Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/680324-ee1f-40f2-88df-196931962d3c/1/ReoiAHw8mwd6jLvsYh9vF6TfvdM.roa
File: ReoiAHw8mwd6jLvsYh9vF6TfvdM.roa (raw, json)
Hash identifier: 7/sQfm+Se6daWFIwetiZEQosmUfYak8OkVaSCIuxt00=
Subject key identifier: 45:EA:22:00:7C:3C:9B:07:7A:8C:BB:EC:62:1F:6F:17:A4:DF:BD:D3
Certificate issuer: /CN=7f7734dfea120657412ea867ddbc7b84d132bf78
Certificate serial: 5057DD
Authority key identifier: 7F:77:34:DF:EA:12:06:57:41:2E:A8:67:DD:BC:7B:84:D1:32:BF:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f3c03-oSBldBLqhn3bx7hNEyv3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/680324-ee1f-40f2-88df-196931962d3c/1/ReoiAHw8mwd6jLvsYh9vF6TfvdM.roa
Signing time: Sat 01 Jan 2022 01:03:01 +0000
ROA not before: Sat 01 Jan 2022 01:03:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 146.19.252.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5265373 (0x5057dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f7734dfea120657412ea867ddbc7b84d132bf78
Validity
Not Before: Jan 1 01:03:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=45ea22007c3c9b077a8cbbec621f6f17a4dfbdd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c6:fa:af:ab:82:1b:ab:c0:d9:de:5f:e9:18:
c2:a4:7d:80:9b:46:a9:8b:40:35:7a:11:39:dc:3f:
df:1c:6e:cb:ed:2d:26:85:c7:b2:39:a3:f1:1e:70:
ac:27:62:78:9c:d5:44:43:bd:51:f7:66:74:d1:29:
1e:db:74:22:f4:27:50:c4:b1:d9:54:7c:b7:56:7d:
0c:3c:6c:97:26:1b:c0:5d:2d:1c:1e:46:82:c0:9e:
84:f3:f5:13:ec:d0:a5:a5:36:40:45:8e:13:0d:b4:
36:07:ce:48:da:0c:8a:0d:f7:b7:1d:eb:60:b8:9e:
65:69:08:23:f2:40:ae:92:ce:17:d9:2e:41:53:6c:
55:2c:a8:4f:3f:9a:d3:44:bf:7e:85:84:74:46:1b:
41:44:0e:55:ac:fc:83:40:40:01:7f:da:95:70:79:
59:5d:19:c4:a2:55:85:f8:c7:62:c2:2a:df:86:1b:
55:e9:6c:b3:cb:70:c8:84:25:d8:ae:1e:c8:df:f9:
0e:e9:3d:7a:0b:96:d8:3f:e1:c2:7a:50:08:bb:d6:
ec:21:78:4e:2d:38:85:62:b2:64:05:da:dc:2b:bc:
a8:54:c7:8f:e4:ff:f4:eb:b6:fc:bf:46:d8:8f:a9:
91:37:f5:c2:3b:59:a2:ca:83:34:97:70:ed:3c:b9:
de:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:EA:22:00:7C:3C:9B:07:7A:8C:BB:EC:62:1F:6F:17:A4:DF:BD:D3
X509v3 Authority Key Identifier:
keyid:7F:77:34:DF:EA:12:06:57:41:2E:A8:67:DD:BC:7B:84:D1:32:BF:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3c03-oSBldBLqhn3bx7hNEyv3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/680324-ee1f-40f2-88df-196931962d3c/1/ReoiAHw8mwd6jLvsYh9vF6TfvdM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/680324-ee1f-40f2-88df-196931962d3c/1/f3c03-oSBldBLqhn3bx7hNEyv3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.252.0/24
Signature Algorithm: sha256WithRSAEncryption
38:04:1e:bd:86:47:ea:41:41:1d:92:94:30:31:23:17:7b:44:
9d:3a:e2:e0:93:09:be:eb:fb:e7:fc:2c:7b:87:2e:c1:c5:46:
99:94:7f:32:bd:2d:4a:22:df:0f:1b:ce:d9:6a:0f:e0:81:12:
ce:3d:39:54:33:df:9b:a5:bf:e5:20:a2:21:ed:74:90:b2:c0:
d7:1a:51:14:0b:17:3b:ae:1c:a8:ca:c4:56:6e:d2:e0:9e:b1:
fd:bc:64:ad:a3:8a:17:2f:9e:3d:9d:38:b6:5a:2c:15:62:95:
fd:86:77:87:8c:0f:06:58:59:5e:e4:a5:5c:5b:2c:76:65:2a:
43:e4:02:30:ca:77:6c:5c:1a:29:c1:92:a6:83:51:a8:65:42:
f4:70:86:a9:fd:2b:2b:79:00:1c:ac:20:a7:6b:71:e7:64:35:
49:28:98:ee:6d:6c:3c:c5:dc:3c:39:1f:77:93:e5:13:6d:65:
3a:b7:4e:a5:3c:8a:40:77:a4:5c:66:53:0e:98:9f:ee:f3:bb:
67:9e:22:69:8b:06:78:92:25:ed:39:19:d7:83:11:4e:90:39:
a7:07:75:2a:13:b6:b5:20:c1:23:8c:f1:f4:a5:fd:f3:67:6b:
ba:94:a6:fa:0c:aa:c5:3a:f2:db:3b:92:b1:97:10:82:58:74:
4b:ca:2f:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:59 2024 by rpki-client on console-ams.rpki-client.org