Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/Rj_aL1zRs0JPxCV12-zGFZth-_M.roa
File: Rj_aL1zRs0JPxCV12-zGFZth-_M.roa (raw, json)
Hash identifier: mG9zK0HSckQbsj3iIjSiYkrXwZgyOcnd3egygc8NSYM=
Subject key identifier: 46:3F:DA:2F:5C:D1:B3:42:4F:C4:25:75:DB:EC:C6:15:9B:61:FB:F3
Certificate issuer: /CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Certificate serial: 0182A6382CFB41C62682C12AAE85F4642CFB
Authority key identifier: 5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/Rj_aL1zRs0JPxCV12-zGFZth-_M.roa
Signing time: Tue 16 Aug 2022 10:34:35 +0000
ROA not before: Tue 16 Aug 2022 10:34:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57975
IP address blocks: 92.119.228.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:a6:38:2c:fb:41:c6:26:82:c1:2a:ae:85:f4:64:2c:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Validity
Not Before: Aug 16 10:34:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=463fda2f5cd1b3424fc42575dbecc6159b61fbf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:74:89:90:c5:41:84:91:a1:ac:12:03:a8:0a:
95:ff:9b:a7:c6:36:29:e6:1e:eb:cc:62:c9:6f:94:
e7:32:2b:f9:b8:2f:14:88:17:fc:41:0e:3a:73:fb:
9c:1b:ab:41:59:25:4c:16:24:23:b0:a4:d5:a9:7c:
b5:68:89:d1:25:b5:4b:16:39:8d:1b:28:eb:d9:95:
6a:2f:55:a4:0d:36:b0:e7:17:82:45:17:fb:69:6d:
cb:ac:c6:e7:39:a8:1c:3b:88:c5:c4:1a:17:6f:5c:
98:10:7d:45:06:88:d1:4f:23:3b:60:ac:bd:3e:be:
f2:da:c8:52:ab:2c:e4:0e:9d:77:57:db:dd:de:fb:
f9:fc:f6:a9:cf:9b:69:9d:96:d0:c6:01:d8:dd:12:
07:a0:28:6b:fe:47:fe:60:5d:4b:64:e5:45:1f:fe:
81:96:e4:10:b0:44:74:d8:79:a0:2a:30:8c:71:b8:
5b:de:89:c0:cf:2b:c4:09:64:69:55:b5:14:51:c5:
6e:b7:59:c0:4b:26:56:18:17:a4:cb:34:a7:1b:09:
d9:bb:c4:ec:33:f7:09:8a:6e:d8:98:d9:72:44:f5:
2d:64:93:aa:84:0d:d1:a0:37:27:f2:1e:e5:00:5e:
af:d3:0e:ad:4c:c5:4a:21:10:51:60:e9:6c:53:69:
11:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:3F:DA:2F:5C:D1:B3:42:4F:C4:25:75:DB:EC:C6:15:9B:61:FB:F3
X509v3 Authority Key Identifier:
keyid:5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/Rj_aL1zRs0JPxCV12-zGFZth-_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.228.0/24
Signature Algorithm: sha256WithRSAEncryption
47:71:f3:2f:02:69:98:3b:26:b6:ae:7d:58:d2:87:73:34:e1:
af:79:9a:2d:69:32:6b:6c:c7:bd:ea:83:a1:d8:dd:e6:0e:a9:
23:f3:1d:0c:81:9b:87:ad:7c:8f:02:29:07:c8:98:ed:a8:87:
71:3c:b4:22:52:3d:03:42:e7:a8:ec:d7:9c:8d:41:3f:a9:11:
52:22:b9:07:1f:9d:5d:c9:17:55:3a:32:ee:5d:49:d3:d3:c4:
23:b9:e9:5b:44:82:a5:fb:f1:b4:5b:30:99:3f:68:59:a0:e9:
64:22:ff:47:33:1d:95:9b:6b:88:dc:da:d3:e9:06:c2:ca:81:
1a:da:d1:a3:eb:c3:aa:98:2e:0b:7f:ad:02:5e:51:3d:3b:72:
f8:a2:c9:a3:a4:9b:2f:73:97:cd:26:42:fa:32:65:db:c6:e5:
00:4e:5d:1b:4e:fd:43:0c:1b:4a:92:f4:43:84:03:e4:32:78:
11:c6:48:2b:0e:1f:98:19:be:08:60:ef:dd:91:8a:45:36:76:
47:4b:4c:28:3f:ea:6b:f2:fb:a7:37:e9:6a:b0:24:9f:87:8a:
53:ca:ce:cc:10:9f:ce:9c:7b:2e:72:15:02:1e:5b:ef:8a:1d:
e1:ba:25:37:18:99:aa:52:23:d2:4b:a0:75:ec:af:df:e5:77:
83:54:94:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:34 2023 by rpki-client on console-fra.rpki-client.org