Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/c6peo4Q7jUX1lhfW4A_jIUUgds0.roa
File: c6peo4Q7jUX1lhfW4A_jIUUgds0.roa (raw, json)
Hash identifier: DaVvf2MPKSIEOHJ9/3jxdMGM8zIgDxWWYAXvWUKf7+U=
Subject key identifier: 73:AA:5E:A3:84:3B:8D:45:F5:96:17:D6:E0:0F:E3:21:45:20:76:CD
Certificate issuer: /CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
Certificate serial: 027073D7
Authority key identifier: 8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/c6peo4Q7jUX1lhfW4A_jIUUgds0.roa
Signing time: Wed 25 May 2022 08:05:17 +0000
ROA not before: Wed 25 May 2022 08:05:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 64487
IP address blocks: 45.93.148.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40924119 (0x27073d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
Validity
Not Before: May 25 08:05:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=73aa5ea3843b8d45f59617d6e00fe321452076cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:fc:cd:a6:1f:6f:aa:70:f3:e5:bd:6b:19:3b:
cd:4c:2b:63:e4:2c:02:d5:b5:9a:9e:6d:30:de:49:
c2:d8:76:d9:bd:cb:8e:60:17:bf:64:19:63:86:62:
cb:e8:f3:1c:51:95:13:42:af:3c:85:6f:19:ca:fc:
f9:a4:69:ad:59:ea:5a:ae:cb:63:41:ab:14:e1:b9:
7d:55:a0:d8:d7:36:c6:53:16:64:f3:ce:af:a6:96:
1e:6b:12:12:4a:9c:73:11:4c:72:3c:7f:f5:ff:47:
50:79:3f:74:4e:a4:31:da:5b:62:d3:51:5f:ec:5c:
79:05:72:9a:42:9d:d0:59:2a:f0:2b:a5:4d:b9:22:
bb:29:22:40:0c:bc:64:0f:4e:e1:e9:ea:4b:a6:95:
c0:a6:2f:fd:fa:ef:16:81:4a:55:7b:02:ba:a7:97:
46:ce:20:1b:ba:e0:40:28:cc:45:0c:aa:6a:60:1c:
ee:ab:54:d0:f5:9e:06:59:56:59:e2:c9:42:0f:5c:
1d:6d:9f:52:b1:20:37:6a:23:d8:a6:e5:48:0e:96:
87:f1:93:d2:a2:de:8c:5c:58:a2:ab:2e:38:e8:6f:
12:93:df:3f:89:30:e3:8a:22:78:27:17:ef:f0:05:
ac:82:60:67:da:7b:6f:f7:3c:60:38:24:4e:63:47:
90:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:AA:5E:A3:84:3B:8D:45:F5:96:17:D6:E0:0F:E3:21:45:20:76:CD
X509v3 Authority Key Identifier:
keyid:8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/c6peo4Q7jUX1lhfW4A_jIUUgds0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.148.0/24
Signature Algorithm: sha256WithRSAEncryption
11:f4:3f:21:10:39:cc:e8:8c:9c:a9:82:d3:c3:d0:6b:ae:58:
a0:0e:67:ef:8b:1c:88:e7:16:ab:c7:83:50:be:cb:14:7d:35:
80:ef:f1:d7:16:ea:eb:08:8c:95:51:08:ff:72:b7:15:3f:4a:
7e:5b:93:b7:42:b3:57:07:c5:01:bc:fc:55:20:c2:9a:db:19:
df:b5:62:b6:f4:91:68:4e:62:46:bd:dd:7b:70:5c:42:41:a2:
6f:ed:c8:f9:b4:12:a8:00:e7:cc:21:b1:e1:f8:42:97:f1:70:
f7:46:f9:88:1a:90:b4:f7:76:51:22:95:be:fe:90:5d:62:86:
d8:da:2f:6d:a3:51:ae:b1:1f:7c:fc:4a:66:19:0d:b6:33:5b:
7c:6d:48:3f:1d:58:64:e5:62:8b:31:8b:52:af:fb:21:02:87:
80:50:45:38:8d:b9:ac:a6:97:8e:b7:6a:f0:6d:85:18:5b:9d:
37:53:72:41:d0:52:17:e6:b3:0e:b6:8e:02:48:27:68:a7:5c:
31:44:bd:2a:b9:bf:92:36:d0:f7:7e:9f:54:93:88:51:b3:a7:
e2:1e:d0:72:ad:67:34:10:90:b3:aa:90:14:50:4a:1b:20:33:
93:89:a5:fe:88:15:bf:f0:20:eb:9b:d2:e7:27:34:c5:e0:ee:
bf:99:44:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:02 2023 by rpki-client on console-fra.rpki-client.org