb97b/1/BZb0MfpgoqWrU3gKx6mS6fK045I.roa
File: BZb0MfpgoqWrU3gKx6mS6fK045I.roa (raw, json)
Hash identifier: VjjRgEW37hWfafRRG7Z5Darcj88Ph/o+Rz9HCpk/JVY=
Subject key identifier: 05:96:F4:31:FA:60:A2:A5:AB:53:78:0A:C7:A9:92:E9:F2:B4:E3:92
Certificate issuer: /CN=839d363b28f1c9084e1c1986876bb409b79a138c
Certificate serial: 018434245FF2A22EA41386A019F5C21712E0
Authority key identifier: 83:9D:36:3B:28:F1:C9:08:4E:1C:19:86:87:6B:B4:09:B7:9A:13:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g502OyjxyQhOHBmGh2u0CbeaE4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/a9e8a6-1cf2-4c87-b49a-5228823fb97b/1/BZb0MfpgoqWrU3gKx6mS6fK045I.roa
Signing time: Tue 01 Nov 2022 17:01:49 +0000
ROA not before: Tue 01 Nov 2022 17:01:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1
IP address blocks: 94.45.167.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:34:24:5f:f2:a2:2e:a4:13:86:a0:19:f5:c2:17:12:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=839d363b28f1c9084e1c1986876bb409b79a138c
Validity
Not Before: Nov 1 17:01:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0596f431fa60a2a5ab53780ac7a992e9f2b4e392
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d2:89:50:65:fa:76:a4:f2:e9:64:cf:1e:10:
00:6b:56:ef:5a:2d:1c:fe:1f:29:d6:12:39:34:57:
e1:ae:21:dd:67:96:9a:2e:11:0a:f5:22:23:99:a7:
83:7e:3b:6b:29:34:da:05:26:44:17:80:b7:cc:cf:
28:31:66:63:6c:e5:dd:37:1d:64:b4:42:34:7f:53:
db:19:ff:ba:90:19:19:dd:a4:7f:8b:ac:24:b3:29:
cc:c7:56:2b:71:d8:08:cc:5f:fb:1e:b0:08:5b:d0:
0f:91:5b:23:3a:46:3b:c1:fd:8c:03:24:8a:a9:90:
05:57:cf:74:5f:b0:c1:f5:39:42:59:84:1c:ba:d5:
3a:0b:1e:d6:65:2a:36:4b:28:e0:5c:59:0e:fd:21:
3e:b3:70:c7:3e:d5:42:bd:00:e9:b6:e9:60:9a:6f:
80:d0:5f:bc:fa:a6:d5:96:04:04:6b:ff:18:5a:5c:
4d:a8:bf:2b:4b:f4:3f:f7:a4:4d:70:1d:64:14:47:
a0:3a:66:19:d7:65:05:31:29:54:af:c2:ba:98:af:
99:b4:93:a0:13:c5:25:6f:4a:85:1d:ca:ce:28:1e:
81:4b:9c:0a:96:8b:fb:e6:6b:e0:63:b5:20:36:02:
47:26:fb:7b:8f:8c:0a:3b:61:09:59:ec:99:3c:8c:
b7:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:96:F4:31:FA:60:A2:A5:AB:53:78:0A:C7:A9:92:E9:F2:B4:E3:92
X509v3 Authority Key Identifier:
keyid:83:9D:36:3B:28:F1:C9:08:4E:1C:19:86:87:6B:B4:09:B7:9A:13:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g502OyjxyQhOHBmGh2u0CbeaE4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/a9e8a6-1cf2-4c87-b49a-5228823fb97b/1/BZb0MfpgoqWrU3gKx6mS6fK045I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/a9e8a6-1cf2-4c87-b49a-5228823fb97b/1/g502OyjxyQhOHBmGh2u0CbeaE4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.45.167.0/24
Signature Algorithm: sha256WithRSAEncryption
36:59:4a:b1:76:55:64:2c:df:08:3c:53:81:a4:1a:10:1c:d3:
34:25:29:f9:4b:2c:f3:9f:68:24:9c:26:a5:92:6c:26:30:53:
b0:9e:0a:33:6d:81:a3:68:ec:b3:1e:be:a1:60:bc:ed:74:ad:
e9:9a:56:30:60:8e:08:21:8a:4e:e2:a4:07:12:da:ee:2a:5f:
b1:39:ef:f6:8a:94:8e:90:ec:cd:8f:5a:6b:1d:61:29:ba:8f:
e1:e7:57:3b:ea:13:9c:5f:ca:36:69:50:15:2c:11:16:d8:5e:
f5:b9:40:2d:7e:4b:56:c0:04:50:4c:12:aa:74:9b:1b:e3:a1:
a3:2a:f6:20:36:97:80:fd:22:d2:ec:fb:67:78:7f:25:d1:cd:
6f:44:ed:49:0f:64:74:8e:4e:53:42:39:a9:7b:58:77:47:a8:
35:e8:43:40:f4:37:93:84:88:e4:97:c5:92:b9:01:0a:0f:42:
ee:23:8d:56:1d:11:d1:f1:aa:63:3e:53:58:c3:1c:68:70:16:
05:74:72:37:5b:4e:8b:84:4b:68:54:7d:e2:94:a4:30:8d:58:
45:29:ca:d1:8e:e3:f1:31:b4:60:42:26:9d:ab:2e:75:67:67:
b5:d9:db:f4:dc:68:50:55:2f:cc:7a:f4:d7:53:e4:37:9f:cb:
45:ee:e5:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:35 2023 by rpki-client on console-ams.rpki-client.org