Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/a9e8a6-1cf2-4c87-b49a-5228823fb97b/1/IhhyuwhBYPGefLB948YIjXhtU58.roa
File: IhhyuwhBYPGefLB948YIjXhtU58.roa (raw, json)
Hash identifier: zCMc2Cu6LbdPdChBVFDpe9SR41kEcuB3o1bPukbCobc=
Subject key identifier: 22:18:72:BB:08:41:60:F1:9E:7C:B0:7D:E3:C6:08:8D:78:6D:53:9F
Certificate issuer: /CN=839d363b28f1c9084e1c1986876bb409b79a138c
Certificate serial: 628A
Authority key identifier: 83:9D:36:3B:28:F1:C9:08:4E:1C:19:86:87:6B:B4:09:B7:9A:13:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g502OyjxyQhOHBmGh2u0CbeaE4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/a9e8a6-1cf2-4c87-b49a-5228823fb97b/1/IhhyuwhBYPGefLB948YIjXhtU58.roa
Signing time: Sat 29 Jan 2022 19:34:52 +0000
ROA not before: Sat 29 Jan 2022 19:34:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 33696
IP address blocks: 94.45.173.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25226 (0x628a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=839d363b28f1c9084e1c1986876bb409b79a138c
Validity
Not Before: Jan 29 19:34:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=221872bb084160f19e7cb07de3c6088d786d539f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:32:62:ac:c2:6a:e1:22:a2:3a:25:67:72:ec:
ac:fe:4e:ad:9f:c6:ce:4b:6b:75:8e:81:10:0d:63:
3a:30:6b:2c:23:d9:c4:db:9b:e2:b6:44:ad:23:3c:
e7:db:86:35:ea:6e:cd:5e:e1:e6:b2:8f:a7:bb:85:
cb:2c:16:3b:14:41:70:52:a7:89:c6:7b:80:83:48:
72:20:46:d2:5e:20:5f:37:83:34:0a:01:e1:a0:de:
45:fe:6d:9d:52:fb:36:65:42:da:55:62:65:26:4a:
b5:9b:e4:94:d0:29:6c:64:ff:f6:71:ba:e3:ed:e0:
5f:28:28:ec:3f:15:9f:9f:78:25:09:a9:c8:0d:a8:
1c:28:95:a1:5c:f2:f7:f2:39:1e:b4:af:e8:d6:a4:
fa:37:85:66:17:6a:b6:05:66:6d:ce:77:23:5c:df:
06:f5:e1:b2:22:a9:8a:8c:8f:00:54:af:a6:07:42:
81:09:a3:3e:16:d7:a0:6c:87:8a:f5:eb:7c:21:47:
b1:93:02:bc:68:1f:1d:c4:19:d8:9e:91:bb:1a:aa:
42:30:7e:0e:9e:61:5a:7d:ce:1e:84:c2:c6:e9:a3:
13:b5:b1:f9:ef:94:ae:27:90:31:d9:d8:ac:90:47:
a4:61:2f:5d:58:c6:05:4e:f4:52:4e:6e:e1:25:1a:
15:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:18:72:BB:08:41:60:F1:9E:7C:B0:7D:E3:C6:08:8D:78:6D:53:9F
X509v3 Authority Key Identifier:
keyid:83:9D:36:3B:28:F1:C9:08:4E:1C:19:86:87:6B:B4:09:B7:9A:13:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g502OyjxyQhOHBmGh2u0CbeaE4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/a9e8a6-1cf2-4c87-b49a-5228823fb97b/1/IhhyuwhBYPGefLB948YIjXhtU58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/a9e8a6-1cf2-4c87-b49a-5228823fb97b/1/g502OyjxyQhOHBmGh2u0CbeaE4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.45.173.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:71:5a:80:27:ae:5c:c9:aa:e6:69:b6:13:66:eb:b1:2f:f0:
c7:c5:2a:3d:57:e9:ca:d5:c9:e8:fc:7d:19:26:00:e5:44:78:
88:a9:96:3b:a3:eb:b7:20:c3:e6:59:79:21:8d:8c:c9:bf:08:
54:f8:e3:88:0b:70:58:36:3e:4a:54:c0:2e:08:c2:25:4b:30:
b7:77:5c:7d:4e:9d:01:5e:8f:d4:12:e1:85:81:e1:49:18:3e:
90:f0:dc:c9:88:7f:d1:9c:64:b8:76:43:34:cb:18:3c:e7:0a:
d4:8b:95:39:2e:8d:82:bb:76:85:ea:f6:c6:57:d2:96:31:0b:
37:78:b4:84:61:60:72:89:06:81:30:d5:5e:84:96:e8:bb:27:
69:d3:57:b6:c7:83:80:79:2b:57:ff:b8:4a:1f:bb:69:50:10:
db:96:73:6f:1e:54:59:aa:c3:39:67:aa:ae:35:9c:07:4a:7e:
c2:c6:77:92:8c:3c:26:66:43:dd:86:55:c4:ec:34:0c:3b:fe:
d2:f2:8d:f2:d7:16:d8:b4:c9:35:95:b9:13:6a:0c:93:20:f4:
c6:f2:f3:b5:e0:eb:e5:1f:6a:e8:40:f2:f4:3a:47:e6:5c:75:
d4:63:42:f4:b0:5f:0e:53:db:04:33:51:20:14:1f:66:ec:c4:
94:5e:47:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:35 2023 by rpki-client on console-ams.rpki-client.org