Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/JZqySZkDoHWIj9Zmev13fgazKMc.roa
File: JZqySZkDoHWIj9Zmev13fgazKMc.roa (raw, json)
Hash identifier: 1Y1YHrrs+oRa+GWn8DDK6iHJKB7fm3X+Ir9qqkaMeSk=
Subject key identifier: 25:9A:B2:49:99:03:A0:75:88:8F:D6:66:7A:FD:77:7E:06:B3:28:C7
Certificate issuer: /CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Certificate serial: 01826F802B6B62FA15B23CB2C67BE58F1C22
Authority key identifier: 5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/JZqySZkDoHWIj9Zmev13fgazKMc.roa
Signing time: Fri 05 Aug 2022 19:34:06 +0000
ROA not before: Fri 05 Aug 2022 19:34:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57271
IP address blocks: 85.202.87.0/24 maxlen: 24
81.16.141.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:6f:80:2b:6b:62:fa:15:b2:3c:b2:c6:7b:e5:8f:1c:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Validity
Not Before: Aug 5 19:34:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=259ab2499903a075888fd6667afd777e06b328c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:4b:8a:7f:4a:1f:05:a6:96:26:c0:d9:fc:94:
68:65:6a:f7:78:a4:f8:13:7b:05:ef:42:fc:07:01:
35:c9:97:ca:e8:c6:fa:21:ae:2e:a9:8d:92:60:0f:
7b:97:3e:24:0f:e2:94:ba:69:25:41:9f:6b:96:e9:
51:35:72:a8:1f:c4:4f:26:11:77:c3:02:44:66:46:
0b:73:f6:f6:11:e3:5f:4e:6f:ac:1d:1c:c5:ec:40:
cc:a3:f8:55:32:c7:e1:36:5e:b1:56:ff:f2:1b:ac:
eb:40:9e:1c:3d:3b:7d:42:46:ca:b0:8f:1a:90:9a:
33:79:73:6d:9b:6a:24:f3:5f:3c:fe:1e:ec:09:51:
7c:6e:f3:f9:a8:27:f8:b0:ab:af:63:7b:ac:51:f9:
b8:df:63:32:89:16:a8:2f:7d:5f:da:41:8a:36:4e:
4b:d9:32:79:b1:30:a5:22:4f:78:23:99:fc:5a:6d:
75:16:95:93:65:f7:76:bb:90:0a:8e:d2:d1:08:9c:
ed:26:d6:21:15:dd:42:1d:9c:94:59:ee:0f:a0:93:
58:98:bf:0e:31:e0:66:57:72:0a:2d:73:88:54:e4:
e6:41:74:7c:11:a8:0c:86:73:5f:c9:11:73:af:19:
7c:57:2e:02:74:4e:90:07:33:cb:b6:9f:fd:d0:db:
49:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:9A:B2:49:99:03:A0:75:88:8F:D6:66:7A:FD:77:7E:06:B3:28:C7
X509v3 Authority Key Identifier:
keyid:5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/JZqySZkDoHWIj9Zmev13fgazKMc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.16.141.0/24
85.202.87.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:4d:6a:ed:2c:de:3a:9a:ee:15:50:e3:f4:06:d4:f5:5c:8d:
6a:e4:d0:cb:c1:b3:a6:97:2e:96:9f:f6:3f:4b:98:b1:4a:4b:
3a:62:64:8e:3a:2c:bd:aa:4d:2f:51:64:8f:2f:5c:cc:04:0a:
a9:91:49:19:42:fb:13:36:7f:b6:91:fb:29:2f:b5:59:9e:d2:
84:55:0b:11:09:9b:50:b4:59:84:0a:9a:ea:59:d6:72:ef:84:
ee:34:58:42:5d:9a:6f:7e:e2:b9:5f:4a:42:9d:f0:13:c1:52:
df:24:89:c1:b6:54:2d:68:f0:b1:97:d6:ad:18:51:fb:72:bd:
69:cc:12:22:b9:fc:30:50:5e:69:15:f6:25:85:59:29:e5:e1:
c9:2d:bb:86:2e:6e:42:2b:fe:cb:3f:3a:d1:11:67:49:2f:b9:
ce:f2:5c:ec:46:3f:18:0d:91:9a:d2:79:bb:77:b1:76:d6:41:
f9:76:77:2c:e8:94:d5:ad:a1:ce:69:ec:14:50:73:56:00:9a:
8e:8e:aa:e3:c2:5c:02:1a:93:3a:5f:09:ab:b2:7e:3e:c1:70:
b8:40:f9:6f:39:98:a5:80:9b:a0:ba:33:a2:b0:ac:41:f7:2c:
9c:7f:9d:ec:b4:a0:45:07:e2:f7:7b:4c:0d:96:a9:de:78:c7:
01:6b:9a:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:25 2024 by rpki-client on console-ams.rpki-client.org