Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/1-tw03VqCYAv-vpWFU86Wiw1fCoo.roa
File: 1-tw03VqCYAv-vpWFU86Wiw1fCoo.roa (raw, json)
Hash identifier: hCY6XqJaKgZRNy9TwaVQ+8tco083IlTgAxkMNhY1ezg=
Subject key identifier: FA:DC:34:DD:5A:82:60:0B:FE:BE:95:85:53:CE:96:8B:0D:5F:0A:8A
Certificate issuer: /CN=3c4ed942e5c742e77bfb9beb954f872534f52848
Certificate serial: 0184F1061D5BDC2CAA12EEE03799A3A6465E
Authority key identifier: 3C:4E:D9:42:E5:C7:42:E7:7B:FB:9B:EB:95:4F:87:25:34:F5:28:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PE7ZQuXHQud7-5vrlU-HJTT1KEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/1-tw03VqCYAv-vpWFU86Wiw1fCoo.roa
Signing time: Thu 08 Dec 2022 09:17:00 +0000
ROA not before: Thu 08 Dec 2022 09:17:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49999
IP address blocks: 62.182.170.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f1:06:1d:5b:dc:2c:aa:12:ee:e0:37:99:a3:a6:46:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4ed942e5c742e77bfb9beb954f872534f52848
Validity
Not Before: Dec 8 09:17:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fadc34dd5a82600bfebe958553ce968b0d5f0a8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:30:05:a9:e4:18:98:00:af:42:ef:8f:82:cf:
75:e7:f5:54:22:d5:1d:88:37:61:0a:b6:ed:f6:7a:
b4:54:da:f7:a4:16:d9:55:17:2b:4b:e7:a4:42:db:
36:a9:3f:87:e2:b9:20:73:32:ec:b3:29:29:3e:b0:
74:3e:1b:03:c6:a5:c1:ad:ce:f7:78:97:a4:ad:6f:
25:6f:0b:cc:c7:ef:bf:9a:a4:2e:70:a8:70:fc:f3:
10:0f:19:cc:4b:f7:82:7f:1f:f2:87:cd:d6:e5:ef:
d1:c2:d3:87:da:63:84:eb:3b:89:66:28:5f:32:3f:
76:21:32:f6:7b:0b:64:6b:a2:bd:4c:3d:8d:25:d8:
59:95:0a:60:f2:77:e4:6c:3b:a2:6e:35:b4:7f:cc:
0f:bc:3a:22:29:65:af:e8:fa:3c:e9:3a:a1:76:a8:
e7:7a:e5:ef:40:fa:64:52:fe:d7:ed:a3:16:74:18:
11:8c:15:63:c4:68:f2:74:2a:bc:3a:ad:57:49:f9:
ef:f7:f9:47:2d:07:e0:97:12:3c:dc:1d:57:04:04:
d1:49:36:5c:b2:9d:7c:cd:1c:9d:fb:05:0c:8f:59:
30:39:c5:08:92:0e:2e:b7:e5:61:92:44:b8:8a:64:
99:98:a6:2c:f1:e1:1e:ef:e1:5b:fe:4d:ff:1d:ac:
72:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:DC:34:DD:5A:82:60:0B:FE:BE:95:85:53:CE:96:8B:0D:5F:0A:8A
X509v3 Authority Key Identifier:
keyid:3C:4E:D9:42:E5:C7:42:E7:7B:FB:9B:EB:95:4F:87:25:34:F5:28:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PE7ZQuXHQud7-5vrlU-HJTT1KEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/1-tw03VqCYAv-vpWFU86Wiw1fCoo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/PE7ZQuXHQud7-5vrlU-HJTT1KEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.182.170.0/24
Signature Algorithm: sha256WithRSAEncryption
93:c0:03:f5:96:e2:bb:c9:f9:c3:23:89:03:f0:dc:b4:48:2d:
67:f1:4c:fb:d6:7f:57:e3:f0:d2:cc:05:76:7d:a3:49:10:72:
7a:da:af:71:3d:30:82:a9:83:25:91:19:d9:74:05:42:c4:d3:
f9:8b:eb:43:43:ed:c5:c5:62:d1:99:ab:12:2c:8e:6d:a6:36:
96:b0:e8:b8:f7:5d:f3:5f:d1:44:07:85:3c:9e:0d:5c:db:fc:
05:2b:bc:4a:4a:9b:d9:7e:7b:08:07:0d:d3:28:8f:36:d5:0f:
fb:9b:db:fd:6b:19:1f:3f:f9:9f:29:d5:b8:b2:c2:86:2e:9b:
e6:17:fa:30:55:c0:88:2f:6e:0d:62:a4:f2:d5:62:dc:e5:35:
21:9c:47:09:fb:13:66:fd:10:d6:be:11:53:82:3c:ba:94:53:
a4:29:9e:59:40:cc:23:11:2b:28:f4:78:d4:0e:d6:8b:f2:3c:
d1:bb:34:ff:3e:2d:08:97:54:e4:c0:2a:02:6f:bd:47:c8:17:
d8:5e:52:ec:5b:12:a2:69:6f:02:18:0e:98:37:5f:e8:83:b9:
dd:38:7f:21:69:2b:d5:61:06:01:c2:1e:40:4c:85:69:56:36:
47:67:4b:e2:71:b3:d1:64:08:9a:4d:78:9d:fe:3a:45:15:fd:
70:78:79:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:09 2024 by rpki-client on console-ams.rpki-client.org