Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/eyTi-uhWDHhUhLCzORwYZr5gyOQ.roa
File: eyTi-uhWDHhUhLCzORwYZr5gyOQ.roa (raw, json)
Hash identifier: YZMjj5VThiMwo+yivz8Eft5+sSYeDShT7K4C0+q9HSk=
Subject key identifier: 7B:24:E2:FA:E8:56:0C:78:54:84:B0:B3:39:1C:18:66:BE:60:C8:E4
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 018B6555614B5894371330A3F0D26234B63B
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/eyTi-uhWDHhUhLCzORwYZr5gyOQ.roa
Signing time: Wed 25 Oct 2023 05:36:15 +0000
ROA not before: Wed 25 Oct 2023 05:36:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209642
IP address blocks: 45.146.242.0/23 maxlen: 24
89.251.11.0/24 maxlen: 24
185.129.111.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:65:55:61:4b:58:94:37:13:30:a3:f0:d2:62:34:b6:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Oct 25 05:36:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7b24e2fae8560c785484b0b3391c1866be60c8e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1d:70:b4:5b:9c:d4:6a:3b:ee:ca:98:56:99:
7f:e9:4e:81:f3:29:5f:7e:8c:35:fa:2a:9e:c5:35:
28:f3:71:2b:bf:76:7e:65:ee:20:05:ad:33:b8:65:
f1:36:ba:0c:91:03:ce:8f:98:8d:ca:7b:9f:52:14:
5f:e1:d2:5f:08:c5:82:f9:c4:10:48:9a:70:ff:bb:
46:b0:78:6a:2a:cb:40:c1:69:54:fb:94:23:a8:a5:
4e:32:77:54:4c:dd:e7:6f:7b:d0:a3:70:dc:99:73:
79:f2:e9:86:85:3c:57:00:ab:29:f9:ca:05:9f:5d:
e9:5e:08:46:55:2b:9c:2a:54:8b:55:c3:f8:75:29:
9b:3d:8f:22:90:ff:3d:2b:75:3a:44:10:d0:4c:52:
7b:07:a9:8a:d2:9f:9d:4e:51:a0:d9:6d:bf:d3:fe:
c0:31:2a:4e:c3:7e:20:9a:ad:75:8d:d1:4a:69:0c:
35:70:d0:88:65:6b:17:c0:d7:cd:0d:86:61:be:10:
2e:90:63:09:e5:c0:e9:f4:c6:de:88:9f:0c:26:3e:
f4:e5:77:c3:5b:1e:f5:d6:a2:1d:8d:7e:f2:30:16:
ab:d9:16:bd:4d:b9:33:89:c9:e1:56:a1:1b:cc:47:
bf:f5:fb:c4:cd:3d:55:cb:e5:4b:1d:bf:e5:70:47:
43:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:24:E2:FA:E8:56:0C:78:54:84:B0:B3:39:1C:18:66:BE:60:C8:E4
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/eyTi-uhWDHhUhLCzORwYZr5gyOQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.242.0/23
89.251.11.0/24
185.129.111.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:05:ea:8a:59:a8:aa:0b:f2:01:02:b7:3f:76:8b:6c:08:b8:
00:e0:b3:39:d8:f0:d0:dc:e8:d5:f1:6c:18:cd:17:ee:2f:f6:
f2:51:3b:10:a8:fb:29:00:ba:bf:76:8c:98:2f:50:60:d9:b0:
dc:19:23:1e:5f:0f:32:1c:d3:2e:35:8a:4a:19:7f:b1:dd:f8:
ef:43:4a:79:7a:14:4c:e5:17:ef:7d:d5:1a:7b:d9:c6:e0:b0:
7f:d7:31:58:7c:62:4a:93:c3:a4:e1:83:79:d2:6c:ce:d2:84:
59:ce:d1:83:a6:19:9e:7a:f4:54:c0:0b:0e:fd:8d:fc:dc:41:
5a:d0:da:68:dd:5b:5e:83:24:5e:f6:d6:6b:c2:21:b2:0c:60:
38:81:77:be:11:38:bc:c4:1a:71:df:8f:da:33:18:d6:cf:82:
29:7e:b5:03:d6:a5:77:1c:84:fb:1c:68:cd:e1:86:27:d3:4f:
eb:ec:07:ae:f7:f2:b2:e8:b7:82:d8:9e:f8:4c:c5:77:db:fc:
a4:6f:b5:c6:9b:c6:a6:bf:10:f3:40:79:da:94:3c:d7:3d:0e:
7e:1b:f6:04:c4:f8:1a:18:b7:07:2a:f2:f1:9c:d1:3f:75:b3:
56:6a:88:e2:98:f9:56:b5:5a:3f:24:b0:2c:ba:d4:16:a8:5b:
f6:c4:52:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 4 15:44:27 2023 by rpki-client on console-fra.rpki-client.org