Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/Vnw30DUKjftptRpFPdw1ex17D-g.roa
File: Vnw30DUKjftptRpFPdw1ex17D-g.roa (raw, json)
Hash identifier: UV8Yry3Y+qt/VL9ieWhsWo4YdxiauC+esOX9N/xJO7Q=
Subject key identifier: 56:7C:37:D0:35:0A:8D:FB:69:B5:1A:45:3D:DC:35:7B:1D:7B:0F:E8
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 1322A674
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/Vnw30DUKjftptRpFPdw1ex17D-g.roa
Signing time: Sat 01 Jan 2022 04:02:53 +0000
ROA not before: Sat 01 Jan 2022 04:02:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 185.220.236.0/22 maxlen: 24
82.115.4.0/22 maxlen: 22
185.129.116.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 321037940 (0x1322a674)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Jan 1 04:02:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=567c37d0350a8dfb69b51a453ddc357b1d7b0fe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1b:ff:56:46:49:00:62:17:6f:83:5d:59:8b:
01:fb:21:e1:1a:e9:cf:0a:2e:5f:55:be:ef:7d:6c:
39:05:46:30:29:11:48:d6:4d:d0:f6:06:86:bc:b9:
9f:ea:19:ea:70:98:3a:38:30:c4:73:4d:70:db:c4:
45:3e:2e:b9:36:a6:f5:7b:aa:0f:9f:ca:d5:fb:89:
ec:1e:c5:83:e3:25:ee:9f:67:dc:d5:c9:9a:4b:fb:
14:1a:c8:45:41:37:dc:a8:23:b4:79:14:7f:01:bc:
d6:fb:50:12:0a:ec:6c:21:32:98:bf:bb:2c:e9:63:
c3:a3:96:8b:a6:25:70:24:83:f9:0c:a0:9d:1c:b5:
cb:a8:33:8e:a3:84:90:10:e9:92:63:86:d8:b0:e4:
0f:5f:74:f7:9c:70:dd:97:03:e7:59:ed:4e:0c:28:
e1:13:48:36:e1:b9:9b:c0:5e:76:47:e2:c3:b9:6a:
9a:f7:4a:b7:30:87:e0:bb:2c:3e:d0:35:2a:0f:b4:
a3:90:23:9a:8c:78:e9:3d:1c:46:a5:a9:b5:5e:a0:
4b:53:e9:0a:a6:af:24:6f:09:bb:fa:84:c0:60:b8:
c4:51:bc:22:21:bc:6a:b6:bc:8b:16:25:30:21:4a:
da:0b:8f:c4:b1:fd:c4:3f:c7:05:aa:be:37:34:42:
24:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:7C:37:D0:35:0A:8D:FB:69:B5:1A:45:3D:DC:35:7B:1D:7B:0F:E8
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/Vnw30DUKjftptRpFPdw1ex17D-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.115.4.0/22
185.129.116.0/22
185.220.236.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:10:74:ac:28:f9:28:fe:0b:d3:d7:08:18:03:f7:6c:45:ca:
6e:75:41:f2:80:a3:48:d8:0f:65:73:d6:07:0f:8b:f7:12:34:
b1:3b:f8:23:63:2c:f6:cb:83:bf:d8:ab:2c:5d:ae:7e:f0:db:
5e:40:8d:f9:87:87:b2:df:fe:a2:7a:71:29:85:75:72:f3:be:
f2:66:b3:37:74:f4:37:c8:43:95:2a:9f:6c:70:78:a1:c2:98:
1d:b3:65:d6:11:74:2f:fe:ba:6d:c8:ed:b4:5b:82:91:53:b6:
b3:c7:de:31:cf:1f:52:92:fa:9a:a8:67:71:ad:97:8e:50:13:
c5:70:fa:19:53:0e:b4:d4:ba:f7:45:53:d6:cb:55:2a:03:f9:
e2:a5:60:82:83:61:7f:16:84:41:f7:bd:90:5a:aa:c5:7a:ca:
5c:bc:0f:97:62:8b:68:ae:31:58:f2:d8:c1:44:aa:9b:96:7e:
6d:d4:ac:18:fa:ca:a8:6b:c9:0e:66:db:e8:c7:50:cf:93:65:
c7:32:a9:52:f7:8c:3d:89:2e:59:23:48:b8:65:d4:f9:87:87:
c0:21:f1:e6:87:02:64:27:e9:9e:fc:db:50:ca:0c:db:5f:95:
64:ae:46:be:b0:8e:0f:95:3d:e3:38:90:8d:66:a1:ed:ec:1d:
85:9c:10:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:24 2023 by rpki-client on console-ams.rpki-client.org