Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/n85bX-W7DuupPfR8ohEOKkmX_AQ.roa
File: n85bX-W7DuupPfR8ohEOKkmX_AQ.roa (raw, json)
Hash identifier: xFw2IVXPBPmt3100h5WUUBxzmRSgz7A65M3cuEE3onQ=
Subject key identifier: 9F:CE:5B:5F:E5:BB:0E:EB:A9:3D:F4:7C:A2:11:0E:2A:49:97:FC:04
Certificate issuer: /CN=3c4ed942e5c742e77bfb9beb954f872534f52848
Certificate serial: 018451E4A722F781AF29ED2FBD1968B30072
Authority key identifier: 3C:4E:D9:42:E5:C7:42:E7:7B:FB:9B:EB:95:4F:87:25:34:F5:28:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PE7ZQuXHQud7-5vrlU-HJTT1KEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/n85bX-W7DuupPfR8ohEOKkmX_AQ.roa
Signing time: Mon 07 Nov 2022 11:40:50 +0000
ROA not before: Mon 07 Nov 2022 11:40:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207279
IP address blocks: 62.182.168.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:51:e4:a7:22:f7:81:af:29:ed:2f:bd:19:68:b3:00:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4ed942e5c742e77bfb9beb954f872534f52848
Validity
Not Before: Nov 7 11:40:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9fce5b5fe5bb0eeba93df47ca2110e2a4997fc04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:79:7c:55:ef:9c:c1:e2:55:97:30:db:8d:88:
2d:a6:5b:82:4f:ff:be:d2:f4:fe:dc:cf:e5:c4:4f:
c9:be:2e:5f:17:a0:df:79:0a:30:7e:f0:ab:9a:b7:
83:85:55:a7:dd:39:eb:1c:85:14:c5:1c:f7:38:3e:
ed:0e:0d:fc:28:d2:99:7c:02:25:d2:14:96:ab:04:
e0:d6:83:47:fd:ad:78:70:b2:7f:0f:88:69:ac:e4:
a7:17:5d:5b:1c:28:1f:b8:98:a0:92:72:d3:21:7c:
7b:6a:ed:a6:be:d2:99:25:ba:fe:df:eb:05:52:15:
d8:73:eb:3f:b4:e6:ac:94:1c:14:ce:73:59:77:71:
c4:65:d9:61:01:82:64:e4:30:ca:42:f4:1b:08:b8:
8f:48:72:a1:aa:2b:ca:8c:c6:35:3a:cc:55:6a:d6:
fe:67:97:b0:93:8f:d4:44:66:e3:50:61:af:43:d2:
65:e5:b0:e0:15:00:ec:00:6f:14:7b:43:9d:57:c9:
e7:ad:af:9a:df:f4:16:61:67:32:df:55:d2:74:f0:
a7:e5:60:52:fd:8e:80:7a:86:20:bc:e4:03:63:61:
7b:48:7c:bd:b0:a3:41:2b:a4:3b:d3:9f:9e:fb:12:
3b:7f:d1:7a:89:d6:79:e6:22:9a:43:80:37:7b:86:
8b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:CE:5B:5F:E5:BB:0E:EB:A9:3D:F4:7C:A2:11:0E:2A:49:97:FC:04
X509v3 Authority Key Identifier:
keyid:3C:4E:D9:42:E5:C7:42:E7:7B:FB:9B:EB:95:4F:87:25:34:F5:28:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PE7ZQuXHQud7-5vrlU-HJTT1KEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/n85bX-W7DuupPfR8ohEOKkmX_AQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/PE7ZQuXHQud7-5vrlU-HJTT1KEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.182.168.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:41:b9:a9:9c:e5:ae:48:12:c2:ad:5e:e6:ef:c0:01:56:35:
83:9b:b0:79:65:1f:e4:a1:a4:72:d7:75:e1:bd:6d:07:28:e7:
cb:04:c5:fa:f1:57:b7:fb:39:ca:e9:19:31:77:06:9e:1e:65:
da:5d:99:19:1c:1e:8b:38:99:73:7d:e9:d5:9e:f5:6f:a1:38:
a4:39:fe:9c:54:3d:ff:15:03:1a:a0:4c:2d:65:3b:4b:04:29:
aa:04:0d:d6:2e:f0:a2:04:c8:ad:7c:2d:95:49:24:0e:18:f2:
62:a8:60:a8:52:ad:ac:a4:31:35:de:3e:ae:2c:1a:c4:6e:8c:
1c:e9:3c:27:cf:b2:1a:0b:71:1d:b8:d6:6f:16:1f:81:2c:c3:
18:e2:28:2d:1b:94:ad:26:d6:c9:a2:6f:3e:d7:51:a8:41:0e:
ac:f6:86:19:1c:3a:6a:e0:f9:88:23:3a:ad:b5:13:38:64:7e:
11:29:bb:03:bf:bd:22:50:fb:e5:d6:17:96:b3:e4:b0:fc:d3:
27:b0:b5:8d:f0:10:73:54:bf:5c:9c:81:c7:4e:fd:f9:3a:8c:
dd:4e:fc:36:a4:c1:91:e3:60:82:2a:31:55:e4:2b:c0:4c:a2:
8a:1c:43:0e:c3:02:87:af:2a:2d:16:c1:73:78:28:b7:99:e5:
8d:46:c0:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:04 2024 by rpki-client on console-fra.rpki-client.org