Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/v0I--mB2eva1dCk053uEblaAMNQ.roa
File: v0I--mB2eva1dCk053uEblaAMNQ.roa (raw, json)
Hash identifier: xuOMaR//KIxrqj38G7PpKkDxbKyW/MMFnii05UV4jdc=
Subject key identifier: BF:42:3E:FA:60:76:7A:F6:B5:74:29:34:E7:7B:84:6E:56:80:30:D4
Certificate issuer: /CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Certificate serial: 0183E6D2B8DEE4F945399C3DF26DF5EF50C5
Authority key identifier: 5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/v0I--mB2eva1dCk053uEblaAMNQ.roa
Signing time: Mon 17 Oct 2022 16:41:52 +0000
ROA not before: Mon 17 Oct 2022 16:41:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47312
IP address blocks: 85.202.85.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:e6:d2:b8:de:e4:f9:45:39:9c:3d:f2:6d:f5:ef:50:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Validity
Not Before: Oct 17 16:41:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bf423efa60767af6b5742934e77b846e568030d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a1:c4:60:a9:ca:2c:37:25:46:ca:28:84:47:
b7:52:e2:ab:5b:2b:f8:84:6a:d2:38:e5:07:a3:ab:
8c:11:a8:12:5d:59:b5:35:79:22:c8:68:3d:14:69:
f6:66:15:61:95:97:6e:92:c7:20:6a:a5:c2:ab:32:
72:c4:93:fc:d3:95:4f:b8:88:f9:7d:12:00:19:64:
25:6c:00:d7:fc:d6:5d:f0:cf:e5:8a:61:34:be:89:
ce:73:3f:cb:56:37:51:34:6e:bd:a4:62:a9:8b:27:
7f:ae:84:33:ba:0f:86:74:dd:f1:c9:60:fb:ad:c4:
8c:bc:a1:e5:f8:29:70:1f:25:84:90:a1:db:7a:5a:
ee:82:9e:d8:6e:75:4f:ae:d8:45:94:31:0d:2d:3e:
25:61:f7:5c:78:41:44:00:1e:bb:4a:3b:2d:89:2d:
62:4f:24:9b:f7:32:8e:bc:d6:d2:6c:36:6b:a4:68:
15:35:58:9b:5c:d6:a6:11:a0:4f:0a:37:bc:f7:0b:
19:80:cd:87:db:b6:1d:57:96:7f:1c:ec:29:7e:61:
f4:12:24:08:75:c6:1e:da:c0:fc:85:92:0a:89:a6:
e8:b7:29:56:9a:c9:fb:c9:41:17:37:6a:f4:17:33:
eb:5b:71:ee:a5:8e:49:15:1e:15:8b:30:a8:cc:79:
90:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:42:3E:FA:60:76:7A:F6:B5:74:29:34:E7:7B:84:6E:56:80:30:D4
X509v3 Authority Key Identifier:
keyid:5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/v0I--mB2eva1dCk053uEblaAMNQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.202.85.0/24
Signature Algorithm: sha256WithRSAEncryption
30:40:64:48:be:c2:eb:49:18:5e:b6:b5:89:9c:b3:79:16:41:
a4:b9:fe:de:7f:ba:a9:f5:02:12:fe:86:84:09:c6:d4:d4:62:
05:67:50:d0:c0:de:bc:74:70:ab:13:81:3b:86:a7:be:34:9e:
aa:fd:07:4b:a8:e4:57:a7:34:7c:57:5c:94:a4:c9:76:1e:b4:
2a:36:fb:d9:7d:bf:3b:6d:b6:91:85:16:91:00:36:36:f9:e6:
4f:3f:c5:96:0e:c6:27:66:8f:6d:0e:e7:63:b6:0c:ca:5d:55:
c3:be:f2:47:33:5e:2a:70:fd:40:c0:da:66:f1:5f:4f:df:64:
47:47:e1:48:0c:d1:f5:46:03:62:43:25:52:0a:02:1b:e3:c4:
e4:77:c3:0c:94:40:e1:9d:9f:8e:3f:1f:af:90:89:77:01:73:
cb:42:d9:0e:19:14:9c:d6:7c:5a:76:aa:6e:92:ac:2a:13:66:
64:81:d9:3c:73:52:9d:fe:87:f3:fc:be:a5:a8:f6:05:a8:c5:
0e:05:de:50:7b:be:22:a3:a8:71:97:fe:0d:d0:91:79:b5:06:
18:81:4a:26:1a:b3:05:95:9d:6b:d1:4e:30:e7:a1:65:bc:57:
a9:a0:52:e0:ea:f9:3a:9e:a7:9f:9e:6f:6d:5b:50:79:c9:22:
96:21:91:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:47 2024 by rpki-client on console-fra.rpki-client.org