Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/81CFdc_nWmqoUydrYB_Cc5ETODY.roa
File: 81CFdc_nWmqoUydrYB_Cc5ETODY.roa (raw, json)
Hash identifier: xSnuQxToTqi4JzLyCiXEV8NvgxipHmNWG1uXzwIGLs0=
Subject key identifier: F3:50:85:75:CF:E7:5A:6A:A8:53:27:6B:60:1F:C2:73:91:13:38:36
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 1503EDD5
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/81CFdc_nWmqoUydrYB_Cc5ETODY.roa
Signing time: Thu 19 May 2022 13:43:29 +0000
ROA not before: Thu 19 May 2022 13:43:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 85.8.164.0/22 maxlen: 24
45.146.240.0/23 maxlen: 24
45.146.242.0/23 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 352579029 (0x1503edd5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: May 19 13:43:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f3508575cfe75a6aa853276b601fc27391133836
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2e:ed:5f:47:f5:31:c5:0e:b5:75:20:93:0f:
2a:91:8d:3a:95:82:bc:04:8d:3b:14:54:34:48:f4:
8a:ad:ad:29:2f:32:0e:38:57:1a:89:39:64:58:63:
19:b4:ef:89:2f:cb:2e:f5:24:e7:38:3d:86:4c:3a:
d5:35:cc:a3:cd:34:09:26:53:48:ae:7b:09:b9:28:
7a:35:6f:3d:b0:e2:50:0c:96:f5:e0:f7:c6:d6:b1:
9e:e8:b4:5e:a1:43:b0:f5:27:e8:b6:12:c6:d0:1b:
49:ae:fa:f2:61:cf:3e:0f:48:06:80:e0:96:76:6f:
03:5c:14:76:1a:00:53:2c:9e:b0:10:9a:83:5a:c5:
27:4f:0a:44:81:0b:f8:ed:76:51:fd:6e:42:a9:22:
e3:45:e9:cf:94:22:09:41:5a:28:d8:26:7e:20:51:
7d:f3:c0:74:c2:4c:08:73:55:62:26:c2:94:4d:c6:
98:4a:13:5e:49:bc:05:18:74:a1:ad:49:a8:2e:5a:
b6:48:fc:88:19:90:86:70:34:a0:17:c3:d9:6f:e9:
09:f9:4b:ec:4a:97:21:bd:bc:cc:b2:18:d6:57:cc:
0a:f4:88:2c:e4:87:61:b9:2f:b5:06:87:68:ae:9f:
1f:61:b5:5d:38:8b:31:33:37:d5:6e:81:3d:09:08:
47:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:50:85:75:CF:E7:5A:6A:A8:53:27:6B:60:1F:C2:73:91:13:38:36
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/81CFdc_nWmqoUydrYB_Cc5ETODY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.240.0/22
85.8.164.0/22
Signature Algorithm: sha256WithRSAEncryption
da:af:b9:a9:f1:dd:09:5d:58:1b:91:19:90:6a:42:32:33:e8:
03:e1:dd:3b:02:d5:08:20:73:20:c3:93:bb:cf:78:7c:8a:54:
2f:d8:db:c4:60:fd:fd:df:a3:29:78:e3:06:8c:09:21:ea:e5:
14:23:f8:5d:b9:10:60:b0:51:d6:7a:39:c8:74:5c:ec:62:23:
db:1d:68:4c:6e:0f:1c:9f:82:ee:73:86:47:7f:06:df:01:78:
87:d6:01:59:e2:c9:11:98:59:67:bf:cd:7a:71:47:de:90:21:
66:1e:45:c3:da:0a:ae:36:bb:b7:af:2d:a9:8b:14:44:7a:6c:
b8:f4:9b:da:b1:33:c1:15:f5:71:d7:15:a8:cc:d8:51:0b:31:
fa:4b:7a:0a:3f:f2:ff:39:71:86:f0:5e:c5:39:2b:f3:04:c5:
06:13:fe:2d:24:d1:ca:ce:5b:f9:d1:04:e3:51:16:02:5f:f1:
b4:0e:8c:b3:1e:98:cd:f3:d4:90:2a:80:4b:94:83:45:b8:cd:
43:7d:d6:b5:df:5f:96:75:7f:84:80:52:4a:62:ca:52:a8:92:
02:d2:a8:04:96:24:4e:d4:12:fb:d8:16:34:9b:5a:1a:4f:1b:
cc:8d:ea:be:be:07:68:43:6e:c0:ad:00:dd:78:a1:b5:ba:74:
1e:b8:dd:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:24 2023 by rpki-client on console-ams.rpki-client.org