Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/i7HH0CUPGjEPJXoafSrmTd2sPBw.roa
File: i7HH0CUPGjEPJXoafSrmTd2sPBw.roa (raw, json)
Hash identifier: SNbcN1xhwUvAxVlfZz8s6PuBamrLj2aluuPEDA0hYdg=
Subject key identifier: 8B:B1:C7:D0:25:0F:1A:31:0F:25:7A:1A:7D:2A:E6:4D:DD:AC:3C:1C
Certificate issuer: /CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Certificate serial: 0181F705EEA96D71654360F9FBED1A9C373E
Authority key identifier: 5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/i7HH0CUPGjEPJXoafSrmTd2sPBw.roa
Signing time: Wed 13 Jul 2022 10:06:09 +0000
ROA not before: Wed 13 Jul 2022 10:06:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12722
IP address blocks: 45.14.220.0/24 maxlen: 24
45.14.221.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:f7:05:ee:a9:6d:71:65:43:60:f9:fb:ed:1a:9c:37:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Validity
Not Before: Jul 13 10:06:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8bb1c7d0250f1a310f257a1a7d2ae64dddac3c1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:23:54:7e:53:dc:13:e4:86:7f:0f:d9:3b:4c:
3d:b6:6c:96:25:c1:4c:ba:10:53:36:e4:b8:de:c1:
59:5f:e6:7d:54:69:a9:8a:8f:5d:a8:a4:fb:63:d5:
c6:70:21:f6:ed:3c:d0:ab:9e:1f:01:7a:8a:44:9d:
27:6a:84:53:bf:e5:d0:96:79:8a:22:d7:90:56:d2:
37:aa:21:02:a6:6f:a0:a5:3c:c6:65:8d:29:b4:30:
6f:0f:f8:c2:a8:ad:ed:6f:22:73:38:b5:a9:10:fd:
d0:4a:81:fe:72:6c:44:fb:d5:f9:7c:13:50:4f:1d:
60:a3:35:90:98:cf:80:a7:67:26:e4:ef:73:56:2c:
e1:c1:d3:21:e2:42:26:6d:ad:bd:2d:a3:0c:cf:98:
d6:af:0c:ba:4a:d8:74:95:19:66:d0:43:dd:d9:3f:
27:9b:28:05:be:5f:b4:15:e0:ff:64:d6:c5:79:17:
70:29:44:bb:17:09:91:31:d4:7e:4f:0e:89:8e:da:
6a:0d:c8:65:e7:40:1c:b3:b4:f9:d9:04:16:17:5d:
c1:ea:e5:23:49:df:92:9a:06:1e:fd:06:20:7a:71:
f0:f7:fd:55:17:c7:ff:aa:df:79:bb:18:18:8f:f5:
71:09:18:c5:02:02:6f:8b:20:81:f9:e6:5e:ca:80:
e1:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:B1:C7:D0:25:0F:1A:31:0F:25:7A:1A:7D:2A:E6:4D:DD:AC:3C:1C
X509v3 Authority Key Identifier:
keyid:5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/i7HH0CUPGjEPJXoafSrmTd2sPBw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.220.0/23
Signature Algorithm: sha256WithRSAEncryption
43:b0:54:79:d2:95:f7:0e:98:52:56:b2:9d:e0:fb:c3:6c:1f:
8c:0b:b9:77:81:a6:24:60:7c:f6:55:7b:9e:33:d1:d0:42:39:
97:6b:7b:64:b4:d9:97:39:b7:12:c5:bd:03:37:27:f4:ad:78:
4a:cf:51:5e:d8:f1:8d:de:59:df:49:f0:45:62:e0:af:12:29:
73:9a:02:cd:ab:66:4c:19:62:c8:97:19:38:18:2e:c8:e4:bf:
b5:7b:ac:22:9e:3d:67:7b:6e:c8:63:f1:85:d3:bc:2d:71:63:
d0:d4:a0:d8:32:e7:32:48:ed:67:c0:1a:a7:1f:21:85:17:18:
57:e1:6d:ef:00:20:2a:f7:6e:f4:e2:17:b3:f8:60:c9:56:8f:
2e:b4:a4:1a:f1:bb:ac:bb:cc:41:12:4f:e1:5f:8d:21:f6:ca:
48:cc:9e:c0:5b:c7:74:d2:49:e5:e5:1c:c4:57:c8:0d:9a:e0:
75:3f:c0:92:c4:1e:75:82:fa:36:43:6c:89:cc:59:b2:cc:f2:
a0:3d:d9:d6:e5:cb:cd:22:51:22:dd:f6:ff:02:86:ad:dd:c9:
a8:2c:d8:97:d0:b6:1d:5b:53:f1:de:bb:f1:dc:da:d7:9b:43:
7b:80:71:3f:8c:b5:73:30:71:c2:14:2f:bf:87:ed:f7:d7:54:
9f:ae:67:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:47 2024 by rpki-client on console-fra.rpki-client.org