Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/oueJz5a04cFt_nFlRfddd_nWuyc.roa
File: oueJz5a04cFt_nFlRfddd_nWuyc.roa (raw, json)
Hash identifier: EFITsMeMzw1Z4bOM9fU4uc5NM62VjL+mAm/Y5XAxO+Y=
Subject key identifier: A2:E7:89:CF:96:B4:E1:C1:6D:FE:71:65:45:F7:5D:77:F9:D6:BB:27
Certificate issuer: /CN=94166b704843d3d9754095c83a91b493828200a2
Certificate serial: 0B4F3A21
Authority key identifier: 94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/oueJz5a04cFt_nFlRfddd_nWuyc.roa
Signing time: Wed 01 Jun 2022 07:34:24 +0000
ROA not before: Wed 01 Jun 2022 07:34:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205421
IP address blocks: 89.46.96.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 189741601 (0xb4f3a21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94166b704843d3d9754095c83a91b493828200a2
Validity
Not Before: Jun 1 07:34:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a2e789cf96b4e1c16dfe716545f75d77f9d6bb27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b8:4b:f6:ac:79:83:1a:a3:c1:db:5c:93:79:
1c:21:45:9c:e3:64:57:eb:36:75:1d:a4:c8:bc:c7:
a8:3a:e1:cd:5a:82:52:5f:54:3e:cc:3b:0f:47:08:
cc:dd:36:08:c7:c5:25:fb:69:6d:5a:e2:f0:b3:54:
7d:3e:ce:a5:a1:42:8b:fa:f1:c9:98:be:e7:79:2b:
14:4d:5d:85:a2:77:ed:74:c1:5f:e0:0e:70:1b:4f:
bc:dc:c8:0b:f9:25:46:f0:9c:d8:c2:72:2a:df:25:
32:fc:4f:dc:38:fc:50:bb:8a:43:6f:f7:59:0f:28:
21:ea:03:14:b2:dd:f8:0a:be:23:8e:84:63:d7:0f:
f7:82:44:85:a1:12:95:a3:52:44:be:36:5d:30:c4:
9c:fd:19:9c:36:8f:4f:5c:70:2d:6c:bc:ae:7f:c2:
d6:d5:55:8f:d3:02:7d:0d:a4:3b:7c:86:69:6c:f8:
a2:63:49:5b:45:ab:3f:91:96:69:2f:79:f2:02:20:
06:3e:0c:9f:05:3d:c4:90:74:d9:e7:90:26:a3:06:
27:26:80:6b:df:b8:e6:dc:69:47:c2:96:be:c3:b9:
bc:f1:70:24:06:cd:50:63:e0:99:78:4c:c5:7a:7d:
47:d8:92:65:d6:f2:e5:22:b0:8f:a3:f0:1f:89:fc:
1b:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:E7:89:CF:96:B4:E1:C1:6D:FE:71:65:45:F7:5D:77:F9:D6:BB:27
X509v3 Authority Key Identifier:
keyid:94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/oueJz5a04cFt_nFlRfddd_nWuyc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.46.96.0/24
Signature Algorithm: sha256WithRSAEncryption
90:70:24:70:28:b2:5f:ec:60:c4:c0:cc:56:2f:99:b8:b4:b6:
d9:54:44:03:23:c1:56:7c:7e:9e:6e:58:3e:9c:f8:dc:b8:7d:
f6:77:e1:c3:46:d8:57:fc:0e:0c:16:db:eb:bf:2b:74:c1:61:
06:8d:37:45:65:e6:2b:29:56:f5:88:44:83:c2:9d:e1:4e:e1:
c5:b4:2a:32:8e:6e:e7:23:96:d2:98:75:c9:ea:af:5a:2a:50:
87:e8:fa:c5:09:a5:2d:47:26:cc:8e:1f:c0:f8:5d:2b:e0:06:
ad:96:9a:46:25:12:df:68:56:f3:d2:01:26:1e:d9:ae:81:73:
ad:38:80:70:7f:98:98:f9:35:f8:fd:11:c5:84:a7:6a:bc:a4:
30:bc:f1:ee:50:20:22:58:45:d3:42:fb:24:7d:c6:d0:6b:87:
8e:98:17:3b:90:88:c2:69:dc:c8:2b:46:09:fd:7d:bb:22:28:
32:fd:0c:c3:b5:22:5c:6f:52:7a:36:60:2e:cb:fb:94:6b:1d:
7d:eb:d7:b3:bb:eb:46:ce:59:09:45:2d:b8:6d:a6:0e:e9:28:
20:3a:99:df:9d:a8:c0:e1:ae:04:6c:59:66:fa:00:35:76:f0:
8e:0e:d4:a2:8d:3e:4e:b3:65:72:b7:40:bb:80:ab:85:33:fd:
51:b2:4d:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:42 2023 by rpki-client on console-ams.rpki-client.org