Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/RhcVv_AG4xq5vsJMPLcM3lGvg4U.roa
File: RhcVv_AG4xq5vsJMPLcM3lGvg4U.roa (raw, json)
Hash identifier: a896SkQu1KQBQtdjWd55LgY6iI95QoAJZZO4I59DKJU=
Subject key identifier: 46:17:15:BF:F0:06:E3:1A:B9:BE:C2:4C:3C:B7:0C:DE:51:AF:83:85
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 431C5F61
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/RhcVv_AG4xq5vsJMPLcM3lGvg4U.roa
Signing time: Wed 25 May 2022 06:05:16 +0000
ROA not before: Wed 25 May 2022 06:05:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 52202
IP address blocks: 94.177.145.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1125932897 (0x431c5f61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: May 25 06:05:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=461715bff006e31ab9bec24c3cb70cde51af8385
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:bb:0c:65:2d:b3:14:7d:f7:9e:1d:6d:f9:bf:
a5:2e:1a:ad:ed:35:08:ea:b6:3e:66:8c:b7:a9:00:
cb:21:71:3a:18:5e:81:8b:93:4e:17:05:4f:e5:60:
b3:e2:49:ee:55:4b:0c:8f:b4:ec:c8:34:d4:68:a3:
64:e6:d0:03:55:24:72:b3:cb:8c:d1:53:46:91:d5:
df:93:c4:81:7f:e1:cc:3d:d1:fc:dc:f5:b3:e9:59:
fb:70:be:8e:76:1d:f2:f9:63:52:96:9f:0a:2b:eb:
08:07:f5:2e:2c:8a:2d:f8:49:c8:07:f5:d7:34:1c:
cc:e6:84:5f:5b:24:38:a3:c0:df:88:17:7a:f3:8f:
01:44:2e:a8:60:67:9d:ae:96:ad:b4:04:9c:0e:1a:
88:f2:cd:36:7a:f1:00:c5:86:08:4e:78:b5:54:0d:
c8:b1:62:30:41:1c:1b:31:cf:a6:2d:24:1e:85:bd:
56:9e:05:a1:2e:22:d3:5d:6b:85:61:9e:d1:50:89:
d0:56:89:27:91:4b:20:b8:c9:d5:a5:9b:dc:6b:c9:
49:11:a0:69:dc:d2:bc:0f:85:11:14:ad:83:ec:d1:
77:71:99:e6:b2:cc:16:92:b2:bf:a6:4d:3b:8e:82:
6e:36:d5:cf:b0:4f:f0:98:62:0b:26:b8:7f:77:c8:
82:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:17:15:BF:F0:06:E3:1A:B9:BE:C2:4C:3C:B7:0C:DE:51:AF:83:85
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/RhcVv_AG4xq5vsJMPLcM3lGvg4U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.177.145.0/24
Signature Algorithm: sha256WithRSAEncryption
32:26:d9:3f:1f:f4:55:9c:dd:9b:99:f1:5f:a9:e2:97:3a:e1:
6d:13:39:cc:f5:a1:96:95:e8:e3:49:dd:90:95:49:0e:10:35:
da:01:23:09:ed:0a:4a:04:b6:e8:0f:85:53:d7:f7:2c:d1:eb:
13:30:24:58:03:06:4b:b9:3b:cd:51:c9:e0:d1:3e:d2:0f:04:
20:ab:be:16:87:92:54:4a:1c:89:0f:0a:cc:b8:5c:a6:06:5d:
6c:42:ef:1c:cd:3b:37:9b:97:98:a9:ab:be:2c:ce:52:19:52:
b2:0d:c6:72:50:37:87:c5:04:7f:0e:80:0b:6f:c9:be:8d:e1:
f5:40:f7:1e:ff:b2:cc:18:44:04:8b:fe:0a:f0:44:1e:02:bc:
60:8e:40:51:7a:f0:78:60:26:32:ac:1c:bd:30:bc:4d:3e:1e:
51:26:aa:97:0b:17:d1:3a:cf:de:99:cb:66:10:23:36:a4:aa:
e7:8a:20:34:95:07:42:6f:fb:3a:88:03:bf:d9:eb:09:71:41:
3a:14:5a:ed:65:96:8e:05:55:38:93:c9:37:53:6e:b7:db:d0:
9a:28:ac:67:6f:7e:6c:ce:35:0e:ff:e9:2c:ba:fb:d3:ba:97:
fa:44:8d:f3:87:00:20:fe:16:89:bd:14:5b:60:c9:2b:29:6f:
97:eb:d7:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:12 2023 by rpki-client on console-fra.rpki-client.org