Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/hEEo2dcatsYRfHozE1N5A_UuOe0.roa
File: hEEo2dcatsYRfHozE1N5A_UuOe0.roa (raw, json)
Hash identifier: C1MyQtarVgABv42ZJCw9Mm5ozELNu669GJUjUb7Nxww=
Subject key identifier: 84:41:28:D9:D7:1A:B6:C6:11:7C:7A:33:13:53:79:03:F5:2E:39:ED
Certificate issuer: /CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Certificate serial: 01856F1DB80A92760D7E69152165A97C3118
Authority key identifier: 5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/hEEo2dcatsYRfHozE1N5A_UuOe0.roa
Signing time: Sun 01 Jan 2023 20:54:56 +0000
ROA not before: Sun 01 Jan 2023 20:54:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12722
IP address blocks: 45.14.220.0/24 maxlen: 24
45.14.221.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:1d:b8:0a:92:76:0d:7e:69:15:21:65:a9:7c:31:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Validity
Not Before: Jan 1 20:54:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=844128d9d71ab6c6117c7a3313537903f52e39ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:12:c0:41:be:18:7d:49:a4:5a:35:4d:32:33:
3b:ef:38:43:a3:06:93:03:73:39:ab:3c:56:9f:00:
eb:96:3b:0f:35:2c:f6:e7:77:c4:d0:6e:0a:4e:83:
ea:00:a8:7b:10:58:ab:44:64:46:e9:26:8c:f5:af:
c9:15:32:71:05:df:ef:f9:56:30:5f:0b:c3:4e:7c:
4c:ce:67:75:4d:11:23:b5:1c:29:44:b5:cc:bb:8e:
51:ad:06:83:5b:ea:40:d7:88:9d:1b:5b:b8:96:48:
28:0e:f5:76:79:54:2b:62:be:8a:09:fe:b3:e9:48:
99:24:03:7c:6c:09:ab:d2:38:0e:24:19:da:3c:a2:
38:6c:bc:ea:3c:5f:b8:1d:dc:11:e2:b3:9b:1b:e0:
98:5f:d4:6b:c0:65:be:2e:2a:99:b8:37:fd:e0:1d:
e6:26:f2:5b:82:e1:c1:04:04:d3:6d:21:4b:04:c0:
3b:2d:8e:cd:fd:6f:b3:6e:58:eb:c5:6e:24:2b:e4:
60:78:7f:ee:22:7b:f4:db:70:3f:a4:db:fc:69:b6:
11:05:3c:8a:e4:07:f1:a2:6a:68:19:81:ad:6a:54:
6f:a0:b3:c6:0e:3a:9c:25:ef:ba:fe:fa:8c:31:d0:
f6:b0:bb:9e:83:28:ca:29:27:42:13:5f:ca:f3:dd:
df:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:41:28:D9:D7:1A:B6:C6:11:7C:7A:33:13:53:79:03:F5:2E:39:ED
X509v3 Authority Key Identifier:
keyid:5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/hEEo2dcatsYRfHozE1N5A_UuOe0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.220.0/23
Signature Algorithm: sha256WithRSAEncryption
4b:77:1b:ca:26:2f:54:a7:79:5a:03:4e:aa:54:e5:98:c2:c1:
38:48:a5:dd:65:51:3d:2a:39:a8:fe:fa:89:fe:23:e1:59:1e:
5d:05:cb:42:6d:b2:80:3a:7e:35:24:6e:84:1c:5f:d7:1e:bb:
52:ac:a3:b2:b0:4e:58:f8:34:34:b9:5d:35:3c:3b:d2:ec:11:
50:6d:6a:0f:20:f5:75:8c:a8:13:c9:97:cc:37:11:99:2f:d8:
44:a8:f1:3c:dd:8b:bf:f3:9c:d2:cf:11:69:ea:13:62:0e:46:
0e:e5:45:bc:63:13:89:26:8a:0d:5b:59:5b:7c:fd:53:ff:02:
0a:ad:fa:71:48:60:2c:53:88:50:44:d7:ac:99:66:bd:a5:70:
6c:85:2d:80:f2:7c:56:ee:f2:a9:24:3c:ff:d4:06:82:30:71:
25:4a:e9:37:4e:6d:3f:8a:f9:5c:70:3f:93:da:2b:30:16:10:
71:a2:b1:82:5f:ff:58:e5:90:44:b8:46:68:57:ab:d4:96:b2:
e9:f4:33:01:de:56:c0:fc:0e:f4:2a:99:80:c9:41:ba:79:65:
a1:f2:b0:81:ef:04:e8:c2:ed:6b:40:a3:fd:89:a7:06:29:e9:
65:c6:f0:e5:06:64:4c:9a:e1:94:f0:be:af:0f:cf:31:e8:0f:
de:97:55:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:25 2024 by rpki-client on console-ams.rpki-client.org