Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/f536cd-943f-4554-9f17-344cc502f1bd/1/8NWcLiGMlUsYyYJjyUgMB5-pcSc.roa
File: 8NWcLiGMlUsYyYJjyUgMB5-pcSc.roa (raw, json)
Hash identifier: vyvpdzbB+ODuo8gu8hHpN8QRAhsMY6fEAElshtV9SVs=
Subject key identifier: F0:D5:9C:2E:21:8C:95:4B:18:C9:82:63:C9:48:0C:07:9F:A9:71:27
Certificate issuer: /CN=304e59a223f4bcb823492fb1096c3a82310c03da
Certificate serial: 08BE42A3
Authority key identifier: 30:4E:59:A2:23:F4:BC:B8:23:49:2F:B1:09:6C:3A:82:31:0C:03:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ME5ZoiP0vLgjSS-xCWw6gjEMA9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/f536cd-943f-4554-9f17-344cc502f1bd/1/8NWcLiGMlUsYyYJjyUgMB5-pcSc.roa
Signing time: Sat 01 Jan 2022 01:02:10 +0000
ROA not before: Sat 01 Jan 2022 01:02:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59808
IP address blocks: 45.151.212.0/23 maxlen: 23
2a0e:b580::/29 maxlen: 29
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 146686627 (0x8be42a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=304e59a223f4bcb823492fb1096c3a82310c03da
Validity
Not Before: Jan 1 01:02:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f0d59c2e218c954b18c98263c9480c079fa97127
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4a:7d:e4:73:eb:d1:6e:a5:89:d5:35:bb:f8:
2c:c1:33:7f:4f:9d:9f:99:85:4c:2d:ea:61:9d:8b:
63:55:e0:3c:96:1a:d5:ce:77:b3:6a:30:d3:3b:02:
3f:4f:01:99:42:60:94:9a:6b:11:46:4e:fa:7d:93:
ea:cc:f3:3b:c3:d4:f5:9b:95:82:14:39:3d:76:63:
0a:56:d4:40:e7:11:76:67:f8:a2:1c:14:28:2f:1d:
69:c6:84:c7:42:0a:cc:3e:80:a9:4f:38:c5:45:3e:
ae:9b:3d:2d:91:d5:d4:05:3f:b1:2f:7b:9b:e4:ce:
5f:0b:75:a9:f8:22:e7:d0:88:fe:c2:10:d8:80:0e:
ba:16:76:88:51:7f:32:09:df:1c:3f:5a:9b:b9:b4:
a8:4a:03:10:11:3d:68:57:0a:02:10:63:6f:59:f9:
f8:b9:a5:3d:75:19:11:ca:60:17:12:f3:39:ea:05:
e6:31:29:b9:1a:80:03:5d:88:3d:7b:86:28:cd:a2:
27:a5:3a:d4:a2:46:c1:54:55:67:e4:35:c8:1b:3f:
6a:95:9c:ab:e3:e1:3c:7e:33:22:57:53:2a:0d:64:
0e:9c:f1:6e:2c:4b:02:00:5d:95:67:27:88:1e:e1:
aa:bb:4c:ad:b3:5d:dd:88:15:62:26:86:5f:d5:e4:
a0:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:D5:9C:2E:21:8C:95:4B:18:C9:82:63:C9:48:0C:07:9F:A9:71:27
X509v3 Authority Key Identifier:
keyid:30:4E:59:A2:23:F4:BC:B8:23:49:2F:B1:09:6C:3A:82:31:0C:03:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ME5ZoiP0vLgjSS-xCWw6gjEMA9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f536cd-943f-4554-9f17-344cc502f1bd/1/8NWcLiGMlUsYyYJjyUgMB5-pcSc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f536cd-943f-4554-9f17-344cc502f1bd/1/ME5ZoiP0vLgjSS-xCWw6gjEMA9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.212.0/23
IPv6:
2a0e:b580::/29
Signature Algorithm: sha256WithRSAEncryption
37:89:59:91:85:41:18:68:b0:b8:33:d0:ac:bc:e8:46:06:5b:
61:d5:33:d7:5b:2f:25:5b:59:e4:47:b4:ac:96:9b:e6:62:cc:
ac:5f:30:70:57:da:c7:63:2c:f2:87:c9:ff:fd:f8:6a:3b:9b:
fd:fd:f6:38:72:8b:14:73:32:ab:fa:a0:76:b6:6b:3b:67:45:
20:53:d0:c2:e4:fd:16:37:5f:3a:de:d4:07:0e:15:64:37:00:
40:0c:9d:34:8d:a8:ef:3f:1c:5d:ca:03:38:bd:7d:47:59:22:
2f:f4:2a:6d:4b:67:ae:17:52:af:d0:10:8b:4f:1f:a5:70:c9:
ec:7d:4f:6f:2e:c6:a8:b4:70:f9:02:34:e7:30:0a:8d:32:17:
5e:d5:cb:52:6f:cc:b8:fc:11:5a:6e:2f:84:0e:48:2a:b3:15:
22:fd:37:33:d7:90:b3:53:5a:7d:bc:d6:c5:cb:27:de:ce:42:
fc:58:c9:a2:62:85:41:84:06:dd:58:30:87:78:94:14:a2:cf:
70:ac:39:a8:a9:52:d5:93:92:e4:0f:29:32:2c:cf:6b:22:48:
de:23:82:35:22:bb:57:2e:37:b0:58:57:43:ac:85:61:f8:c9:
eb:eb:0e:c8:e2:8a:9e:e3:06:da:9f:de:61:44:21:f7:4c:21:
d4:c7:1a:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:43 2024 by rpki-client on console-fra.rpki-client.org