Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/11081b-4ef9-4e2f-8153-287937940d7b/1/N2YuUZJmUq0lUN01wjxQu_XGTSw.roa
File: N2YuUZJmUq0lUN01wjxQu_XGTSw.roa (raw, json)
Hash identifier: fd0C+7tVlE96y6/2Zh7Y8/tElzX5tbPBRuswICUgWIY=
Subject key identifier: 37:66:2E:51:92:66:52:AD:25:50:DD:35:C2:3C:50:BB:F5:C6:4D:2C
Certificate issuer: /CN=e7d799ae0efdd986dde77fb35ad0a10823cb972f
Certificate serial: 3546BB44
Authority key identifier: E7:D7:99:AE:0E:FD:D9:86:DD:E7:7F:B3:5A:D0:A1:08:23:CB:97:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/59eZrg792Ybd53-zWtChCCPLly8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/11081b-4ef9-4e2f-8153-287937940d7b/1/N2YuUZJmUq0lUN01wjxQu_XGTSw.roa
Signing time: Sat 01 Jan 2022 09:54:45 +0000
ROA not before: Sat 01 Jan 2022 09:54:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47626
IP address blocks: 5.153.166.0/24 maxlen: 24
5.153.164.0/24 maxlen: 24
5.153.165.0/24 maxlen: 24
5.153.167.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 893827908 (0x3546bb44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7d799ae0efdd986dde77fb35ad0a10823cb972f
Validity
Not Before: Jan 1 09:54:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=37662e51926652ad2550dd35c23c50bbf5c64d2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:75:fd:88:a3:dc:ee:01:aa:0e:50:01:60:58:
2e:ad:65:f6:b6:e9:43:37:a8:aa:2f:30:86:ac:8d:
76:e7:17:42:b5:64:d0:d4:16:7e:f5:47:7b:ba:36:
fe:df:bd:b0:82:b0:8d:8a:eb:a6:25:2c:c0:78:54:
62:f6:de:68:51:61:05:b9:99:ed:c5:ed:78:c0:79:
7b:1a:f4:b7:f5:74:8f:d0:b3:8d:d0:ee:89:2e:b5:
65:05:75:2f:2c:2e:93:9a:48:16:b8:1a:9a:b2:30:
39:64:49:f1:28:a6:74:fd:63:49:96:39:b0:d4:8f:
ae:c7:15:c4:f4:98:ad:86:39:90:dc:b6:9b:e6:01:
27:f6:b6:ac:c9:80:22:c5:eb:9f:6c:e2:70:7c:d3:
fe:2d:94:72:7b:bc:a2:c5:f3:fc:23:e8:11:c3:f5:
86:bd:d0:24:b0:46:cb:59:02:4c:72:00:be:12:fc:
5b:87:52:f5:d5:70:54:11:46:6d:5e:43:6c:3a:21:
10:45:e2:9c:d7:80:85:24:18:e5:de:63:85:c9:ff:
04:ec:b2:fc:68:bb:fa:fb:70:18:1c:d0:c5:74:14:
82:bc:bb:cc:03:36:c5:61:1a:a6:7c:ee:7b:b3:fb:
db:0f:e1:bf:53:13:26:5f:64:4d:16:05:84:54:6a:
c1:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:66:2E:51:92:66:52:AD:25:50:DD:35:C2:3C:50:BB:F5:C6:4D:2C
X509v3 Authority Key Identifier:
keyid:E7:D7:99:AE:0E:FD:D9:86:DD:E7:7F:B3:5A:D0:A1:08:23:CB:97:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/59eZrg792Ybd53-zWtChCCPLly8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/11081b-4ef9-4e2f-8153-287937940d7b/1/N2YuUZJmUq0lUN01wjxQu_XGTSw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/11081b-4ef9-4e2f-8153-287937940d7b/1/59eZrg792Ybd53-zWtChCCPLly8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.153.164.0/22
Signature Algorithm: sha256WithRSAEncryption
31:26:af:3f:3e:87:ad:ff:df:e3:1a:2c:06:d0:c2:ea:9f:4e:
6a:cb:4f:2f:e0:fd:6e:8e:a2:f8:f5:40:37:8c:c7:0e:b1:a1:
12:cc:77:52:7c:bc:cc:00:70:95:5e:50:86:8f:ee:4e:12:c0:
a8:82:26:d1:e8:f7:e4:06:68:12:a9:64:a8:cf:02:4f:0f:52:
df:bd:d0:5a:e6:bf:19:73:f0:dc:7a:9e:d6:e4:e6:6d:7d:d6:
19:98:30:c8:a5:f4:aa:68:be:8e:90:37:a9:23:ab:61:84:50:
34:c6:cf:fb:45:9d:db:f7:71:1d:c5:a2:a1:6b:0a:5b:6c:da:
b5:34:d0:fd:3e:46:85:30:f6:92:63:2f:65:ee:91:ee:8a:ba:
fe:41:d5:c6:2c:ab:8f:ed:d4:65:1a:6c:14:14:cc:29:03:de:
7a:b2:dc:eb:fe:68:90:42:ef:4e:56:5f:da:3b:e7:4d:76:60:
85:6a:30:c4:a4:d8:a9:2b:20:1c:17:68:64:f3:80:a5:56:ad:
ca:17:90:50:66:0e:93:e1:d6:82:50:70:80:d0:40:b5:9b:7f:
76:71:38:9d:1b:80:33:81:25:af:8e:bf:6d:94:84:aa:5a:59:
ae:55:61:73:57:9c:20:be:75:90:8f:01:93:49:0a:72:df:7f:
aa:31:2d:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:13 2023 by rpki-client on console-fra.rpki-client.org