Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/p2VUeLXeriCT_W7i_R1uiVb5NS4.roa
File: p2VUeLXeriCT_W7i_R1uiVb5NS4.roa (raw, json)
Hash identifier: F/XYwAUgyj379Y5oRMVHMPULxdgm5ITHfnxi5Xn59wA=
Subject key identifier: A7:65:54:78:B5:DE:AE:20:93:FD:6E:E2:FD:1D:6E:89:56:F9:35:2E
Certificate issuer: /CN=215266435617fa0f1fd2837ec80c6d83b0b9d608
Certificate serial: 0182F03BC341599FF6A1BAAC5A5CE1406D59
Authority key identifier: 21:52:66:43:56:17:FA:0F:1F:D2:83:7E:C8:0C:6D:83:B0:B9:D6:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IVJmQ1YX-g8f0oN-yAxtg7C51gg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/p2VUeLXeriCT_W7i_R1uiVb5NS4.roa
Signing time: Tue 30 Aug 2022 19:30:24 +0000
ROA not before: Tue 30 Aug 2022 19:30:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60631
IP address blocks: 45.159.148.0/22 maxlen: 22
45.90.72.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:f0:3b:c3:41:59:9f:f6:a1:ba:ac:5a:5c:e1:40:6d:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=215266435617fa0f1fd2837ec80c6d83b0b9d608
Validity
Not Before: Aug 30 19:30:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a7655478b5deae2093fd6ee2fd1d6e8956f9352e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:f7:5c:ce:ed:dc:82:ce:56:27:3e:0d:c5:d0:
e6:15:02:69:16:d8:fd:85:33:45:4a:87:86:41:96:
a3:e5:97:56:29:12:21:f3:d3:20:92:ad:3f:50:7a:
4e:84:96:b1:e9:24:3e:0f:24:e8:b0:34:2e:a2:d8:
de:2b:a9:2f:02:66:39:cb:30:c1:e7:d3:0b:0f:35:
09:e4:9e:10:1a:23:64:1f:de:55:43:f8:d0:2b:3a:
6c:eb:a3:0b:de:57:92:4c:96:6f:40:2c:bb:33:2d:
07:c1:88:cc:46:bb:d4:f1:36:c6:68:24:fa:6f:cd:
26:e5:08:e8:28:6a:57:ae:49:05:1f:d3:a7:bb:3d:
0c:00:a8:a6:72:f3:42:8d:5e:2b:c0:e3:37:72:ab:
8d:cc:15:54:0c:1f:af:e5:94:7d:3a:2b:6f:e8:98:
3f:c4:31:8a:ee:e6:93:39:38:c6:79:b1:3a:9c:fe:
7a:55:46:84:4f:b3:20:a4:e9:c2:e6:82:ba:97:4a:
37:db:67:ea:9a:4d:ae:be:ce:d3:92:34:4f:3f:a6:
66:82:99:0d:a9:c9:70:08:fb:62:31:69:cf:ba:6a:
1f:6e:de:57:d3:3b:bd:8b:5b:82:51:45:54:a5:15:
52:ab:b0:1d:0a:ad:2a:e1:ee:05:b9:e4:96:60:df:
14:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:65:54:78:B5:DE:AE:20:93:FD:6E:E2:FD:1D:6E:89:56:F9:35:2E
X509v3 Authority Key Identifier:
keyid:21:52:66:43:56:17:FA:0F:1F:D2:83:7E:C8:0C:6D:83:B0:B9:D6:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IVJmQ1YX-g8f0oN-yAxtg7C51gg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/p2VUeLXeriCT_W7i_R1uiVb5NS4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/IVJmQ1YX-g8f0oN-yAxtg7C51gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.72.0/22
45.159.148.0/22
Signature Algorithm: sha256WithRSAEncryption
82:54:14:b8:40:e6:b8:94:a0:c7:da:de:4a:b3:66:4d:8e:db:
fd:99:1d:68:bd:50:c2:ed:a8:6a:c1:ed:33:a0:35:b5:68:9b:
7e:15:8c:9a:ab:3c:a2:bb:60:b0:4e:92:91:bb:ef:bf:d9:0f:
2c:8a:04:9f:ca:3b:85:24:fb:d9:95:58:eb:4e:96:56:65:ab:
18:08:ad:99:58:fb:1e:4e:05:59:3f:b4:68:88:bc:38:43:0a:
d7:2a:e6:12:8f:f8:50:ad:38:5a:56:47:bb:b3:16:be:18:1d:
3a:85:e6:fc:2d:3a:17:b9:c4:3a:87:f1:f9:0f:c1:64:e6:22:
53:af:2d:54:7e:b5:5d:15:e6:83:9f:5d:82:00:4e:4a:cb:7b:
41:6f:9e:d3:42:d0:54:6b:34:d3:d5:dd:88:f4:41:0d:54:34:
36:88:d2:a0:6d:f0:32:b1:0d:71:1e:63:e4:5f:ba:3c:23:81:
d8:da:3b:29:90:30:30:e9:b2:2e:ca:7f:df:50:74:f7:84:9c:
b3:34:cd:75:64:57:9b:af:43:0b:6e:7d:e0:70:7d:4f:90:d2:
23:71:48:6d:10:3d:ca:96:3b:d4:c2:33:03:1e:05:f6:5a:77:
db:f3:72:a4:0f:48:b9:18:18:33:aa:76:99:25:2c:dd:d3:09:
cd:17:a9:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:19 2024 by rpki-client on console-ams.rpki-client.org