Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/qMYM87p-ahEEpvF5UHg_Ep-mGnc.roa
File: qMYM87p-ahEEpvF5UHg_Ep-mGnc.roa (raw, json)
Hash identifier: EZQ2My0HBv6ASvKzL50FGVni/2TUeDvKfC/g6kZX2is=
Subject key identifier: A8:C6:0C:F3:BA:7E:6A:11:04:A6:F1:79:50:78:3F:12:9F:A6:1A:77
Certificate issuer: /CN=ada25aafe3a9870e9524afa0265987ed5a5a4da3
Certificate serial: 073D9CA6
Authority key identifier: AD:A2:5A:AF:E3:A9:87:0E:95:24:AF:A0:26:59:87:ED:5A:5A:4D:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/qMYM87p-ahEEpvF5UHg_Ep-mGnc.roa
Signing time: Sat 01 Jan 2022 03:57:56 +0000
ROA not before: Sat 01 Jan 2022 03:57:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 139.28.168.0/22 maxlen: 22
45.86.228.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121478310 (0x73d9ca6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ada25aafe3a9870e9524afa0265987ed5a5a4da3
Validity
Not Before: Jan 1 03:57:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a8c60cf3ba7e6a1104a6f17950783f129fa61a77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:4e:6d:37:0b:34:d1:71:24:93:68:c9:96:f9:
3d:62:ab:2c:fc:fc:67:f5:e0:11:a9:95:55:5c:f5:
b2:a5:3a:6e:87:9f:c5:76:37:5a:23:3d:fb:45:7e:
e0:aa:02:54:a9:d6:47:e6:4f:60:8d:c5:16:86:43:
3b:7e:35:00:fb:d3:62:56:36:a0:8c:ca:f7:7b:5a:
59:f8:b0:78:89:b1:16:e7:2e:2e:5d:74:59:07:b5:
1d:48:73:8b:8e:9d:eb:29:dc:3a:5c:04:d5:da:07:
d8:db:94:e1:3f:53:a6:f9:47:0e:a6:ce:f5:ec:52:
1e:15:8c:62:f6:8e:26:5e:84:a7:6b:97:db:72:d3:
26:24:6b:3b:3b:a7:32:25:b9:0c:4d:6f:0f:5c:56:
7d:c2:3f:10:3e:01:b5:56:6b:0c:ee:87:55:e4:b3:
a5:e9:3e:15:4c:9b:70:65:25:36:f2:1b:5f:d7:5f:
5b:48:d2:d4:bf:98:a1:74:82:69:a7:a8:bc:ce:bb:
42:a0:f0:2b:2b:22:da:08:b2:20:72:45:9e:d1:95:
10:3b:91:f5:56:9b:c0:da:14:9a:8e:73:70:08:1f:
d9:7f:30:c2:f5:d5:fe:2c:be:48:06:68:c1:02:d6:
db:c0:55:a3:42:50:78:77:4d:7b:ee:c3:cf:ba:88:
80:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:C6:0C:F3:BA:7E:6A:11:04:A6:F1:79:50:78:3F:12:9F:A6:1A:77
X509v3 Authority Key Identifier:
keyid:AD:A2:5A:AF:E3:A9:87:0E:95:24:AF:A0:26:59:87:ED:5A:5A:4D:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/qMYM87p-ahEEpvF5UHg_Ep-mGnc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.228.0/22
139.28.168.0/22
Signature Algorithm: sha256WithRSAEncryption
67:e4:ac:ab:55:05:f0:57:44:4d:b5:8b:8a:9a:ae:05:e1:63:
65:a3:b2:c0:97:f9:de:b6:e9:17:8b:c6:3f:99:82:45:9c:80:
50:c6:2f:40:59:f7:9e:d9:5c:b1:03:a5:a8:92:87:dd:fe:d5:
9a:05:10:da:1d:88:cd:b0:85:0c:93:53:e8:39:c4:aa:cf:d7:
7c:df:b2:14:c8:43:70:d5:b1:32:6d:f9:52:62:c3:fc:8c:16:
21:6a:af:f5:af:e1:72:72:80:6b:f1:16:b5:c1:aa:cb:c9:fb:
96:8b:72:58:80:22:12:c1:81:b7:a9:4e:9b:0f:8a:d3:5e:7a:
0f:6e:30:f1:8e:ed:fa:6e:a9:02:f5:b6:d7:67:d7:74:88:09:
c1:f9:1b:74:02:76:46:1f:8b:9d:74:3a:29:82:a4:bf:a2:f0:
f2:02:dc:a0:38:a7:52:94:31:d6:a5:b8:68:d7:5c:3f:d4:83:
de:0f:9c:69:4d:06:cf:92:a9:30:20:f6:b4:4b:3d:9e:b2:f9:
6d:20:37:54:5a:93:4f:7b:30:d0:36:da:a4:e9:30:d4:1d:0f:
20:fc:a9:c3:2c:01:ae:69:b7:e0:cd:7b:b0:22:9e:18:f1:f9:
42:72:0a:67:77:02:ec:07:f6:74:40:6b:8f:02:eb:89:ed:d0:
9f:cc:23:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:01 2024 by rpki-client on console-fra.rpki-client.org