Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/kpXMcx2u3GHRC8ncEPw0vNkcD9c.roa
File: kpXMcx2u3GHRC8ncEPw0vNkcD9c.roa (raw, json)
Hash identifier: N7ayMNalDG7RRBCt7EzAfocqSc5fSoLNpZ8C62s817s=
Subject key identifier: 92:95:CC:73:1D:AE:DC:61:D1:0B:C9:DC:10:FC:34:BC:D9:1C:0F:D7
Certificate issuer: /CN=ada25aafe3a9870e9524afa0265987ed5a5a4da3
Certificate serial: 07438190
Authority key identifier: AD:A2:5A:AF:E3:A9:87:0E:95:24:AF:A0:26:59:87:ED:5A:5A:4D:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/kpXMcx2u3GHRC8ncEPw0vNkcD9c.roa
Signing time: Sat 01 Jan 2022 03:57:59 +0000
ROA not before: Sat 01 Jan 2022 03:57:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57844
IP address blocks: 77.83.152.0/22 maxlen: 24
45.147.148.0/22 maxlen: 22
77.83.154.0/23 maxlen: 23
5.252.188.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121864592 (0x7438190)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ada25aafe3a9870e9524afa0265987ed5a5a4da3
Validity
Not Before: Jan 1 03:57:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9295cc731daedc61d10bc9dc10fc34bcd91c0fd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:5b:41:0a:97:df:eb:fc:88:01:09:f0:ef:07:
39:63:fe:a9:15:70:da:71:b6:af:51:c5:4b:f8:68:
ef:c7:08:4d:40:8a:27:22:22:ab:01:0d:ab:82:d8:
16:48:f4:33:e4:52:1a:d1:0a:91:14:9b:f7:25:0c:
a6:5b:81:ad:8d:29:70:85:95:60:44:7a:0d:2a:79:
05:e1:55:8b:d2:8b:fb:7b:ff:12:75:12:71:95:54:
cd:bf:44:b6:f3:c7:85:c5:c1:71:4e:01:54:52:e9:
6d:fd:80:e0:a6:c0:85:0f:c2:f9:48:13:df:2c:01:
9e:6f:99:f3:27:fb:89:b2:93:7a:52:7d:b4:32:d4:
73:a4:33:9c:87:9d:f6:31:b0:a6:da:70:b7:e2:37:
18:93:e3:84:bc:d3:ca:f2:44:e1:a1:aa:e1:dc:8e:
7e:e8:ca:e6:a2:54:7d:e5:91:83:aa:67:f1:4f:a7:
88:43:75:82:19:4b:6f:cc:f9:ff:a7:c0:6d:69:c6:
a9:23:b7:1c:f7:65:4f:7f:45:cf:c5:5a:a8:5e:76:
67:e0:dd:bf:7d:1a:2f:ff:f2:36:4a:37:33:f4:ff:
b7:db:e2:eb:2e:ad:b4:26:db:31:40:04:84:d3:17:
bc:c6:1d:3f:77:31:6c:c8:63:e4:38:4b:35:77:e3:
4c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:95:CC:73:1D:AE:DC:61:D1:0B:C9:DC:10:FC:34:BC:D9:1C:0F:D7
X509v3 Authority Key Identifier:
keyid:AD:A2:5A:AF:E3:A9:87:0E:95:24:AF:A0:26:59:87:ED:5A:5A:4D:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/kpXMcx2u3GHRC8ncEPw0vNkcD9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.188.0/22
45.147.148.0/22
77.83.152.0/22
Signature Algorithm: sha256WithRSAEncryption
05:88:aa:28:4f:01:73:be:c6:9c:be:b7:13:95:aa:b3:cf:c8:
83:a3:fd:33:bf:97:57:e2:e2:9a:2f:ad:b8:4a:89:33:6e:e5:
b6:41:eb:a4:af:bd:90:a4:c2:84:24:f8:51:bf:d5:c9:8b:ed:
c6:b9:7c:95:0c:19:c4:08:be:d1:d2:7d:b9:7f:00:81:50:c7:
e9:00:f1:a6:f2:3b:72:d7:ea:2c:88:34:c7:70:46:53:ee:e6:
af:0c:5b:bb:c9:e7:48:69:29:50:bb:2c:a4:08:40:8c:af:7a:
56:c5:ba:3e:a5:13:c8:84:de:66:12:50:12:b3:c6:71:78:4f:
34:22:ee:7a:13:a8:ce:3c:c7:ce:d6:a6:29:30:23:e2:f5:5b:
ff:30:58:22:92:ce:61:5d:a9:b6:1f:9d:29:eb:d5:c4:c5:df:
eb:49:71:60:a2:c9:5e:ba:8d:05:b9:b4:f8:c2:c8:dd:98:a7:
92:b2:9c:25:c2:e5:e3:d4:b4:f9:55:0a:90:a0:db:06:ed:65:
d6:ac:6f:bd:cc:8b:d8:04:8a:d3:73:8d:bc:4b:af:cd:0e:53:
a5:8c:17:c6:4c:52:a2:42:97:55:50:fd:95:2c:4c:23:27:6f:
0c:08:96:65:e6:fe:2e:e2:af:cc:e3:8a:20:1c:e3:f7:3c:8c:
4b:1e:48:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:41 2024 by rpki-client on console-ams.rpki-client.org