Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/vbwrQyTfygn-3lBOcQuwuCmVJRg.roa
File: vbwrQyTfygn-3lBOcQuwuCmVJRg.roa (raw, json)
Hash identifier: Uy2lCPVBt+OwPguOXWuRjrnmNNpCBOW1Oo9sAC3KZkY=
Subject key identifier: BD:BC:2B:43:24:DF:CA:09:FE:DE:50:4E:71:0B:B0:B8:29:95:25:18
Certificate issuer: /CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
Certificate serial: 01190466
Authority key identifier: 8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/vbwrQyTfygn-3lBOcQuwuCmVJRg.roa
Signing time: Sat 01 Jan 2022 06:03:49 +0000
ROA not before: Sat 01 Jan 2022 06:03:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 45.85.188.0/23 maxlen: 23
91.212.45.0/24 maxlen: 24
195.82.132.0/23 maxlen: 23
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18416742 (0x1190466)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
Validity
Not Before: Jan 1 06:03:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bdbc2b4324dfca09fede504e710bb0b829952518
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:41:cc:da:39:3c:da:eb:17:91:29:48:b0:a3:
20:1f:77:82:31:0e:79:56:02:85:7e:ba:31:3c:cd:
f3:5e:2b:9c:c6:87:c6:de:32:32:ff:b3:be:b4:34:
c6:e1:a4:37:2e:a8:8b:89:da:b2:33:89:b4:a3:2a:
4d:0d:ac:23:ba:41:ed:fd:c5:aa:6d:00:04:43:29:
48:f8:cc:62:a3:55:c8:56:5e:d5:d6:a4:a9:1c:30:
31:2d:fa:a0:8a:e7:90:4d:93:b6:b9:d5:08:ba:59:
a0:0f:b1:ec:22:3e:32:59:39:6f:dc:0c:31:f5:e7:
fd:55:e5:1c:16:e4:65:2f:4c:24:46:aa:bd:6a:69:
3a:ea:37:44:75:60:11:74:7c:d2:db:14:61:b8:22:
3f:f0:22:46:c1:bd:7d:73:41:2f:47:ee:5e:5a:59:
51:36:cb:b0:f5:0b:4a:ed:26:b8:38:fa:12:fe:28:
7f:07:27:66:c0:d1:11:e9:d7:f4:0f:96:2d:ed:cc:
fb:6b:45:5c:be:99:b1:be:39:0b:b8:7d:d2:5a:5f:
87:a4:c9:23:13:fa:1d:4f:a5:da:4d:ee:69:38:af:
16:ae:23:86:a6:19:10:60:55:9e:5b:43:48:17:10:
3f:29:64:4f:83:14:00:a0:0d:56:6e:bf:c6:51:a0:
09:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:BC:2B:43:24:DF:CA:09:FE:DE:50:4E:71:0B:B0:B8:29:95:25:18
X509v3 Authority Key Identifier:
keyid:8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/vbwrQyTfygn-3lBOcQuwuCmVJRg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.188.0/23
91.212.45.0/24
195.82.132.0/23
Signature Algorithm: sha256WithRSAEncryption
6b:fd:6d:2b:aa:35:da:26:6d:d7:79:c0:6a:b3:74:a7:24:85:
fc:5a:d0:99:c8:80:ee:2e:3a:3e:8b:e1:e6:b4:51:84:00:72:
6b:07:0b:73:2d:90:16:7c:3e:47:67:8d:3b:d0:cc:53:9e:6c:
7c:96:a6:d2:f7:45:c9:36:73:75:a9:62:54:d3:1b:03:b7:1f:
08:6f:10:81:eb:26:2b:9e:3d:71:39:c7:c2:d9:40:ad:6d:7f:
b9:df:c6:07:d6:95:e7:6f:0a:79:5f:a1:a9:53:63:f4:3c:70:
06:b0:87:7d:16:54:1a:00:1f:2f:20:2a:73:1f:80:ed:3f:b7:
54:a5:fc:f4:6e:7d:3e:4e:a2:a5:d5:36:90:5a:e0:2c:23:b9:
8e:9b:30:42:8b:d3:1e:f0:fd:3a:93:b8:89:55:21:38:11:ff:
c6:53:0e:0b:2f:e4:38:75:67:84:00:3e:06:72:30:e5:75:91:
69:53:5a:70:4b:15:7e:07:57:7e:f3:2f:66:6c:59:29:13:ac:
00:0c:85:98:be:7a:51:48:c6:aa:09:71:a0:32:81:4c:12:26:
88:12:ce:73:4f:0c:53:f6:8b:bf:26:ad:a6:75:a3:38:b0:3a:
53:e9:5d:f5:07:b9:a4:19:21:e3:99:eb:9c:27:43:fa:b5:9c:
05:9b:7e:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:02 2023 by rpki-client on console-fra.rpki-client.org