Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/2mVYRFq_bZb0WB4RVbbOi1Z8x6o.roa
File: 2mVYRFq_bZb0WB4RVbbOi1Z8x6o.roa (raw, json)
Hash identifier: 4Pvyk8gu6uDxQiZpj5etu8xGMDmJCiy6cSAVtF3Vr2o=
Subject key identifier: DA:65:58:44:5A:BF:6D:96:F4:58:1E:11:55:B6:CE:8B:56:7C:C7:AA
Certificate issuer: /CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Certificate serial: 38E1FD1E
Authority key identifier: 17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/2mVYRFq_bZb0WB4RVbbOi1Z8x6o.roa
Signing time: Sat 01 Jan 2022 07:55:21 +0000
ROA not before: Sat 01 Jan 2022 07:55:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206024
IP address blocks: 145.43.254.0/23 maxlen: 23
145.43.253.0/24 maxlen: 24
145.43.252.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 954334494 (0x38e1fd1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Validity
Not Before: Jan 1 07:55:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=da6558445abf6d96f4581e1155b6ce8b567cc7aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d0:c7:2b:88:08:94:10:35:3d:55:1f:e2:9a:
1f:01:90:84:5e:11:6c:78:71:56:50:b4:86:7c:57:
8d:61:a9:ec:40:3f:ea:ca:b8:77:15:80:c8:43:8c:
36:a3:35:9d:a1:d7:c3:c4:e0:08:27:e1:5f:e9:d0:
17:8f:d1:27:8c:a2:9a:ab:e0:ae:2f:f2:81:d7:f8:
48:31:97:b8:89:18:78:85:c9:34:b8:bd:d2:93:62:
f5:01:ea:db:06:c7:fa:eb:dd:40:9e:c1:75:1d:48:
c6:f1:6e:ff:f9:08:8e:e2:7e:2c:43:04:4e:f2:43:
11:10:39:24:c0:e7:ca:3f:9a:70:c5:e3:89:02:59:
64:c9:20:f9:5c:a2:7c:d0:73:ff:21:6b:22:eb:7f:
9b:73:f0:12:05:9e:1b:a2:85:52:f5:0f:fc:e6:1b:
15:7d:b4:54:b4:8d:6c:60:e7:16:6b:23:a1:3a:42:
55:c2:cc:7b:54:21:d9:51:08:ec:b7:4f:87:e0:21:
96:23:04:b0:93:f1:8e:f8:92:29:ed:00:59:88:b4:
33:84:9d:61:66:88:a9:9b:f6:4e:a8:04:8c:91:50:
e0:28:03:53:b7:77:53:90:31:62:19:b9:3b:c4:5a:
8a:65:e9:70:eb:7b:80:bf:a9:2c:bb:62:af:8a:eb:
26:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:65:58:44:5A:BF:6D:96:F4:58:1E:11:55:B6:CE:8B:56:7C:C7:AA
X509v3 Authority Key Identifier:
keyid:17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/2mVYRFq_bZb0WB4RVbbOi1Z8x6o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.43.252.0/22
Signature Algorithm: sha256WithRSAEncryption
55:bb:8c:33:aa:89:c0:ae:c7:dc:cb:27:6d:19:af:f3:02:39:
8e:15:97:df:99:f0:97:0a:3a:bf:19:36:b5:36:41:6e:51:f4:
79:20:27:87:34:e0:95:e8:0d:7f:ce:0f:e9:77:7d:57:9a:87:
e4:0d:91:bd:73:78:4f:2f:74:86:5a:65:fa:a6:95:f2:87:a6:
5c:92:28:0b:11:92:d6:7b:fa:e5:8a:a0:dc:a7:a5:f3:3a:cc:
d8:72:af:9b:57:83:87:30:68:21:7e:d6:0a:8c:e1:e6:33:4c:
53:f3:5c:9d:f9:9d:a1:91:fc:2c:78:51:76:51:e6:e3:a5:b2:
29:56:12:9f:a1:46:97:07:a5:e2:b7:25:e4:9d:80:30:b7:50:
35:28:e1:db:6e:77:0f:7f:88:69:a5:03:ca:6a:36:67:8e:b0:
2e:67:45:98:9c:f3:ae:89:50:0a:30:7e:18:93:90:fc:08:f2:
db:74:e2:ae:2c:20:64:7b:d2:a7:f2:f1:e5:ad:c7:dc:d8:5e:
e4:d7:b6:55:9c:e6:8b:ff:50:a4:c5:b6:ea:f8:b1:d7:4a:1d:
e1:5d:63:38:73:1a:e5:e9:d6:1a:4d:88:16:77:a5:b2:74:77:
ce:be:ff:bf:8e:cc:b0:1b:d6:e0:a4:6b:23:ed:9c:44:39:95:
af:01:75:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:44 2024 by rpki-client on console-ams.rpki-client.org