Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/a9e8a6-1cf2-4c87-b49a-5228823fb97b/1/Uhn3JQugmHMJ8lMrjhWRl5qmKFY.roa
File: Uhn3JQugmHMJ8lMrjhWRl5qmKFY.roa (raw, json)
Hash identifier: ypul637EOAS9Ij3W98z9eAguCyPF1kMYIXctsM/TZRY=
Subject key identifier: 52:19:F7:25:0B:A0:98:73:09:F2:53:2B:8E:15:91:97:9A:A6:28:56
Certificate issuer: /CN=839d363b28f1c9084e1c1986876bb409b79a138c
Certificate serial: 032F37
Authority key identifier: 83:9D:36:3B:28:F1:C9:08:4E:1C:19:86:87:6B:B4:09:B7:9A:13:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g502OyjxyQhOHBmGh2u0CbeaE4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/a9e8a6-1cf2-4c87-b49a-5228823fb97b/1/Uhn3JQugmHMJ8lMrjhWRl5qmKFY.roa
Signing time: Sat 29 Jan 2022 19:34:54 +0000
ROA not before: Sat 29 Jan 2022 19:34:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60781
IP address blocks: 94.45.177.0/24 maxlen: 24
94.45.172.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 208695 (0x32f37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=839d363b28f1c9084e1c1986876bb409b79a138c
Validity
Not Before: Jan 29 19:34:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5219f7250ba0987309f2532b8e1591979aa62856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:99:a7:94:ea:b0:c7:0e:85:89:86:f6:e2:4e:
0a:6c:b4:67:35:f3:88:27:a0:52:e8:6a:d5:31:32:
95:71:65:e1:6a:37:5f:15:27:c6:fc:64:e0:14:88:
cb:58:d1:6d:9a:6b:79:e4:91:43:01:85:e1:08:2d:
85:5c:d4:2e:c6:31:f4:9e:f6:02:4b:23:ef:23:06:
5c:ec:d0:75:6e:18:2f:4c:4f:90:01:dc:c9:ec:e3:
3a:b7:4e:a0:23:84:97:0a:57:fe:9e:b9:fd:48:a1:
4d:32:2e:01:b8:93:00:56:62:fd:27:d2:d6:5b:2b:
fd:b4:f8:79:1f:b2:46:dc:d0:80:53:5e:0d:57:f2:
64:0b:1d:db:5f:a8:8f:56:9e:8b:12:32:43:bd:3e:
fc:3e:14:29:1e:19:2d:d3:80:33:77:e6:b5:35:7c:
32:1a:5b:45:52:c3:7f:65:f3:59:57:46:69:66:7f:
31:44:9f:01:cf:2f:e0:70:cd:11:4d:19:23:8f:26:
cd:11:6e:ef:a8:d1:6d:3a:e5:b2:b3:49:1d:7f:f2:
6b:47:9d:0a:1d:03:3e:a7:fb:45:69:fb:1a:6a:6c:
b2:0b:b9:06:48:b3:86:e9:e6:84:6a:9f:f7:0e:76:
d7:8e:3a:fa:93:a3:c7:2f:8f:51:89:4f:20:2a:d3:
d8:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:19:F7:25:0B:A0:98:73:09:F2:53:2B:8E:15:91:97:9A:A6:28:56
X509v3 Authority Key Identifier:
keyid:83:9D:36:3B:28:F1:C9:08:4E:1C:19:86:87:6B:B4:09:B7:9A:13:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g502OyjxyQhOHBmGh2u0CbeaE4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/a9e8a6-1cf2-4c87-b49a-5228823fb97b/1/Uhn3JQugmHMJ8lMrjhWRl5qmKFY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/a9e8a6-1cf2-4c87-b49a-5228823fb97b/1/g502OyjxyQhOHBmGh2u0CbeaE4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.45.172.0/24
94.45.177.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:f6:58:a1:58:34:bf:e5:b7:e0:c9:0c:73:dc:40:28:ab:51:
74:8e:28:47:14:36:d7:04:a8:61:3c:d7:7a:cf:e3:69:03:ae:
59:5d:7b:44:07:c3:b0:04:54:05:6e:0e:a2:68:c4:44:34:81:
5a:27:c2:d1:6b:c9:5b:28:b3:10:e4:8e:80:96:d2:7b:18:2f:
73:89:84:b6:ad:b0:2d:57:ac:45:02:e9:62:5b:c7:33:5a:35:
61:0d:43:b4:a5:2b:8f:a9:7f:0a:cb:d6:8d:43:d5:3c:a1:f4:
9b:1d:46:08:78:7e:a7:fb:4e:95:24:9a:42:f2:8f:8d:85:e2:
4a:6c:6b:34:8e:54:28:74:6c:a3:1f:2a:c6:88:2c:3b:f5:5e:
36:82:43:90:40:a2:20:8f:2c:f0:44:34:0f:45:4b:bc:75:24:
38:c0:25:8a:18:98:40:ba:65:08:c5:a1:f1:9b:a7:bf:5e:b4:
85:4f:83:ca:42:d1:33:6a:bb:3b:5d:e1:84:20:76:96:85:79:
cb:8d:8a:55:29:ef:fc:04:02:db:75:67:7b:ee:c3:18:f7:11:
5e:c7:9d:84:1d:7a:00:6c:eb:71:6f:49:d5:16:64:84:4c:83:
f3:4b:59:cd:9e:20:32:35:5a:39:f1:23:8c:59:1a:20:37:c8:
2f:da:ca:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:35 2023 by rpki-client on console-ams.rpki-client.org