Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/Krj7ZmuRwm--83gEZPL4PERfGlQ.roa
File: Krj7ZmuRwm--83gEZPL4PERfGlQ.roa (raw, json)
Hash identifier: fJBg14j8mTaYhqup6QxDWeAxyvrkVnve92anVCxz6to=
Subject key identifier: 2A:B8:FB:66:6B:91:C2:6F:BE:F3:78:04:64:F2:F8:3C:44:5F:1A:54
Certificate issuer: /CN=94166b704843d3d9754095c83a91b493828200a2
Certificate serial: 0B2D1439
Authority key identifier: 94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/Krj7ZmuRwm--83gEZPL4PERfGlQ.roa
Signing time: Fri 20 May 2022 07:04:29 +0000
ROA not before: Fri 20 May 2022 07:04:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 171.22.146.0/24 maxlen: 24
177.222.64.0/19 maxlen: 24
95.111.144.0/20 maxlen: 24
185.149.13.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 187503673 (0xb2d1439)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94166b704843d3d9754095c83a91b493828200a2
Validity
Not Before: May 20 07:04:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2ab8fb666b91c26fbef3780464f2f83c445f1a54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:7e:72:93:1f:b9:1e:06:f2:85:af:54:7f:05:
11:fa:60:88:99:ea:2e:1c:8f:7c:9f:39:5f:8e:fd:
c0:c4:61:17:44:1b:57:94:5d:a4:c0:a2:ce:1c:4e:
7f:31:d2:fd:19:2a:34:4a:fb:24:b8:0d:8d:00:ed:
15:2a:45:47:02:54:8c:40:93:3f:ed:8b:b3:0e:35:
85:4d:11:de:ec:83:25:fb:ad:e8:4f:24:28:09:10:
e9:18:f8:50:03:57:44:ac:bb:eb:39:ed:24:a1:21:
51:bf:1f:b9:53:8f:16:33:90:9e:32:51:d6:d0:cb:
24:c2:a5:ab:b5:b0:5f:6c:d5:be:7b:ae:fc:82:21:
f0:de:00:f6:0e:f3:93:e9:86:5e:cd:a6:29:42:38:
75:03:bb:48:8f:34:da:9d:3a:84:3c:eb:b0:ee:5c:
8e:e2:01:ab:56:c4:0f:bc:a1:f8:72:6b:bb:50:7f:
01:6e:9f:88:3d:47:14:3d:d9:f6:28:6e:ce:f1:92:
2b:a2:b5:b9:29:59:3f:04:b7:83:06:36:ff:16:5d:
3d:1d:fb:38:fa:04:e2:e7:d5:92:7f:75:1c:2c:68:
44:52:25:eb:fd:cf:1b:8a:bb:fa:67:75:4f:e5:48:
90:2f:1c:b1:a8:ed:f5:f3:3d:aa:f3:5d:35:b6:5e:
49:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:B8:FB:66:6B:91:C2:6F:BE:F3:78:04:64:F2:F8:3C:44:5F:1A:54
X509v3 Authority Key Identifier:
keyid:94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/Krj7ZmuRwm--83gEZPL4PERfGlQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.111.144.0/20
171.22.146.0/24
177.222.64.0/19
185.149.13.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:75:3e:d2:96:6b:70:5a:80:67:82:95:50:d1:ec:e1:49:31:
f2:0f:0e:4c:31:c8:2a:94:c0:b0:c9:b4:16:74:c1:7a:98:b7:
16:6e:43:97:71:0c:01:c9:77:43:1a:a6:1e:2e:40:5f:3f:32:
66:51:e7:66:15:7c:e1:73:8c:33:b2:4a:99:e4:86:2f:55:c0:
6f:a0:eb:2f:a8:82:dc:2d:af:0a:cd:46:8c:a7:dc:7f:f8:c4:
0a:38:4f:4e:92:2a:cc:b9:9c:37:a7:c8:32:95:c8:8e:1b:a5:
d1:ea:50:c4:27:9e:96:01:56:95:67:70:c0:5a:34:30:c6:d1:
bd:5f:df:65:93:ae:bf:39:9e:82:76:b9:d9:0f:13:ea:fc:bd:
f0:3c:22:04:b5:a3:63:2c:47:8b:e7:7e:31:6f:e7:68:43:99:
d2:40:8b:09:22:34:f8:35:65:e4:d6:df:27:26:d8:da:37:18:
79:23:d6:0c:06:25:ea:58:9b:9b:2e:2d:79:20:b0:03:d4:03:
32:5a:d9:6d:92:d3:e7:1b:fb:a2:9b:23:30:cf:a7:75:3d:37:
1b:5a:de:5f:83:11:12:37:cd:f4:8c:00:73:68:5d:59:d8:60:
9b:f6:0d:15:70:56:61:1d:15:df:35:38:92:2e:0a:6b:d6:60:
b5:07:b8:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:01 2023 by rpki-client on console-fra.rpki-client.org