Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/b66121-7d8f-48d7-a093-c603cf2f7412/1/p-SFRwXii9ULRecyyJK4t-OXwC4.roa
File: p-SFRwXii9ULRecyyJK4t-OXwC4.roa (raw, json)
Hash identifier: U7Qxz20lYq2/56vnvAGcL9phBzvMqk4lNCH3fX2+x5k=
Subject key identifier: A7:E4:85:47:05:E2:8B:D5:0B:45:E7:32:C8:92:B8:B7:E3:97:C0:2E
Certificate issuer: /CN=8fa71283d8973409d960800f6f7fcdc8d3a30acb
Certificate serial: 018CC3492F8218FED55A765B1E8AFC8C3BDA
Authority key identifier: 8F:A7:12:83:D8:97:34:09:D9:60:80:0F:6F:7F:CD:C8:D3:A3:0A:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j6cSg9iXNAnZYIAPb3_NyNOjCss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/b66121-7d8f-48d7-a093-c603cf2f7412/1/p-SFRwXii9ULRecyyJK4t-OXwC4.roa
Signing time: Mon 01 Jan 2024 04:30:02 +0000
ROA not before: Mon 01 Jan 2024 04:30:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202793
IP address blocks: 185.153.172.0/22 maxlen: 22
2a05:e00::/29 maxlen: 29
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:2f:82:18:fe:d5:5a:76:5b:1e:8a:fc:8c:3b:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fa71283d8973409d960800f6f7fcdc8d3a30acb
Validity
Not Before: Jan 1 04:30:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a7e4854705e28bd50b45e732c892b8b7e397c02e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:65:98:ee:9f:8a:70:d5:dd:74:1c:12:70:c6:
76:98:74:ac:13:d0:40:0e:8f:a6:17:54:a4:fa:37:
ca:91:6f:d9:a3:78:fb:f6:bc:f4:50:0f:01:40:76:
23:b3:47:33:62:45:ea:ad:c6:94:c1:5b:57:fd:58:
55:e5:10:3a:88:0b:01:d0:de:22:25:40:7a:5f:ca:
6e:40:76:75:97:fe:ab:70:fa:ec:56:16:ff:99:7e:
35:b8:e4:ae:25:f4:40:1c:ce:39:52:54:64:ff:62:
e6:1a:d9:ab:a5:8e:17:d1:8f:c7:a2:ad:62:27:e2:
a4:6b:05:e0:a0:bd:39:94:d9:67:3c:46:31:fc:2b:
de:85:76:30:24:ea:20:26:ac:0d:14:d7:bc:30:5c:
c9:4a:ca:76:1f:48:1c:57:24:21:02:bf:31:80:d0:
bc:09:1a:70:0e:e0:f7:1e:d7:0d:cb:8e:ed:8d:6c:
d4:04:1b:c7:f1:3b:c3:24:75:b6:84:4e:08:8b:d1:
07:81:70:21:07:66:a5:4b:bd:b1:af:b6:13:7a:70:
44:c9:3a:cf:07:06:ea:43:7d:76:d1:e9:49:2b:52:
f6:76:3c:4c:f9:98:42:1a:a7:3d:51:6c:fd:6b:54:
85:ea:98:c2:0e:2d:9d:6b:66:72:79:49:fc:a0:37:
b9:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:E4:85:47:05:E2:8B:D5:0B:45:E7:32:C8:92:B8:B7:E3:97:C0:2E
X509v3 Authority Key Identifier:
keyid:8F:A7:12:83:D8:97:34:09:D9:60:80:0F:6F:7F:CD:C8:D3:A3:0A:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j6cSg9iXNAnZYIAPb3_NyNOjCss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/b66121-7d8f-48d7-a093-c603cf2f7412/1/p-SFRwXii9ULRecyyJK4t-OXwC4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/b66121-7d8f-48d7-a093-c603cf2f7412/1/j6cSg9iXNAnZYIAPb3_NyNOjCss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.153.172.0/22
IPv6:
2a05:e00::/29
Signature Algorithm: sha256WithRSAEncryption
18:e6:c9:e9:9a:d4:75:c6:5a:d4:3f:16:59:79:3c:c9:2c:3a:
ae:ae:1c:45:d4:49:f6:fe:24:18:6c:09:95:15:c5:d1:bf:d6:
03:b0:3a:3f:98:a9:bf:c0:eb:83:39:a4:3a:be:5f:d8:29:ef:
6e:89:03:59:5e:a2:e8:e8:02:66:9a:b7:fd:45:30:e7:f0:07:
71:65:c2:0d:25:ac:5a:3a:fe:ae:c1:0a:00:b7:18:a8:b9:3e:
10:94:5f:55:64:21:e8:ad:cf:f9:ec:7b:13:a8:65:3d:42:e7:
d2:8a:2c:29:0a:ec:c3:39:71:26:3b:ec:02:0b:61:9a:c2:47:
fb:68:0a:8d:3d:ea:85:78:2a:4d:d4:ec:59:c5:7a:31:37:22:
b0:5a:b6:7d:7c:1c:37:26:61:97:6b:c3:d3:3d:1a:9d:ef:38:
98:d8:80:0a:c8:22:22:d0:c5:55:eb:38:16:62:a2:cd:d2:40:
2d:ac:f6:11:39:2a:cc:8f:6a:0c:d3:20:16:50:a0:e1:b3:02:
5f:54:55:93:4d:32:0e:51:89:1b:99:b7:fb:b5:38:5d:fb:20:
de:ae:24:70:2c:f0:9b:fd:2c:43:59:c9:b4:3d:cf:26:27:2f:
6d:1e:1a:82:2a:3b:2b:f3:af:4e:6a:b6:92:91:25:eb:66:09:
02:64:86:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:50 2024 by rpki-client on console-ams.rpki-client.org