Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/NZpVTk2jWBUjoMq-zXtDDGyTImE.roa
File: NZpVTk2jWBUjoMq-zXtDDGyTImE.roa (raw, json)
Hash identifier: bOuq9kgFflhvL+8vj0HX6hLX1qOUGBbF0ti73Vp32s4=
Subject key identifier: 35:9A:55:4E:4D:A3:58:15:23:A0:CA:BE:CD:7B:43:0C:6C:93:22:61
Certificate issuer: /CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Certificate serial: 018779BCF2A6EF7D262A07E21B17B4A1C6C7
Authority key identifier: 5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/NZpVTk2jWBUjoMq-zXtDDGyTImE.roa
Signing time: Thu 13 Apr 2023 08:30:38 +0000
ROA not before: Thu 13 Apr 2023 08:30:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57271
IP address blocks: 81.16.141.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:79:bc:f2:a6:ef:7d:26:2a:07:e2:1b:17:b4:a1:c6:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Validity
Not Before: Apr 13 08:30:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=359a554e4da3581523a0cabecd7b430c6c932261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:63:2b:6f:12:a4:ce:5e:ca:e0:ec:24:a3:f7:
cc:84:96:be:fe:4f:8c:94:e5:a4:0a:90:13:48:51:
52:43:d4:4c:b8:09:a9:c6:2a:51:5e:43:7c:53:53:
5e:f3:d2:0c:3e:eb:28:94:10:d4:16:5e:17:27:8a:
38:05:4b:27:f6:b0:82:60:8d:8a:a3:91:86:b6:d6:
3c:70:a9:d0:35:8a:78:e7:98:de:af:37:fa:22:0a:
8a:93:75:07:1d:38:fd:9b:78:de:8c:46:3f:ca:04:
54:0b:a2:41:a4:76:02:6b:05:41:80:8f:f1:78:4a:
d0:41:cd:aa:68:90:ef:ba:bd:3e:90:18:cf:d7:16:
d3:a4:d5:93:ce:96:53:0f:59:4f:b9:7f:cc:84:dc:
aa:8c:05:d1:f2:b5:3c:f0:7b:06:5e:88:61:0e:40:
e7:e0:36:48:35:4f:10:4b:62:c2:20:c7:9d:99:68:
87:f9:72:fe:70:c2:70:c5:da:b5:31:eb:62:7c:42:
68:d8:29:28:03:7b:7a:eb:ff:70:69:ff:01:1a:01:
00:b7:03:c0:fd:d0:90:8f:6c:ef:26:03:c5:a7:39:
3a:df:64:41:7e:98:e8:87:e0:a8:3b:93:e2:d5:61:
e5:a1:d5:08:ef:4c:be:8f:d0:4b:f9:ae:96:67:5b:
68:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:9A:55:4E:4D:A3:58:15:23:A0:CA:BE:CD:7B:43:0C:6C:93:22:61
X509v3 Authority Key Identifier:
keyid:5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/NZpVTk2jWBUjoMq-zXtDDGyTImE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.16.141.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:8b:f6:fb:9c:c3:77:46:74:1c:56:dc:a7:a5:1a:91:30:c1:
9e:b3:c8:f2:84:c4:37:62:d7:c3:3a:47:74:6b:76:54:11:25:
27:33:0d:05:be:7f:49:4c:ef:ff:3e:96:b8:45:55:69:db:5c:
c3:08:42:f6:f9:de:9f:b8:a9:6b:84:b4:bb:40:eb:2f:46:29:
cd:d7:7d:ba:b1:38:44:28:fe:ab:ff:13:d6:d3:11:2b:3c:b7:
7e:74:36:f9:10:c6:64:59:85:6b:20:4b:ac:02:eb:7c:df:41:
6f:cd:e5:d9:bc:04:16:3d:be:41:7b:f6:53:73:28:dd:4b:d7:
5d:44:76:1e:92:0d:0e:b7:f2:a1:11:99:a0:0f:1b:4a:7a:ff:
6a:02:18:89:16:c7:a8:99:81:51:f3:9e:2f:fa:81:f5:4a:60:
77:11:a5:c7:2e:ea:a1:12:e3:3c:5d:36:c9:35:6a:fb:81:32:
79:82:ae:eb:30:5a:d7:ae:61:b4:8a:4a:70:42:e0:ed:ed:1f:
25:f1:4a:ba:ce:09:63:96:5d:a9:8b:e7:8a:43:3b:2a:ab:be:
dc:7a:c1:f1:47:25:3b:a4:ca:2b:21:6c:5e:a4:b7:b9:ce:81:
e8:69:3b:a5:e3:ba:b4:94:1b:94:d3:4e:98:85:a5:58:c1:60:
7d:cd:2e:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 1 11:43:50 2023 by rpki-client on console-fra.rpki-client.org