Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/a9e8a6-1cf2-4c87-b49a-5228823fb97b/1/gmfZ9muMSM3hri2OZLIL-xpS9Jg.roa
File: gmfZ9muMSM3hri2OZLIL-xpS9Jg.roa (raw, json)
Hash identifier: YjhBdkVz/XtvIqptl715qUq1z/GTgayxgPtRRcKV8lw=
Subject key identifier: 82:67:D9:F6:6B:8C:48:CD:E1:AE:2D:8E:64:B2:0B:FB:1A:52:F4:98
Certificate issuer: /CN=839d363b28f1c9084e1c1986876bb409b79a138c
Certificate serial: 0182C21868307390A40677AF509CA4DE39E5
Authority key identifier: 83:9D:36:3B:28:F1:C9:08:4E:1C:19:86:87:6B:B4:09:B7:9A:13:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g502OyjxyQhOHBmGh2u0CbeaE4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/a9e8a6-1cf2-4c87-b49a-5228823fb97b/1/gmfZ9muMSM3hri2OZLIL-xpS9Jg.roa
Signing time: Sun 21 Aug 2022 20:29:15 +0000
ROA not before: Sun 21 Aug 2022 20:29:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49060
IP address blocks: 94.45.179.0/24 maxlen: 24
94.45.177.0/24 maxlen: 24
94.45.173.0/24 maxlen: 24
94.45.183.0/24 maxlen: 24
94.45.172.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:c2:18:68:30:73:90:a4:06:77:af:50:9c:a4:de:39:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=839d363b28f1c9084e1c1986876bb409b79a138c
Validity
Not Before: Aug 21 20:29:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8267d9f66b8c48cde1ae2d8e64b20bfb1a52f498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:4f:c1:8e:6c:01:60:3d:08:ed:68:00:a6:d7:
e0:37:e9:5c:82:ce:b2:1e:f7:56:4f:09:14:0a:f2:
43:33:5b:73:ab:bf:3b:f6:d7:6a:a9:20:e2:8e:50:
56:96:ae:c5:b0:8d:23:6e:d7:81:05:ac:f7:fd:e3:
d6:83:43:2e:8b:55:2e:f9:e7:77:34:62:a6:25:01:
33:f9:17:72:57:6c:e2:32:7d:d6:6c:0a:af:3b:32:
7e:c1:66:00:8a:0d:eb:ae:8c:fc:7f:09:9c:e7:15:
ce:26:7d:07:25:b7:c7:ce:ff:10:88:ef:5f:a4:bf:
9f:bf:e1:1d:22:ae:71:5b:d3:ec:5f:38:7e:fa:44:
91:e6:d0:4f:9f:7c:21:3e:62:55:32:4f:e7:54:d0:
2b:b4:2f:5e:40:d9:17:1c:c6:7c:5f:6d:e3:cb:21:
e0:8e:2e:8a:3e:fe:2f:f4:c3:55:63:23:f5:e5:b5:
0f:61:dc:c9:1f:25:32:2d:64:38:6a:17:d5:73:b2:
e3:56:c3:31:3f:2b:c6:86:af:31:a9:07:f7:0d:36:
8e:9b:c7:16:ed:46:99:45:1e:8f:17:2d:63:13:66:
62:b6:e9:9b:dd:ae:e1:8c:65:82:da:8f:7a:cc:3c:
1d:21:96:31:cb:6c:21:35:61:47:5d:5c:d2:e8:e9:
40:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:67:D9:F6:6B:8C:48:CD:E1:AE:2D:8E:64:B2:0B:FB:1A:52:F4:98
X509v3 Authority Key Identifier:
keyid:83:9D:36:3B:28:F1:C9:08:4E:1C:19:86:87:6B:B4:09:B7:9A:13:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g502OyjxyQhOHBmGh2u0CbeaE4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/a9e8a6-1cf2-4c87-b49a-5228823fb97b/1/gmfZ9muMSM3hri2OZLIL-xpS9Jg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/a9e8a6-1cf2-4c87-b49a-5228823fb97b/1/g502OyjxyQhOHBmGh2u0CbeaE4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.45.172.0/23
94.45.177.0/24
94.45.179.0/24
94.45.183.0/24
Signature Algorithm: sha256WithRSAEncryption
11:8e:6e:c0:23:6e:5d:27:42:87:70:ed:bb:c7:ea:d5:67:4d:
47:42:0c:84:9e:63:5d:4a:5a:55:d2:c0:2b:eb:54:24:d8:93:
e4:e9:0a:9e:47:70:01:8c:ed:74:b2:2e:01:28:d6:f7:c2:8b:
96:a0:33:27:71:bb:b1:67:c5:5e:4a:ea:d4:0c:91:71:a3:6a:
0e:11:4a:89:0f:37:7f:db:03:38:c3:82:33:33:b9:1a:12:43:
a6:0e:29:5d:c3:a0:e0:f7:aa:16:cb:f0:5b:6e:a9:8c:d2:cc:
dd:ef:4e:93:62:e7:53:53:4a:85:43:a2:5c:24:3d:56:b4:29:
30:bc:63:4a:07:0c:91:59:73:3a:5f:80:63:68:bf:e2:fe:8e:
5d:87:b0:26:37:f3:e9:3d:75:ff:d6:35:3d:20:e7:ea:62:1b:
27:0a:f3:06:89:e8:71:18:72:70:1a:e8:72:1d:38:80:d7:d9:
40:70:85:92:87:14:ef:a3:06:b4:88:a4:ab:67:50:95:dc:b7:
0c:62:3b:24:93:57:85:ae:c3:be:a8:c8:35:29:fc:fa:8a:08:
91:d7:e5:7a:75:bc:a0:67:3c:38:57:f5:bd:6c:4e:ac:c3:f2:
f3:6e:ff:40:6e:f9:38:18:f1:ca:47:19:49:10:7a:da:89:3a:
43:b9:d4:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:35 2023 by rpki-client on console-ams.rpki-client.org