Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/86a426-56ee-46dd-9425-7f92c34eb07c/1/CnSevtA6XvqFOGZ3L-EO4oRQkjk.roa
File: CnSevtA6XvqFOGZ3L-EO4oRQkjk.roa (raw, json)
Hash identifier: JFR76zoYZqpkF3aSwPLMVwARoqRcX312D63aqLf6uzs=
Subject key identifier: 0A:74:9E:BE:D0:3A:5E:FA:85:38:66:77:2F:E1:0E:E2:84:50:92:39
Certificate issuer: /CN=9c2cb7f9ca0efd72be258a4a09358806374b4662
Certificate serial: 01446A
Authority key identifier: 9C:2C:B7:F9:CA:0E:FD:72:BE:25:8A:4A:09:35:88:06:37:4B:46:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nCy3-coO_XK-JYpKCTWIBjdLRmI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/86a426-56ee-46dd-9425-7f92c34eb07c/1/CnSevtA6XvqFOGZ3L-EO4oRQkjk.roa
Signing time: Thu 16 Jun 2022 12:43:45 +0000
ROA not before: Thu 16 Jun 2022 12:43:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12533
IP address blocks: 82.145.96.0/19 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83050 (0x1446a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c2cb7f9ca0efd72be258a4a09358806374b4662
Validity
Not Before: Jun 16 12:43:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0a749ebed03a5efa853866772fe10ee284509239
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:37:cd:88:52:6f:85:5a:4b:af:a4:b4:7d:a4:
07:2b:ad:60:71:45:dd:96:e2:a8:42:4d:1f:bb:1b:
c3:c5:d9:4c:dd:a4:6e:cb:75:a4:5e:22:c4:38:c9:
e2:27:43:fa:f3:7a:d1:1f:5d:d6:80:f1:7c:17:3e:
11:19:9d:2a:ef:0d:78:69:f5:a5:21:e9:eb:cf:0d:
7b:bb:1b:e8:3f:e4:d3:a2:37:98:1b:32:16:a2:41:
ef:01:7e:f7:a2:27:77:57:0d:dd:01:15:27:4a:5d:
07:f9:77:e8:70:54:8b:26:c6:01:47:e8:18:1e:29:
5c:1a:c7:1e:76:c2:bd:1e:c5:39:ac:12:38:d5:d6:
8d:a6:18:20:48:39:14:18:ad:7a:a3:91:23:17:21:
f2:d6:d8:4d:3e:32:c7:c7:20:34:92:a7:4b:24:45:
1d:e9:f0:3a:b7:3d:92:12:a2:9a:3c:10:b3:ae:ea:
eb:44:80:c7:2a:8a:24:ab:97:f5:c8:80:6e:86:97:
b8:bc:cf:fb:dc:c4:5f:5e:fd:f7:81:25:25:65:54:
89:67:62:6a:4b:72:ab:76:e8:ea:cd:a5:6b:94:89:
57:5d:7b:51:61:4a:af:d2:44:06:c9:3c:f9:80:25:
9d:79:e9:e0:9e:82:5b:50:3d:e0:5a:ac:da:52:64:
9b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:74:9E:BE:D0:3A:5E:FA:85:38:66:77:2F:E1:0E:E2:84:50:92:39
X509v3 Authority Key Identifier:
keyid:9C:2C:B7:F9:CA:0E:FD:72:BE:25:8A:4A:09:35:88:06:37:4B:46:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nCy3-coO_XK-JYpKCTWIBjdLRmI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/86a426-56ee-46dd-9425-7f92c34eb07c/1/CnSevtA6XvqFOGZ3L-EO4oRQkjk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/86a426-56ee-46dd-9425-7f92c34eb07c/1/nCy3-coO_XK-JYpKCTWIBjdLRmI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.145.96.0/19
Signature Algorithm: sha256WithRSAEncryption
bb:ee:fa:2f:71:cd:c8:ed:ce:88:36:24:5a:84:f7:66:ca:3c:
db:4b:73:a9:85:b0:c5:18:47:b7:3b:cd:8c:3d:b1:aa:7b:d5:
16:c2:e5:e4:f4:7d:78:02:c3:32:78:fc:71:e2:fc:21:91:ed:
9c:cf:1e:75:d4:37:b6:63:24:95:d9:fe:22:c4:fe:f4:01:c7:
b4:6c:ff:32:e9:7c:35:f0:ca:85:b8:49:a1:63:50:cc:5b:20:
5b:6c:dd:86:36:5d:2e:c4:3d:3c:cc:d5:34:43:7d:03:b7:2c:
9f:e1:1b:22:ac:40:96:3c:3e:62:42:ed:ed:8f:26:97:c8:39:
79:eb:82:0b:cf:a4:93:77:0b:ac:8a:94:b4:16:96:b6:0c:0d:
d9:7a:7e:d5:c7:53:f9:37:d4:9b:f8:a9:8f:01:71:57:36:6e:
c6:ca:8c:53:86:62:9c:90:7f:09:ec:62:4f:a8:5e:70:e8:a8:
84:47:eb:15:ab:68:4e:5c:aa:1e:d3:30:0e:43:b7:f7:d4:c1:
99:82:4a:d8:b9:bb:cf:69:1b:51:a2:bf:12:78:33:39:0d:7c:
c2:f6:91:36:66:26:85:04:4b:34:19:1b:98:77:ae:00:66:21:
b3:26:3f:e8:0d:10:b4:eb:82:48:f9:de:28:4c:8c:b2:22:96:
6c:3a:d9:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:53 2024 by rpki-client on console-fra.rpki-client.org