Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/ffc311-3110-47f5-8c4f-0c9f76a34005/1/lMFbEOYDKnXKkRwrDElv58lSJ0s.roa
File: lMFbEOYDKnXKkRwrDElv58lSJ0s.roa (raw, json)
Hash identifier: zOcXFkkJjBFtXnM5XeyPsbK8Mxs3JRuqzYK8OFfW+Ro=
Subject key identifier: 94:C1:5B:10:E6:03:2A:75:CA:91:1C:2B:0C:49:6F:E7:C9:52:27:4B
Certificate issuer: /CN=7d47d63346951d9316bbc2578645b5eae24531b9
Certificate serial: 08E80F88
Authority key identifier: 7D:47:D6:33:46:95:1D:93:16:BB:C2:57:86:45:B5:EA:E2:45:31:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fUfWM0aVHZMWu8JXhkW16uJFMbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/ffc311-3110-47f5-8c4f-0c9f76a34005/1/lMFbEOYDKnXKkRwrDElv58lSJ0s.roa
Signing time: Sat 01 Jan 2022 16:06:08 +0000
ROA not before: Sat 01 Jan 2022 16:06:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62455
IP address blocks: 45.11.168.0/22 maxlen: 24
185.182.72.0/22 maxlen: 24
185.205.228.0/22 maxlen: 24
2a0b:bc0::/29 maxlen: 48
2a0a:e780::/29 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 149426056 (0x8e80f88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d47d63346951d9316bbc2578645b5eae24531b9
Validity
Not Before: Jan 1 16:06:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=94c15b10e6032a75ca911c2b0c496fe7c952274b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b9:f8:e3:97:7b:f2:49:95:3d:d7:a0:47:54:
2e:75:ff:3e:c2:89:b1:0c:33:01:66:4b:5f:e0:38:
d3:25:87:72:f1:61:af:df:e9:1b:33:6a:0b:c0:ec:
49:30:44:63:eb:f5:c1:02:ec:a2:ad:47:ee:70:4e:
0a:cd:52:6e:02:44:ff:9b:45:78:7d:f9:52:8c:45:
38:c9:fb:6c:21:ed:ed:20:d6:59:2b:33:b9:3d:23:
47:be:79:37:2e:99:3d:b4:b3:25:b6:d1:2c:34:16:
29:ce:65:a0:d1:a2:31:95:f9:6f:ba:28:a5:8f:68:
01:46:69:91:45:a4:27:24:b7:2e:fe:8b:07:9d:6e:
3e:1b:aa:b9:9c:2d:a6:27:6b:b3:0b:20:99:5a:44:
83:ec:0d:d1:6a:c5:c5:61:78:96:fb:c7:99:3f:69:
f1:d5:ce:d8:9d:dd:cd:1e:28:e3:96:c4:48:c4:59:
77:4f:42:ee:78:b1:81:a5:7b:d8:69:c5:cd:b3:04:
8c:a7:1c:05:59:10:fc:77:f6:1b:c9:b4:94:33:0b:
95:b8:95:2b:c8:f3:cd:cb:e3:f1:4f:19:78:ac:0a:
32:a6:74:5c:ab:be:00:44:e5:3c:36:78:5b:fa:c6:
c2:68:02:97:28:c2:00:73:aa:f9:15:fd:c8:9b:66:
cb:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:C1:5B:10:E6:03:2A:75:CA:91:1C:2B:0C:49:6F:E7:C9:52:27:4B
X509v3 Authority Key Identifier:
keyid:7D:47:D6:33:46:95:1D:93:16:BB:C2:57:86:45:B5:EA:E2:45:31:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fUfWM0aVHZMWu8JXhkW16uJFMbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/ffc311-3110-47f5-8c4f-0c9f76a34005/1/lMFbEOYDKnXKkRwrDElv58lSJ0s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/ffc311-3110-47f5-8c4f-0c9f76a34005/1/fUfWM0aVHZMWu8JXhkW16uJFMbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.168.0/22
185.182.72.0/22
185.205.228.0/22
IPv6:
2a0a:e780::/29
2a0b:bc0::/29
Signature Algorithm: sha256WithRSAEncryption
43:25:bc:4c:a5:4b:2c:46:84:9b:d0:67:23:92:a9:3b:04:ac:
d5:30:62:86:9f:36:76:83:79:04:42:5d:4f:6a:56:8f:b5:bd:
09:5e:e8:a9:de:23:3e:e0:13:15:2c:93:3d:41:2b:af:24:d9:
89:4c:01:d4:8d:96:9d:80:45:28:0a:7a:80:a2:ca:4f:bb:d8:
6e:35:85:fe:11:ca:ab:2a:1e:95:9d:8f:b8:d6:ec:9d:f5:24:
74:4f:b1:bf:bb:9a:14:90:e0:5c:5e:24:31:6d:8f:76:3b:6d:
7e:a3:6b:b3:96:0c:6a:ea:5a:97:a7:5d:04:bd:77:2c:0a:cc:
4e:ce:e6:e9:09:00:96:d6:3b:2c:f6:1c:c5:8f:a2:db:6c:d1:
65:42:e8:60:d1:21:90:8b:5e:a5:ec:02:cc:29:9c:9d:5e:d3:
db:f5:71:b3:6c:e8:6d:fc:f1:85:3f:0b:38:78:ff:00:8a:4b:
26:0a:14:65:59:4a:e3:a8:66:c3:d0:4b:4e:78:0c:0e:65:d5:
f0:98:bf:89:88:c9:89:d9:13:73:fb:ad:24:da:e3:20:fe:89:
ce:07:f1:9f:9b:07:77:f1:3c:98:6c:e6:d5:35:74:b2:56:53:
98:41:09:3d:5e:34:93:82:86:88:08:33:0a:f1:9d:d5:cb:cb:
ed:03:ea:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:54 2023 by rpki-client on console-fra.rpki-client.org