Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/SMxHHNug7DOaVAxxJqrRANCWD-c.roa
File: SMxHHNug7DOaVAxxJqrRANCWD-c.roa (raw, json)
Hash identifier: MH+1o/QXR3XxEUk/4qwWfCUlkTk+ndyDusPlzdM1h3s=
Subject key identifier: 48:CC:47:1C:DB:A0:EC:33:9A:54:0C:71:26:AA:D1:00:D0:96:0F:E7
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 018A83EEF53E804722E69DEE352C3106151C
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/SMxHHNug7DOaVAxxJqrRANCWD-c.roa
Signing time: Mon 11 Sep 2023 11:09:50 +0000
ROA not before: Mon 11 Sep 2023 11:09:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35771
IP address blocks: 85.204.79.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:83:ee:f5:3e:80:47:22:e6:9d:ee:35:2c:31:06:15:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Sep 11 11:09:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=48cc471cdba0ec339a540c7126aad100d0960fe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:8e:bf:e1:93:90:60:f3:9a:7f:86:c3:37:a1:
8d:d5:f4:65:96:3f:f9:c0:5b:23:35:18:bf:46:71:
e1:4a:ef:88:a8:93:9e:79:1d:2b:9e:91:b0:dd:f7:
bc:5d:e9:65:0c:85:cc:01:a5:89:7a:9b:8d:00:28:
a6:84:87:90:48:1f:73:3e:2f:e8:a4:15:6a:ed:0d:
98:cf:ca:e7:2b:06:cf:83:f9:a7:9d:c2:2b:ac:33:
eb:46:11:33:00:0d:0e:e3:6c:ee:0d:b4:6b:21:1f:
b7:6d:00:0f:61:14:d1:f6:80:90:10:55:1c:de:53:
b8:83:c3:5b:50:18:e9:51:62:de:a2:b4:90:3b:05:
7d:9e:a4:a7:73:9b:e9:ea:4c:cc:52:08:02:14:d8:
4b:94:39:45:49:af:bc:d1:12:6e:15:32:8c:a3:75:
36:62:3f:04:42:72:9f:36:ab:4f:a7:8b:d0:7e:38:
e9:df:b3:2b:61:53:3f:9c:fe:c2:3f:ba:a5:2b:3b:
49:be:c6:a6:9e:63:2d:e8:57:67:da:56:cd:ae:22:
1c:c9:61:9d:61:a2:85:c5:a2:61:cb:4f:c9:bf:69:
41:1e:da:d5:e0:25:86:55:3d:3e:97:0f:4e:84:51:
45:70:d1:80:53:fd:81:d0:e4:ab:5b:e0:15:9f:51:
41:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:CC:47:1C:DB:A0:EC:33:9A:54:0C:71:26:AA:D1:00:D0:96:0F:E7
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/SMxHHNug7DOaVAxxJqrRANCWD-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.79.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:79:81:ac:22:04:22:78:9e:d3:8e:52:b8:89:9b:53:20:2e:
a2:94:25:f2:d3:1f:2e:76:4e:8d:8b:d4:76:9a:c3:8d:b0:00:
74:63:12:2a:6f:62:da:11:45:27:d0:f4:e5:10:88:1c:ce:46:
71:e3:e2:fb:c6:d1:35:b8:d1:88:8f:5e:93:6a:80:df:3e:c5:
74:7a:3c:d4:60:4e:1c:48:59:54:21:22:22:c9:c6:ab:05:7a:
1c:b8:c1:09:d2:f9:02:89:2c:e5:0b:bd:1d:75:a6:c6:42:8d:
3e:51:ca:9a:8e:55:a7:cb:26:58:eb:c6:3d:3f:0e:d4:ed:7e:
9f:d3:b2:2d:77:e8:83:b7:a4:61:c3:76:21:a3:26:d5:ca:d8:
fa:b8:96:e1:20:92:06:88:f5:21:19:a7:9b:ff:ba:ef:06:7c:
0d:2d:b2:78:6f:5b:36:e3:89:47:65:47:a2:c1:a2:a1:14:55:
81:59:b3:3a:f6:f5:dd:83:71:48:4e:6d:a1:2c:64:6e:f3:f6:
4a:e3:8a:df:5d:bc:e4:3e:76:9b:02:fa:ed:db:54:09:18:f8:
0c:2c:c0:2b:73:62:c8:48:c1:5a:2d:17:03:61:9a:94:82:18:
ce:b6:f3:5b:3e:c7:83:8a:d3:3a:df:9b:b7:56:43:cf:81:ae:
be:ff:47:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 26 11:46:22 2023 by rpki-client on console-fra.rpki-client.org