Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/TafgwqfRGZjpdbGbZQM3AVnIT1c.roa
File: TafgwqfRGZjpdbGbZQM3AVnIT1c.roa (raw, json)
Hash identifier: U5HmHc94cqRG3Cz4J4V/hjXrDCLX1E4n8l5rl6vfuxU=
Subject key identifier: 4D:A7:E0:C2:A7:D1:19:98:E9:75:B1:9B:65:03:37:01:59:C8:4F:57
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 0185727A3CF1070A36AC270F1C7B4D9B433F
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/TafgwqfRGZjpdbGbZQM3AVnIT1c.roa
Signing time: Mon 02 Jan 2023 12:34:51 +0000
ROA not before: Mon 02 Jan 2023 12:34:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 141376
IP address blocks: 185.129.111.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:7a:3c:f1:07:0a:36:ac:27:0f:1c:7b:4d:9b:43:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Jan 2 12:34:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4da7e0c2a7d11998e975b19b6503370159c84f57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:fd:cc:95:0c:da:ad:d5:bd:1f:a6:b3:9e:5e:
56:c3:e9:20:4a:06:05:05:16:8d:5d:71:fc:b9:78:
d8:99:bf:e3:c3:ca:57:d0:84:a4:43:e1:2b:c2:9f:
4f:fe:8c:7b:de:19:59:cf:6c:1c:24:63:f8:b2:19:
f3:df:69:a0:71:11:d1:95:1e:7e:57:0e:f1:04:64:
2b:47:f9:98:a1:c8:87:5b:52:f2:ab:4d:d9:e3:97:
93:01:d6:2d:c6:db:60:71:c5:8c:4a:75:ec:dd:12:
90:29:74:7e:41:2b:a6:dc:61:68:ff:d2:92:17:e7:
28:6f:09:4a:49:40:bf:69:99:a7:82:ce:ba:6e:41:
76:19:32:f2:c3:88:21:d6:81:77:76:1c:a9:ab:fe:
a3:fd:aa:50:0c:96:d5:87:b0:66:71:19:29:42:c8:
8e:a2:d7:9b:8d:7d:33:fa:a4:a4:79:54:8f:18:2f:
d8:4d:c1:93:b4:95:80:45:7f:63:a0:ba:2d:7b:dc:
2b:82:89:48:b6:08:b9:6b:d7:56:54:1c:14:73:30:
a2:46:b7:81:8b:0d:6c:87:a9:a5:ac:d1:b7:ca:dd:
ff:8f:e7:60:d4:9f:94:d9:43:b0:9e:57:74:25:c4:
55:0e:58:06:dc:b6:b9:ad:8a:29:49:ca:01:57:58:
d7:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:A7:E0:C2:A7:D1:19:98:E9:75:B1:9B:65:03:37:01:59:C8:4F:57
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/TafgwqfRGZjpdbGbZQM3AVnIT1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.129.111.0/24
Signature Algorithm: sha256WithRSAEncryption
53:74:4f:99:3d:7c:38:75:00:95:bf:61:fb:a1:6f:f2:d4:1e:
80:9f:2a:a2:ba:55:cd:a7:5c:83:1c:7b:dc:06:0e:20:3d:0c:
f2:71:13:9e:cd:16:63:67:34:1c:ed:7e:11:60:50:5c:cd:1a:
82:ef:c9:c4:02:0b:ca:0c:fa:13:73:97:af:bb:71:ff:96:d8:
63:bd:6b:67:60:21:6a:0b:46:bd:0f:b0:bd:b5:d6:67:0a:ae:
cb:ea:d5:f7:db:3f:89:86:21:75:95:2e:e8:fe:47:1f:b4:0f:
c6:e5:a2:f9:73:48:cb:a3:ba:ef:a1:42:fe:0d:2f:06:ca:b1:
3d:4e:46:53:8d:a8:30:53:79:cf:76:2a:0f:c7:ca:3f:36:68:
31:29:79:ef:fc:7f:78:0c:b6:e3:25:68:52:e4:a9:f9:cb:a7:
bc:5b:10:49:90:2c:af:ce:45:d6:3b:3d:8b:38:ac:40:55:8e:
b4:7c:25:2a:89:ca:39:9a:17:5b:8d:5c:c2:d2:9e:42:98:e6:
be:18:40:e8:d4:1a:bd:62:63:0d:a6:4e:af:f1:17:b6:c5:5e:
f3:0c:47:3d:6e:a8:b1:bb:67:e8:d3:46:07:38:8c:6a:72:24:
20:87:84:1b:f6:ac:bb:16:72:ec:b1:23:ea:9e:7a:75:78:7f:
19:e7:82:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 4 15:57:08 2023 by rpki-client on console-ams.rpki-client.org