Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/uwyxvnva63krfsfd2YTU4XmmIh8.roa
File: uwyxvnva63krfsfd2YTU4XmmIh8.roa (raw, json)
Hash identifier: AgMLWNWPnjmTreCpc6C99lini6mB8BZFSfq8uPEetrw=
Subject key identifier: BB:0C:B1:BE:7B:DA:EB:79:2B:7E:C7:DD:D9:84:D4:E1:79:A6:22:1F
Certificate issuer: /CN=21bad74e7f6c0949a2736a57478496d7d8b450e6
Certificate serial: 01828B9CC747E952E8580563A3029D458D3F
Authority key identifier: 21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/uwyxvnva63krfsfd2YTU4XmmIh8.roa
Signing time: Thu 11 Aug 2022 06:34:43 +0000
ROA not before: Thu 11 Aug 2022 06:34:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202940
IP address blocks: 147.234.23.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:8b:9c:c7:47:e9:52:e8:58:05:63:a3:02:9d:45:8d:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21bad74e7f6c0949a2736a57478496d7d8b450e6
Validity
Not Before: Aug 11 06:34:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bb0cb1be7bdaeb792b7ec7ddd984d4e179a6221f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:8c:d8:dd:a1:91:59:51:04:99:18:4d:ab:31:
0a:24:6f:aa:70:7f:d0:14:57:dc:22:2c:91:62:57:
e5:ce:d7:18:f5:6c:98:f2:a9:44:66:db:e1:02:2b:
4a:99:fd:1b:ef:08:c4:a6:e1:a8:42:8d:79:26:38:
aa:34:cc:0b:0d:d2:e8:83:57:ce:60:cd:1a:db:8a:
46:89:05:26:15:7b:7e:0d:16:f4:24:93:d5:38:e8:
cc:0e:27:0c:fc:7f:66:cc:47:f4:76:58:4c:80:39:
10:ab:8b:9b:62:67:2b:33:7b:6a:eb:f1:46:d5:48:
0f:59:88:b7:9c:8e:d8:cb:43:15:c8:e3:be:26:0c:
30:a6:a9:05:81:af:36:7c:c3:a4:e4:83:73:48:4b:
04:a3:24:56:10:04:6d:b9:db:95:34:5b:51:c4:d9:
db:a3:65:6d:27:d3:6c:29:64:65:da:63:96:ca:83:
0f:4b:b3:5e:3d:1d:bd:8a:b6:9e:26:13:ab:68:63:
89:e0:a5:3b:eb:bd:ac:0a:a2:41:86:3d:9a:e9:0c:
7b:50:ef:5d:3a:de:74:96:08:26:b5:af:d1:77:26:
b7:74:29:60:00:ed:a0:e1:aa:4a:20:35:92:a4:12:
f4:38:2b:d9:9d:bd:22:9d:31:f0:40:5e:2c:7c:8c:
2a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:0C:B1:BE:7B:DA:EB:79:2B:7E:C7:DD:D9:84:D4:E1:79:A6:22:1F
X509v3 Authority Key Identifier:
keyid:21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/uwyxvnva63krfsfd2YTU4XmmIh8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.234.23.0/24
Signature Algorithm: sha256WithRSAEncryption
16:7b:f8:90:59:2e:91:5d:58:22:77:df:4e:9b:6b:3b:f3:6a:
6d:c0:c5:25:d7:2d:ce:13:4c:11:59:25:15:56:ee:46:bb:40:
ac:73:80:c3:7a:6c:f5:1b:6b:96:b1:b9:d4:d8:65:f4:0d:76:
08:46:6e:2b:53:23:9f:13:44:a5:bb:e1:8e:27:0d:5f:51:0e:
e3:6d:82:4c:dd:74:09:88:2e:6e:70:52:cb:07:90:2d:d2:02:
93:d9:87:95:89:9b:d5:ed:81:1d:01:f8:dd:f1:f6:39:d5:65:
c1:00:18:45:c6:05:8b:96:2f:3d:8e:70:70:f2:42:bc:a7:0a:
1c:cb:93:d4:6e:a2:76:a1:2b:79:11:7b:0c:e6:56:ae:eb:c5:
d1:3b:33:48:08:04:36:38:60:ff:3e:2f:75:a5:06:91:21:a4:
f4:13:72:50:de:8a:e4:5f:90:bd:66:44:90:37:23:d7:0d:e7:
2e:1e:91:e6:d7:59:90:11:ba:e2:8e:a2:25:2b:23:9f:24:3c:
cf:36:72:8a:c1:fb:71:8a:ab:96:46:68:0d:0e:92:56:24:52:
8c:02:e3:eb:7c:32:54:ce:1e:05:3b:60:f8:f2:79:61:4f:5d:
c9:6e:56:f8:bf:68:82:5b:9c:44:be:3b:f2:0a:1d:0c:c5:fb:
fa:ef:03:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:56:56 2023 by rpki-client on console-fra.rpki-client.org