Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/VVT13g8khpBtcFcv673j2CwINDE.roa
File: VVT13g8khpBtcFcv673j2CwINDE.roa (raw, json)
Hash identifier: cKaT2KCaZ/GgxveXo0oUQPSugMvCwfkHI+7ApKJdw4o=
Subject key identifier: 55:54:F5:DE:0F:24:86:90:6D:70:57:2F:EB:BD:E3:D8:2C:08:34:31
Certificate issuer: /CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e
Certificate serial: 018317ED7FD5380BAB09358C7A29880FB12D
Authority key identifier: 8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/VVT13g8khpBtcFcv673j2CwINDE.roa
Signing time: Wed 07 Sep 2022 12:29:44 +0000
ROA not before: Wed 07 Sep 2022 12:29:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 134512
IP address blocks: 93.185.163.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:17:ed:7f:d5:38:0b:ab:09:35:8c:7a:29:88:0f:b1:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e
Validity
Not Before: Sep 7 12:29:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5554f5de0f2486906d70572febbde3d82c083431
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d9:b3:73:e0:81:84:79:2f:20:ef:ab:a0:1d:
61:32:65:c7:d4:55:ec:b6:ca:12:5b:e8:49:2b:9f:
d8:f3:c9:83:c1:5e:77:70:50:5d:e7:83:1b:6c:83:
5f:4e:9c:c6:21:19:31:c2:08:31:2a:cf:e1:16:4c:
95:68:f6:a9:56:cb:0d:4d:fe:ea:6e:0f:e0:74:33:
0f:81:74:ac:ae:6c:6d:7f:4d:79:86:28:4d:7f:c7:
d4:87:b1:57:64:c8:b9:c7:8f:6d:6a:c7:6b:0a:8b:
6e:6e:64:90:3c:1d:41:f9:b0:cc:8a:02:d7:74:2e:
30:40:ca:7d:16:0d:b9:27:b4:9f:56:c1:83:6d:93:
ce:cf:b9:3f:b2:9d:1a:63:75:2f:99:ba:c7:54:33:
45:05:a4:0d:7f:8c:f2:c6:3c:c9:8a:dd:4c:08:e4:
03:38:16:3e:81:73:93:aa:9f:a7:0e:c7:4b:d9:50:
24:1d:4d:31:7a:21:0b:58:31:3e:b9:3d:4f:80:82:
25:a3:ba:0a:e5:ad:67:6a:ff:42:0d:95:e0:6e:3b:
21:90:be:e8:f5:55:61:74:f8:26:08:ee:ea:82:84:
c6:71:2c:17:2e:56:99:a5:4b:98:bc:0d:45:06:ee:
c9:63:93:fb:06:2d:67:68:d2:28:ba:4c:b6:3a:2e:
92:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:54:F5:DE:0F:24:86:90:6D:70:57:2F:EB:BD:E3:D8:2C:08:34:31
X509v3 Authority Key Identifier:
keyid:8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/VVT13g8khpBtcFcv673j2CwINDE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.185.163.0/24
Signature Algorithm: sha256WithRSAEncryption
70:05:0b:b0:c3:15:66:7f:51:70:3d:6e:ca:84:ea:3d:b3:ae:
4c:f8:a4:52:3b:40:55:10:66:cb:fe:7b:4a:a6:49:05:32:c6:
a0:94:4f:0f:8e:b8:47:94:7b:45:0d:97:77:d7:71:01:c3:d2:
70:20:ce:c5:ad:3e:61:86:1a:d3:43:ba:7a:70:a3:62:72:dc:
95:57:d4:57:7a:79:a0:cc:bf:a3:20:7d:15:ed:fb:7f:87:5d:
c5:76:9a:f0:f6:69:d6:0e:00:d4:08:a3:bb:20:3d:d5:2b:ec:
cd:74:1c:51:c7:64:79:97:a4:7a:af:30:1b:45:5a:a4:79:27:
22:0b:3b:b3:6b:03:4c:bd:a9:2c:2d:a8:60:a3:18:d4:f3:3e:
20:95:66:bf:07:c7:91:b6:bd:75:5f:9d:dc:cf:48:dd:16:7b:
ab:41:b9:95:3a:10:89:da:1c:83:00:44:a1:99:e2:e1:d9:48:
c6:c2:b6:1c:64:46:18:5b:72:05:59:a6:ad:27:95:80:82:50:
b4:8b:61:63:24:1e:99:35:2f:80:a3:21:db:f0:0c:56:56:30:
42:41:e4:54:db:57:4d:3d:44:85:80:03:5b:dd:e6:21:1a:47:
8d:ec:6b:48:25:3f:12:fc:8e:14:f0:06:82:76:e5:4a:59:8a:
7f:7f:8b:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:44 2023 by rpki-client on console-ams.rpki-client.org