Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/72cc4a-2d9c-4808-823e-1454ffe6182c/1/AO7-rPKa8jjOZJeHlqI2DDNwov8.roa
File: AO7-rPKa8jjOZJeHlqI2DDNwov8.roa (raw, json)
Hash identifier: 70XVn15635cF2shVUlk+pbfF17AMFcY/xrXaVqxf3kI=
Subject key identifier: 00:EE:FE:AC:F2:9A:F2:38:CE:64:97:87:96:A2:36:0C:33:70:A2:FF
Certificate issuer: /CN=174847f8667d52fa2cf9cf9afcc43a07915575ca
Certificate serial: 01835A9C85464C0B1526455251E06D814215
Authority key identifier: 17:48:47:F8:66:7D:52:FA:2C:F9:CF:9A:FC:C4:3A:07:91:55:75:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F0hH-GZ9Uvos-c-a_MQ6B5FVdco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/72cc4a-2d9c-4808-823e-1454ffe6182c/1/AO7-rPKa8jjOZJeHlqI2DDNwov8.roa
Signing time: Tue 20 Sep 2022 11:15:50 +0000
ROA not before: Tue 20 Sep 2022 11:15:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 0
IP address blocks: 82.208.20.0/22 maxlen: 24
109.123.240.0/20 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:5a:9c:85:46:4c:0b:15:26:45:52:51:e0:6d:81:42:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=174847f8667d52fa2cf9cf9afcc43a07915575ca
Validity
Not Before: Sep 20 11:15:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=00eefeacf29af238ce64978796a2360c3370a2ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:df:7e:ac:81:69:a5:32:72:ef:ff:3c:25:b3:
f8:47:9b:a1:6b:1a:83:1f:07:c2:6c:55:9a:67:11:
4c:d8:fd:05:9b:45:e1:83:0c:d7:d6:d5:f6:a2:5a:
2b:6f:3c:42:40:60:f3:cf:08:ae:0b:ab:59:b0:ff:
21:b2:1f:13:a8:25:c9:5b:fd:3c:30:6c:64:cb:bd:
50:37:41:7e:81:1d:96:42:f2:15:ae:67:93:5e:3a:
d5:5b:0e:fc:3d:5f:94:08:8f:8b:48:bc:c1:9e:3e:
74:fc:c8:3a:ce:c1:21:5b:82:ad:ac:dc:30:36:11:
3e:14:29:e7:a4:39:9a:97:bd:b9:08:18:7d:64:51:
f6:b6:e0:8a:a7:af:94:80:7d:67:fc:e7:0e:f8:54:
71:8b:46:98:cc:37:2f:08:d4:96:92:5b:7b:a4:a4:
66:c4:b0:d1:3a:77:be:c5:80:d1:5c:99:57:ff:bf:
11:91:d6:cf:f5:b8:2f:41:44:a1:52:8b:a5:a4:a7:
5a:0a:f5:7c:a4:ed:30:7c:d6:02:1e:7c:07:9b:46:
cc:e1:61:1a:97:90:dc:f0:f2:4d:ca:14:b0:d3:9c:
3e:01:bb:47:0e:d4:42:fb:1c:ed:d5:dc:08:3f:cb:
79:dc:2a:2b:b0:3d:8d:f0:52:3a:d1:61:51:62:69:
5e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:EE:FE:AC:F2:9A:F2:38:CE:64:97:87:96:A2:36:0C:33:70:A2:FF
X509v3 Authority Key Identifier:
keyid:17:48:47:F8:66:7D:52:FA:2C:F9:CF:9A:FC:C4:3A:07:91:55:75:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F0hH-GZ9Uvos-c-a_MQ6B5FVdco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/72cc4a-2d9c-4808-823e-1454ffe6182c/1/AO7-rPKa8jjOZJeHlqI2DDNwov8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/72cc4a-2d9c-4808-823e-1454ffe6182c/1/F0hH-GZ9Uvos-c-a_MQ6B5FVdco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.208.20.0/22
109.123.240.0/20
Signature Algorithm: sha256WithRSAEncryption
48:74:da:6d:f8:b7:6f:25:3f:a8:3f:a1:ab:db:8d:61:45:ca:
ee:e3:77:84:9b:b0:59:2d:20:b7:d7:55:05:0c:50:71:ba:dd:
ba:07:d4:9d:de:91:2d:14:ed:67:0d:64:84:b6:68:87:95:f1:
00:4c:c7:2f:d2:de:08:91:43:ca:5f:e8:54:9b:40:b3:fc:65:
c1:d3:63:41:1a:4b:71:e7:81:63:a4:30:3d:5b:c0:80:7e:6e:
bd:22:37:df:fb:ad:ac:63:94:57:31:8f:45:a3:0a:47:ab:4f:
8b:b3:b1:57:27:9a:97:25:92:cf:51:6f:c9:fa:2a:b0:0d:9f:
26:9c:ec:13:54:e0:9a:5a:ab:02:cb:5a:57:32:40:3f:d3:2c:
8a:dd:f0:59:25:63:ad:52:0c:a9:b3:b6:ba:52:72:29:65:03:
8c:d1:9f:7c:4a:de:ab:de:e7:87:a0:33:77:e3:42:8c:61:f9:
54:8b:71:2b:02:5d:94:4e:5b:bd:ab:7b:0f:72:7b:87:b5:b3:
91:51:63:8a:6d:6f:76:ff:fa:92:f3:c0:49:97:1c:31:db:5b:
b5:d7:5d:9b:c3:2b:82:f6:63:fc:ff:b4:02:d2:dc:b8:63:1c:
55:ab:e6:1a:98:54:48:c5:fa:66:73:71:d9:05:9d:be:d2:26:
9c:74:da:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:45 2023 by rpki-client on console-ams.rpki-client.org