Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/LOVXijUaXvJ-RdoM5HlbOvDG_hQ.roa
File: LOVXijUaXvJ-RdoM5HlbOvDG_hQ.roa (raw, json)
Hash identifier: m6nnTw4GwG3TwvYCyFzVtgvaH0+5KBkRjOQtTA499fs=
Subject key identifier: 2C:E5:57:8A:35:1A:5E:F2:7E:45:DA:0C:E4:79:5B:3A:F0:C6:FE:14
Certificate issuer: /CN=94166b704843d3d9754095c83a91b493828200a2
Certificate serial: 0A22752B
Authority key identifier: 94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/LOVXijUaXvJ-RdoM5HlbOvDG_hQ.roa
Signing time: Fri 18 Feb 2022 08:34:27 +0000
ROA not before: Fri 18 Feb 2022 08:34:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 46573
IP address blocks: 89.46.98.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 170030379 (0xa22752b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94166b704843d3d9754095c83a91b493828200a2
Validity
Not Before: Feb 18 08:34:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2ce5578a351a5ef27e45da0ce4795b3af0c6fe14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0b:df:49:a9:de:d4:f3:db:cb:c4:55:80:cc:
ab:e0:31:3b:1b:94:60:f3:3f:ad:fc:00:98:16:cf:
f7:70:72:34:12:61:24:de:56:3c:a6:9a:3e:77:84:
02:ed:e1:15:78:9f:a5:e1:27:27:24:7b:38:05:69:
e5:f4:d4:fc:98:ab:e4:b4:22:31:ee:99:9c:60:a9:
cb:b4:dc:4f:6b:fa:49:1b:2b:2a:13:24:f1:54:e1:
69:31:ea:3a:f5:51:15:fc:84:ec:d2:15:a5:37:56:
5d:f0:95:27:51:d9:d9:19:eb:bd:f4:6d:1b:9a:7e:
58:c1:28:93:d7:07:ca:d8:5a:25:30:e3:82:d2:ca:
b3:7e:5b:33:67:d0:70:5f:a2:23:24:fb:07:5f:27:
92:7b:89:09:c6:f8:da:b7:67:5f:73:85:a2:49:07:
26:bb:65:0d:d9:d2:46:99:21:2a:fc:9b:14:8f:8e:
8c:6d:b3:68:c8:4e:4b:42:f9:7f:ec:dc:20:94:0c:
78:90:f9:f8:23:b9:10:5c:bf:51:4f:98:7c:f1:57:
ca:08:46:8a:ed:36:41:51:58:02:58:91:33:7e:b1:
76:45:47:d6:b7:a1:a8:93:e0:a8:92:0c:1e:35:ab:
83:7e:f7:5d:8e:8b:ad:b1:38:bb:8f:b1:e6:c6:76:
f2:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:E5:57:8A:35:1A:5E:F2:7E:45:DA:0C:E4:79:5B:3A:F0:C6:FE:14
X509v3 Authority Key Identifier:
keyid:94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/LOVXijUaXvJ-RdoM5HlbOvDG_hQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.46.98.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:46:7f:d2:da:a7:8f:ab:ae:e0:cb:b6:98:17:65:7c:fc:4f:
5c:5c:51:7e:16:71:70:95:41:4e:66:6d:a8:97:67:98:30:c5:
7f:9a:d6:42:7d:05:cb:9a:0a:cc:01:d9:15:ec:d8:9d:07:2c:
96:11:63:c1:11:58:13:4f:93:25:0a:ab:45:c6:63:6f:67:9b:
63:17:f6:11:94:8a:6b:17:40:aa:c0:91:1c:c4:50:a6:d6:76:
bd:93:1a:5b:f6:90:93:52:dc:d4:79:5b:7d:ce:09:59:74:ea:
88:b3:ce:69:52:40:30:ac:e6:6b:65:07:e1:cd:9a:bc:87:de:
69:a5:5f:a1:a0:dd:32:36:be:19:aa:d7:99:b2:c2:9a:f6:cc:
ad:74:8d:1f:18:e7:4e:64:b2:ed:25:fb:7a:45:3a:e2:06:74:
c6:08:59:7c:3f:d7:17:4c:85:0b:33:71:08:31:cf:a8:56:3b:
7f:5e:11:bd:9a:bd:d9:16:14:44:ec:99:cb:bd:aa:31:79:ea:
5d:cc:73:1a:b7:49:08:fd:4d:1f:21:bd:16:15:f8:cf:19:38:
78:74:33:88:ce:b1:2a:1e:b4:db:f7:00:25:09:f8:da:b6:7d:
87:8e:6d:a2:91:db:fe:1e:d8:a4:ef:ff:0d:b2:a0:41:71:84:
39:31:aa:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:25 2024 by rpki-client on console-ams.rpki-client.org