Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/Gb0RSaFcodtyiY3peMlD9X3u4g4.roa
File: Gb0RSaFcodtyiY3peMlD9X3u4g4.roa (raw, json)
Hash identifier: Z1VNPQ/xGtbPINpR8ar3damcKU8q4m92bodDfjrVPxw=
Subject key identifier: 19:BD:11:49:A1:5C:A1:DB:72:89:8D:E9:78:C9:43:F5:7D:EE:E2:0E
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 13202551
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/Gb0RSaFcodtyiY3peMlD9X3u4g4.roa
Signing time: Sat 01 Jan 2022 04:02:50 +0000
ROA not before: Sat 01 Jan 2022 04:02:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 85.8.164.0/22 maxlen: 24
82.115.20.0/23 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 320873809 (0x13202551)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Jan 1 04:02:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=19bd1149a15ca1db72898de978c943f57deee20e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:10:e1:b1:80:68:96:71:73:ef:70:da:14:c2:
e8:c4:1b:cc:ce:a9:53:1d:72:90:14:5c:4c:2b:31:
a4:90:45:5f:64:11:a5:8e:aa:74:26:6a:b3:d7:4c:
8a:0c:db:cf:76:2f:f8:0a:fc:3f:1a:0c:31:f0:a0:
d4:55:db:d1:39:80:d8:40:0b:13:b2:0a:b1:fb:c2:
75:f3:91:a7:7c:18:ed:83:e4:2f:ce:86:46:36:6f:
f3:bf:f8:b9:03:68:7d:f7:66:f3:db:51:d0:f9:6e:
f2:9c:55:c4:bf:3b:e8:87:55:e6:cb:37:1d:b3:41:
94:a9:6e:1b:c6:32:d0:aa:1f:29:48:e5:89:0f:85:
80:26:ff:c6:76:1e:9b:a0:bb:f8:88:82:4c:0d:34:
31:61:e4:ad:1a:63:12:fd:b1:45:e4:2a:c0:d9:29:
91:87:cb:a1:4a:9c:00:0d:ce:e3:bc:0b:13:cf:23:
a8:01:0a:73:f4:ed:db:12:8c:59:63:bf:d0:d1:2d:
74:35:05:37:b9:8c:f6:7e:64:1e:85:4b:50:e4:47:
44:43:b1:90:dd:ef:ed:b0:9d:ff:a9:cd:98:66:59:
66:db:aa:0d:ae:2e:5c:81:ed:81:95:04:33:86:97:
f8:51:26:7a:b2:b2:a5:64:47:7f:0e:c0:19:c1:72:
f2:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:BD:11:49:A1:5C:A1:DB:72:89:8D:E9:78:C9:43:F5:7D:EE:E2:0E
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/Gb0RSaFcodtyiY3peMlD9X3u4g4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.115.20.0/23
85.8.164.0/22
Signature Algorithm: sha256WithRSAEncryption
38:3c:6d:fc:79:2e:87:56:77:d1:05:c1:3c:76:26:0d:99:10:
5e:4a:f3:c5:2e:c6:ee:a6:9f:31:ab:96:e4:7c:0b:f3:5a:bb:
5a:53:30:b9:97:55:55:d6:91:d9:fc:00:46:7c:51:a4:8c:4c:
db:86:e9:95:b5:ee:11:53:c1:e5:79:e5:fe:02:9e:86:9b:1d:
f9:6a:e0:b7:ea:3c:10:ec:cf:88:1d:e8:b7:31:15:c8:e1:1d:
0b:22:cb:f0:57:0d:91:6e:a1:89:2f:fc:b0:e0:c8:d9:39:14:
06:9e:7a:22:61:2c:79:2e:34:eb:80:08:85:e9:89:a2:ee:41:
57:90:65:b0:c1:65:b8:17:f7:f5:f4:7e:7a:e0:2e:ff:ea:23:
65:d5:92:8d:d5:78:bf:73:3e:63:08:8d:50:b6:bc:09:53:f8:
cd:f1:da:f2:97:3f:ea:8c:4e:2a:5a:b1:ff:d0:88:6f:f8:4d:
33:16:78:bc:68:36:a2:e3:8a:23:ae:0c:e9:21:52:8d:8b:5f:
f4:6c:2a:87:ee:82:c3:db:ab:e1:56:73:61:1b:a8:f2:8c:2b:
a0:f8:e8:59:8f:37:5d:95:11:8a:04:e3:f2:6e:bb:18:54:c3:
ba:0c:ed:63:8b:10:68:1e:fa:88:b5:67:53:7b:50:3a:86:79:
3b:74:38:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:24 2023 by rpki-client on console-ams.rpki-client.org