Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/7I_aB6h4aE7_ZIlUHwmioLCcWko.roa
File: 7I_aB6h4aE7_ZIlUHwmioLCcWko.roa (raw, json)
Hash identifier: 28IA6LFF0ivSTYp/gaaMASd6XJVKXxES70vDKntaYVg=
Subject key identifier: EC:8F:DA:07:A8:78:68:4E:FF:64:89:54:1F:09:A2:A0:B0:9C:5A:4A
Certificate issuer: /CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Certificate serial: 01856F1DBA24D0E762978C7965ED9C3AD6AA
Authority key identifier: 5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/7I_aB6h4aE7_ZIlUHwmioLCcWko.roa
Signing time: Sun 01 Jan 2023 20:54:57 +0000
ROA not before: Sun 01 Jan 2023 20:54:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35297
IP address blocks: 45.142.39.0/24 maxlen: 24
91.198.254.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:1d:ba:24:d0:e7:62:97:8c:79:65:ed:9c:3a:d6:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Validity
Not Before: Jan 1 20:54:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ec8fda07a878684eff6489541f09a2a0b09c5a4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:2d:ee:50:d2:fa:6b:5f:93:ba:2a:ec:4e:cf:
e6:bf:f2:6c:f6:1c:c1:b2:e2:7d:2d:24:df:8f:83:
7c:64:38:c2:9d:09:a0:dd:59:6b:de:02:f5:d7:ff:
de:bd:11:c1:97:c3:0f:6a:1a:41:83:05:9c:f7:80:
40:64:b1:b5:0a:4e:a8:11:91:ce:3c:6f:80:6c:43:
0b:df:8b:9a:71:3c:43:22:ee:a4:95:0a:51:4d:3e:
7d:80:9b:e2:e6:eb:e5:1a:64:d1:03:0c:d0:8d:a7:
8d:a6:57:1b:3c:c4:9e:6f:6a:78:2e:64:7c:57:85:
ab:f1:0f:c6:36:cc:26:a8:07:07:6c:98:a6:01:8e:
b8:aa:4c:c8:74:37:5c:f8:df:72:09:74:cd:fc:80:
72:0f:58:7f:fa:e1:12:2b:bc:32:dc:63:b1:3f:a2:
76:47:a4:3f:20:ee:f3:97:8f:c0:df:c0:b8:12:4e:
27:69:51:be:5c:40:9a:02:99:99:6d:c7:75:6b:1d:
7c:fc:f9:8d:72:92:50:0e:ed:ed:9c:06:23:bc:43:
9c:6e:d8:48:6a:34:9a:65:bb:8a:96:ec:13:ac:12:
34:26:e7:b9:a6:f9:98:08:ba:7e:58:a9:c5:33:38:
27:b9:46:2d:e2:03:4b:29:d3:22:0e:29:61:5c:7c:
bb:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:8F:DA:07:A8:78:68:4E:FF:64:89:54:1F:09:A2:A0:B0:9C:5A:4A
X509v3 Authority Key Identifier:
keyid:5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/7I_aB6h4aE7_ZIlUHwmioLCcWko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.39.0/24
91.198.254.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:36:38:f7:4f:c4:7e:88:4d:0b:73:e6:16:3e:5f:a5:5b:e4:
b8:ef:35:0c:7b:25:33:0e:fc:38:57:51:16:32:81:ce:72:61:
d7:47:6d:7b:8e:c5:44:fe:79:53:1e:bd:72:9b:8c:81:7c:e9:
60:70:16:b2:0d:4e:e7:ae:81:91:73:a7:b4:6f:45:3d:07:e9:
fa:90:05:e8:f3:da:fc:4b:18:83:ed:ee:b8:0f:0f:90:91:5a:
38:c9:90:8f:47:38:fd:e4:a7:71:2f:8f:0c:a2:44:20:8d:ce:
e3:37:49:ee:df:8f:e3:aa:cf:7c:d2:75:c8:e9:34:32:57:69:
83:a2:5e:a5:53:e5:00:17:e1:59:af:90:89:fa:d7:77:74:7a:
2e:69:cd:2f:52:e3:20:fa:e6:d2:bc:7c:de:27:5c:47:23:2b:
11:e5:0a:ed:a5:80:12:5b:27:16:aa:44:da:ed:9d:a5:13:2d:
fc:26:7f:a4:80:7d:09:d2:2a:b1:80:66:7e:b3:87:0d:66:55:
3c:e4:0c:49:64:7a:f9:99:78:4b:ed:47:05:9c:3d:e1:ff:0a:
ff:51:14:60:07:68:52:78:c2:79:b6:53:c6:ce:94:d3:c4:46:
49:34:ba:e3:2c:b3:5f:ee:5c:29:1a:5d:c3:d8:85:c4:2d:02:
1d:f2:e2:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:13 2023 by rpki-client on console-ams.rpki-client.org