Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/Y_okJI1jHd-AJPw6jiKwwnrxnV8.roa
File: Y_okJI1jHd-AJPw6jiKwwnrxnV8.roa (raw, json)
Hash identifier: lTDSGtdYefbwBzjwtdMsXXKyOTBeoRcYScbDjMU5QbU=
Subject key identifier: 63:FA:24:24:8D:63:1D:DF:80:24:FC:3A:8E:22:B0:C2:7A:F1:9D:5F
Certificate issuer: /CN=94166b704843d3d9754095c83a91b493828200a2
Certificate serial: 0A2854F5
Authority key identifier: 94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/Y_okJI1jHd-AJPw6jiKwwnrxnV8.roa
Signing time: Fri 18 Feb 2022 08:46:27 +0000
ROA not before: Fri 18 Feb 2022 08:46:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 0
IP address blocks: 89.46.98.0/23 maxlen: 23
89.46.98.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 170415349 (0xa2854f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94166b704843d3d9754095c83a91b493828200a2
Validity
Not Before: Feb 18 08:46:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=63fa24248d631ddf8024fc3a8e22b0c27af19d5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:57:4c:b8:b3:d5:63:7e:ec:db:eb:8a:6e:c5:
cb:90:58:b6:9b:dc:0c:33:87:6d:81:b1:2e:5a:f7:
8f:a9:e6:c4:2b:7c:c9:96:13:10:7c:b4:ab:6f:5c:
17:19:32:dc:e0:6d:0e:65:bf:2f:2d:c1:a7:65:74:
ab:6d:52:82:e0:a1:9f:7d:57:00:84:65:2d:9c:0f:
56:b1:1d:02:a6:87:c8:94:60:de:eb:5e:f1:e9:7a:
da:c6:57:03:59:39:33:e9:41:8f:6c:ab:e8:4f:02:
0b:e1:63:59:42:8b:fa:3a:8c:3b:f5:20:47:48:0d:
6b:cd:ac:b5:c3:f2:4b:2a:c4:69:7b:95:13:53:31:
bd:d0:49:df:89:99:78:26:11:d0:0d:6d:a7:25:c5:
20:7f:3d:5d:5d:01:ab:d9:09:7d:a4:32:3f:6b:1a:
38:93:78:df:1a:71:9c:57:19:e6:1f:22:5a:fd:53:
ec:0a:86:e9:fa:6e:14:39:39:ee:2b:6d:78:33:fc:
1e:94:a5:1d:32:7c:a6:5b:a6:ec:e9:9e:b2:09:f0:
d7:8c:ef:47:15:dc:8b:50:d7:57:e9:3b:91:16:8c:
14:e3:7d:f1:6c:46:ba:e3:94:b7:8e:20:26:58:ee:
7b:04:19:b6:81:17:75:12:d7:f4:b2:b8:1b:2b:83:
10:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:FA:24:24:8D:63:1D:DF:80:24:FC:3A:8E:22:B0:C2:7A:F1:9D:5F
X509v3 Authority Key Identifier:
keyid:94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/Y_okJI1jHd-AJPw6jiKwwnrxnV8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.46.98.0/23
Signature Algorithm: sha256WithRSAEncryption
8f:5f:11:2f:b7:b7:7d:45:1a:04:5f:67:2f:d4:7f:9c:61:ae:
8e:1c:92:3f:0c:41:7e:67:41:3f:75:25:f2:f5:f6:3a:3f:d1:
37:99:85:32:8e:f5:d9:a1:f0:d3:9e:f9:42:21:c6:59:04:54:
bb:e6:77:9d:f5:5b:a5:bd:a9:7b:ac:d9:53:7e:f4:32:4c:42:
cd:b8:bb:5f:77:f4:67:32:5d:b8:fb:82:a1:d2:7a:fc:e6:5a:
7d:f3:71:9d:be:bd:21:55:eb:60:fd:c8:a9:81:8d:61:7c:41:
d6:47:ae:ef:19:74:6e:ae:92:ca:36:82:d3:3f:0c:ec:c3:9c:
30:b2:0a:3c:c6:2b:a5:78:5d:8f:d3:e5:7d:70:bd:e5:9e:47:
ba:13:73:d2:e0:45:c8:3c:97:de:17:a0:f2:51:ee:db:6c:8e:
60:fb:d8:0b:93:64:1d:9c:0a:fb:44:83:d1:8a:7a:d9:c8:d9:
e7:03:33:60:ee:2d:3e:78:d2:b7:38:5a:d7:97:6d:f4:68:93:
cc:d9:ee:54:ba:a9:4f:c1:90:30:cc:0c:0b:5d:5d:34:a7:57:
fb:27:53:ee:0d:08:37:9a:d7:0a:26:da:63:28:39:db:46:f7:
6c:43:a8:49:c9:08:46:97:e0:57:04:1d:60:d9:63:ac:19:6b:
79:70:17:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:25 2024 by rpki-client on console-ams.rpki-client.org