Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/UZT008QClORvYdXoFZJ6FOFYsNQ.roa
File: UZT008QClORvYdXoFZJ6FOFYsNQ.roa (raw, json)
Hash identifier: GgbW3yN4onzy0WbhnhoDETwJ0tr7qF+MAgUhU0dQCz0=
Subject key identifier: 51:94:F4:D3:C4:02:94:E4:6F:61:D5:E8:15:92:7A:14:E1:58:B0:D4
Certificate issuer: /CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Certificate serial: 38DDF61B
Authority key identifier: 17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/UZT008QClORvYdXoFZJ6FOFYsNQ.roa
Signing time: Sat 01 Jan 2022 07:55:19 +0000
ROA not before: Sat 01 Jan 2022 07:55:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50799
IP address blocks: 145.43.250.0/23 maxlen: 23
145.43.249.0/24 maxlen: 24
145.43.248.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 954070555 (0x38ddf61b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Validity
Not Before: Jan 1 07:55:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5194f4d3c40294e46f61d5e815927a14e158b0d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f2:70:2f:27:30:21:50:32:93:23:f0:bd:85:
2d:dd:bb:b4:be:cb:27:65:e4:37:e2:c7:d7:89:ba:
4d:04:f7:8e:11:c6:8a:78:96:63:17:2c:aa:e9:1a:
b5:aa:d2:c7:80:ed:12:ba:33:32:69:08:67:7e:d8:
bc:65:ff:d0:c2:7d:89:1a:1b:d2:95:ee:60:2a:5b:
5f:81:98:15:cb:c3:5e:b3:02:7d:b6:3a:c2:3d:35:
15:41:fa:ec:90:88:2a:6d:3f:f5:a0:66:d1:28:25:
61:e4:32:7c:b0:d5:42:cc:7c:78:67:b5:d2:9e:36:
06:48:50:2e:14:03:e9:9e:1a:2a:02:21:bd:b0:ed:
69:43:4e:6d:73:d7:9c:94:e4:94:a6:d3:53:09:d2:
45:4d:d1:e3:f7:b2:66:7b:3e:38:e6:35:14:28:e7:
fd:89:dc:e7:31:25:b8:9a:09:ed:9e:eb:b9:50:74:
3d:bd:73:52:cc:89:c2:a4:80:38:e1:b8:f7:c6:bf:
9c:7a:88:bc:33:3f:fd:33:ad:8f:7e:7c:e9:56:01:
c9:fe:7a:85:f2:a3:5a:54:48:f0:40:4c:83:10:e6:
9f:81:1e:dd:80:7a:f1:a3:ce:55:98:75:b0:9d:7e:
1a:80:4e:1b:66:ba:26:b7:96:46:c2:6d:2c:41:6c:
51:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:94:F4:D3:C4:02:94:E4:6F:61:D5:E8:15:92:7A:14:E1:58:B0:D4
X509v3 Authority Key Identifier:
keyid:17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/UZT008QClORvYdXoFZJ6FOFYsNQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.43.248.0/22
Signature Algorithm: sha256WithRSAEncryption
aa:d7:21:18:a1:38:3a:4c:c5:cb:70:c1:a6:8b:af:70:28:c9:
7f:9f:90:ab:12:ff:0d:7d:7f:98:f5:17:02:0f:9a:78:76:1e:
35:dd:68:13:7f:72:a5:42:5f:14:ed:25:9b:3e:9b:b0:65:fa:
3a:0c:d2:60:6f:64:bc:14:5e:8c:8c:26:dc:4c:b7:37:75:c9:
36:fa:cb:a6:8f:99:82:59:f6:d9:d6:33:3a:eb:61:4d:ae:b0:
80:4f:e7:da:5c:a0:10:f4:1b:cd:47:f6:2b:9c:25:5d:31:a0:
d9:c6:3d:11:38:56:f1:59:7b:85:f9:29:70:98:c8:27:af:bb:
29:ab:f6:5d:52:d9:ac:a9:8b:c4:70:c5:e5:cc:5f:d0:96:88:
75:ba:e1:41:95:d6:ae:71:cd:e3:4e:77:af:f3:e6:13:fb:c4:
cf:d4:7e:3d:ad:c5:f9:3d:ed:da:26:46:39:62:33:bd:52:53:
8d:85:d1:63:38:b4:48:e3:cd:c7:96:c9:88:83:77:6b:8b:17:
50:e9:6a:79:b7:8d:6f:5b:8c:07:5d:7f:f5:8e:47:9e:b9:c5:
b9:3e:d9:a6:ed:c4:55:14:9c:bf:85:4d:8e:88:ee:b9:5d:0b:
3e:6c:86:17:ff:06:7a:bf:26:8d:eb:ec:97:97:7d:eb:c0:00:
7c:63:9d:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:44 2024 by rpki-client on console-ams.rpki-client.org