Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/LYKpS3mdYU0bZGza7bx6O2MaJMg.roa
File: LYKpS3mdYU0bZGza7bx6O2MaJMg.roa (raw, json)
Hash identifier: W3/7br0g2UEQAZ76gcjo/K0OtNDchlGAC0ghx9u8dzY=
Subject key identifier: 2D:82:A9:4B:79:9D:61:4D:1B:64:6C:DA:ED:BC:7A:3B:63:1A:24:C8
Certificate issuer: /CN=3c4ed942e5c742e77bfb9beb954f872534f52848
Certificate serial: 01857195454A79FDB772E4660B6EEC7227FF
Authority key identifier: 3C:4E:D9:42:E5:C7:42:E7:7B:FB:9B:EB:95:4F:87:25:34:F5:28:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PE7ZQuXHQud7-5vrlU-HJTT1KEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/LYKpS3mdYU0bZGza7bx6O2MaJMg.roa
Signing time: Mon 02 Jan 2023 08:24:46 +0000
ROA not before: Mon 02 Jan 2023 08:24:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49581
IP address blocks: 62.182.171.0/24 maxlen: 24
62.182.169.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:95:45:4a:79:fd:b7:72:e4:66:0b:6e:ec:72:27:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4ed942e5c742e77bfb9beb954f872534f52848
Validity
Not Before: Jan 2 08:24:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2d82a94b799d614d1b646cdaedbc7a3b631a24c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7f:5c:54:05:78:09:8f:a8:5b:54:84:00:62:
4b:1e:1d:d1:13:ff:59:7e:5b:08:e7:6e:ee:22:14:
e6:8b:45:87:0c:4e:6c:2b:cd:36:9a:a2:cb:87:62:
ed:83:33:24:72:5e:51:11:75:58:bd:b6:d5:c9:5b:
05:bf:72:b3:d1:dd:d2:57:51:e1:04:e1:f5:d9:44:
e2:c7:de:a3:88:10:1a:dc:cd:b0:e3:d0:22:bf:1a:
b6:bc:f7:48:6c:29:63:d7:4f:6e:d1:b2:c6:fc:bd:
5a:6d:97:fa:b0:07:a1:67:c0:f7:85:e6:02:20:16:
0a:7b:ef:fc:ff:3b:c5:d0:10:80:d9:59:ae:d5:b0:
44:23:77:f8:e1:2a:ef:85:9d:66:be:5a:45:6d:6a:
21:34:8f:d3:62:0f:db:78:3e:65:31:e1:22:1e:74:
b1:38:68:d7:c4:e9:c7:ed:68:f1:be:21:e1:41:f2:
96:04:ac:16:4e:cb:6e:cd:64:8a:2d:4f:d0:7d:22:
d1:43:95:bf:a8:fc:9c:27:32:33:9d:df:d4:ab:ee:
01:de:1b:c5:dd:77:2d:d2:b2:70:0a:9a:47:6c:d7:
08:2a:18:a9:bf:96:4f:cf:9b:63:2e:de:1d:1a:6c:
f1:93:b6:d0:06:f2:8d:de:7b:62:0c:6e:73:80:f2:
bc:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:82:A9:4B:79:9D:61:4D:1B:64:6C:DA:ED:BC:7A:3B:63:1A:24:C8
X509v3 Authority Key Identifier:
keyid:3C:4E:D9:42:E5:C7:42:E7:7B:FB:9B:EB:95:4F:87:25:34:F5:28:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PE7ZQuXHQud7-5vrlU-HJTT1KEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/LYKpS3mdYU0bZGza7bx6O2MaJMg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/PE7ZQuXHQud7-5vrlU-HJTT1KEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.182.169.0/24
62.182.171.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:78:f8:4e:98:2f:1f:1b:e6:2f:c2:4f:1c:07:cd:41:fe:9b:
7f:03:bf:08:20:be:07:00:60:b8:9a:b6:a8:7d:4e:c5:65:b3:
3f:04:00:58:04:29:22:50:2b:a9:85:eb:0d:42:df:3b:bf:20:
de:54:33:ae:c7:f8:fb:82:01:f2:6e:22:8d:03:0a:a8:8d:44:
9a:4a:ca:63:dc:a5:ea:88:71:4b:19:8b:ce:64:74:9d:9d:a4:
b8:65:c3:5d:4d:fa:34:33:f4:cc:e6:fa:ff:24:82:07:4e:86:
37:f2:2f:2c:c3:b0:96:6c:a3:c0:68:ea:e6:8e:a9:2e:a7:b1:
96:d4:62:bc:97:44:9a:cf:31:ec:41:98:08:bc:55:2e:2f:f3:
f3:fa:73:19:7d:2f:39:1f:06:9c:58:7b:52:de:0b:52:a6:8d:
b0:f5:7e:71:94:fd:b1:f3:52:23:26:57:6e:b0:07:8c:30:5c:
af:46:03:43:de:ce:0a:ac:42:d5:e5:04:27:30:9a:67:86:a5:
5f:1c:94:19:e3:c2:16:ce:4f:c1:a8:2f:ab:92:12:31:fb:ba:
06:f6:f6:d5:f5:70:eb:36:93:95:e7:2c:d7:ce:0b:25:53:30:
31:45:ff:7e:8e:7e:4d:36:20:0f:44:e7:3d:1a:de:d2:d5:6e:
6f:ec:18:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:09 2024 by rpki-client on console-ams.rpki-client.org