Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d70262-f87c-4126-af85-a31853e6997a/1/XzE_sQAIVuiBuclawZ7V4vFJZdU.roa
File: XzE_sQAIVuiBuclawZ7V4vFJZdU.roa (raw, json)
Hash identifier: VBhHOTpztfulGStR0QCvpSF3yIgjkkYza3ndFdiI980=
Subject key identifier: 5F:31:3F:B1:00:08:56:E8:81:B9:C9:5A:C1:9E:D5:E2:F1:49:65:D5
Certificate issuer: /CN=23aee94d0fff6c6c752a6942ffa962ae37c7e6b6
Certificate serial: 0909997E
Authority key identifier: 23:AE:E9:4D:0F:FF:6C:6C:75:2A:69:42:FF:A9:62:AE:37:C7:E6:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I67pTQ__bGx1KmlC_6lirjfH5rY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/d70262-f87c-4126-af85-a31853e6997a/1/XzE_sQAIVuiBuclawZ7V4vFJZdU.roa
Signing time: Sat 01 Jan 2022 15:02:47 +0000
ROA not before: Sat 01 Jan 2022 15:02:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31037
IP address blocks: 45.84.38.0/24 maxlen: 24
45.84.39.0/24 maxlen: 24
185.101.16.0/24 maxlen: 24
185.101.17.0/24 maxlen: 24
185.101.19.0/24 maxlen: 24
185.101.18.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 151624062 (0x909997e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23aee94d0fff6c6c752a6942ffa962ae37c7e6b6
Validity
Not Before: Jan 1 15:02:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5f313fb1000856e881b9c95ac19ed5e2f14965d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:9f:b7:75:3f:c0:73:b0:b9:1d:5f:54:9d:ce:
a6:b9:e6:24:56:ea:85:14:e5:5d:e9:90:e3:d5:8f:
a7:d5:77:7f:15:68:27:e2:0c:10:cf:db:b1:75:e6:
d0:eb:4b:92:a8:d4:cc:f8:cd:36:b2:f4:26:66:c1:
1a:21:8c:22:12:5b:40:93:54:8b:4c:b1:15:31:23:
ab:70:ea:6c:c5:e0:11:4a:e2:16:81:e0:b7:82:17:
b2:c5:a8:e6:12:2e:0e:98:6a:7f:93:e1:98:4f:45:
16:d3:95:35:eb:e3:49:8a:e5:fb:27:25:da:ba:9f:
dc:68:64:3f:44:8b:47:b9:bd:a9:6d:80:a0:88:3a:
3d:dc:6b:f9:a9:df:5c:d6:66:af:17:a3:8b:5a:1f:
e7:3a:f5:db:6e:9b:25:7d:d2:df:ea:dc:1b:c8:6f:
f4:77:96:ac:5b:b3:bc:3d:a2:7f:61:40:85:26:b6:
7f:89:a2:95:42:32:e2:3f:30:22:ea:41:9c:77:21:
9b:d3:e2:2f:37:aa:62:0d:d0:e8:06:20:e0:e8:c8:
4e:77:d0:90:06:a4:60:94:56:1b:dc:68:71:58:55:
c2:9a:7a:e0:1e:13:f6:79:10:d8:51:dc:f0:12:6e:
ac:44:9e:2a:ba:31:28:e6:71:d7:22:39:f1:57:f2:
6c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:31:3F:B1:00:08:56:E8:81:B9:C9:5A:C1:9E:D5:E2:F1:49:65:D5
X509v3 Authority Key Identifier:
keyid:23:AE:E9:4D:0F:FF:6C:6C:75:2A:69:42:FF:A9:62:AE:37:C7:E6:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I67pTQ__bGx1KmlC_6lirjfH5rY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d70262-f87c-4126-af85-a31853e6997a/1/XzE_sQAIVuiBuclawZ7V4vFJZdU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d70262-f87c-4126-af85-a31853e6997a/1/I67pTQ__bGx1KmlC_6lirjfH5rY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.38.0/23
185.101.16.0/22
Signature Algorithm: sha256WithRSAEncryption
21:42:08:7e:b5:82:cc:11:ad:3a:d0:77:99:b8:f8:cc:95:2e:
2b:52:42:65:c2:74:9c:68:2e:6d:f2:8d:21:e4:2b:ca:b3:ad:
3c:d8:94:ab:70:9f:50:f0:80:f3:80:9f:e9:00:8d:7f:24:c1:
e6:20:c3:18:e7:a8:4f:a0:d4:06:82:ec:48:a3:cc:9e:a9:32:
95:98:5d:19:d6:77:23:07:0c:09:d8:9d:26:d2:e9:1b:0d:d9:
af:93:63:75:60:d1:ba:fd:75:5d:8f:83:50:dd:b5:68:90:10:
a6:a3:02:27:ab:4d:cc:75:ae:18:e4:9b:c0:73:14:fe:a2:07:
84:ba:dc:c7:7f:5c:cd:8d:21:2b:5f:e9:fd:83:9e:14:1d:97:
0d:a6:78:ec:e7:84:d2:42:16:4a:67:92:0e:33:e5:56:27:b7:
b7:81:b4:1d:a7:ba:c5:0f:11:fc:05:ec:16:f1:72:d3:cf:83:
ae:62:9f:5d:a3:f8:82:78:47:0d:e3:01:f9:73:68:30:da:2b:
0e:50:09:a5:65:99:79:f6:d8:41:fe:77:c8:72:12:8a:f1:6c:
c4:9d:6c:6f:89:00:25:4d:f2:ec:5f:95:4a:b8:1a:71:20:2a:
07:84:d4:8f:50:2d:db:e2:a0:43:29:e9:68:3d:54:7f:b4:3b:
4a:72:0c:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:58 2023 by rpki-client on console-ams.rpki-client.org