Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/Uf_mqEIUhDy5k6TT1rDevn_w7xQ.roa
File: Uf_mqEIUhDy5k6TT1rDevn_w7xQ.roa (raw, json)
Hash identifier: mCcn4bWEfB5Zrshwo/7Vkl6PxM6siKg5+FKAFtC93gk=
Subject key identifier: 51:FF:E6:A8:42:14:84:3C:B9:93:A4:D3:D6:B0:DE:BE:7F:F0:EF:14
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 143C3DC3
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/Uf_mqEIUhDy5k6TT1rDevn_w7xQ.roa
Signing time: Mon 21 Mar 2022 02:22:11 +0000
ROA not before: Mon 21 Mar 2022 02:22:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 85.8.164.0/22 maxlen: 24
193.36.85.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 339492291 (0x143c3dc3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Mar 21 02:22:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=51ffe6a84214843cb993a4d3d6b0debe7ff0ef14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d7:46:87:50:fb:47:99:3b:03:04:e2:6b:ca:
4f:6d:41:77:13:d1:17:0b:67:04:68:3d:fa:dd:c0:
d1:97:30:b0:77:da:21:c8:0f:23:25:bd:a8:89:b6:
72:b3:01:a4:84:02:96:30:93:d4:31:0b:46:0a:e4:
d3:6a:1b:98:23:bc:3a:c9:e5:20:4c:e1:ba:92:4a:
78:91:72:df:92:f4:92:d7:73:b7:26:39:f1:fa:69:
88:2e:86:4e:42:4d:2e:99:b7:69:a6:e7:21:5e:de:
d5:fd:46:1b:1d:b9:44:66:26:92:9e:8b:16:81:16:
93:41:33:ea:56:f4:8c:33:5e:06:bf:b7:67:1b:27:
f6:72:a6:cd:54:0a:96:dc:dd:9f:b5:5b:23:c5:9a:
e2:45:8f:e7:2b:e6:0d:ad:7c:6c:42:7f:b7:73:3d:
0a:d7:d2:ef:67:7f:80:00:92:47:eb:45:95:a1:ed:
9d:44:05:47:78:37:47:98:4c:cf:28:2f:92:e0:fd:
fd:03:14:0e:47:4a:70:48:57:7c:f8:26:61:e9:9b:
97:46:a2:0a:84:2a:e7:20:86:a5:c5:fe:4b:a6:d9:
17:2a:e6:c5:8c:79:e5:ad:4b:ae:9f:fa:7c:be:27:
10:fd:de:fe:a8:f8:ed:11:38:52:7d:a0:87:88:51:
7a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:FF:E6:A8:42:14:84:3C:B9:93:A4:D3:D6:B0:DE:BE:7F:F0:EF:14
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/Uf_mqEIUhDy5k6TT1rDevn_w7xQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.8.164.0/22
193.36.85.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:d8:d2:a0:c2:c9:00:11:ae:3f:8a:61:92:f5:a5:0f:96:56:
3b:bd:89:34:4b:d7:72:22:bc:74:0d:10:3c:93:aa:d2:53:ff:
f1:a6:a6:8e:1c:3f:77:1a:20:28:8b:6b:5b:41:ff:3d:39:e1:
6c:14:ef:ed:80:ec:a6:ba:d4:6f:6d:76:38:88:ff:7b:ce:28:
08:9f:68:cb:12:e2:b4:ff:24:a0:db:f5:28:ca:5d:f1:f3:d8:
5e:20:9c:fb:2f:67:be:82:7c:4f:9e:ec:9a:5d:af:d2:75:27:
e1:2a:d7:72:bb:d4:48:9a:5a:dc:c3:92:a5:ce:82:0e:c9:21:
34:ba:d9:e7:f6:e7:bb:f8:5f:54:49:9f:d1:7d:90:66:ea:bd:
33:95:81:17:53:09:05:21:31:b1:eb:dc:e7:8c:50:b0:1d:21:
cc:b4:7f:50:f3:17:26:4f:f2:fe:12:93:dd:43:91:a9:ba:76:
bc:4b:ba:a5:d2:17:87:a0:0e:51:88:b4:ee:83:6f:84:59:6a:
3d:25:5d:0f:13:d2:53:67:b1:dc:81:97:25:5c:0a:a5:5f:4a:
2a:0b:41:5c:79:45:1c:67:6c:e1:a6:19:0a:36:df:f3:91:cf:
b5:af:2b:68:cd:00:a0:c5:c7:42:98:7a:8f:25:40:5c:3f:fd:
c7:d7:3d:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:24 2023 by rpki-client on console-ams.rpki-client.org