Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/86a426-56ee-46dd-9425-7f92c34eb07c/1/hZd4WcYgOnxFzug--wVjlXgjUAY.roa
File: hZd4WcYgOnxFzug--wVjlXgjUAY.roa (raw, json)
Hash identifier: reBbyk2fGeRAJN4azlfMBYuWuNtoDQBFGd1fDg4cMGo=
Subject key identifier: 85:97:78:59:C6:20:3A:7C:45:CE:E8:3E:FB:05:63:95:78:23:50:06
Certificate issuer: /CN=9c2cb7f9ca0efd72be258a4a09358806374b4662
Certificate serial: 01856D01C6EC57B352C43E365357CCD4E826
Authority key identifier: 9C:2C:B7:F9:CA:0E:FD:72:BE:25:8A:4A:09:35:88:06:37:4B:46:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nCy3-coO_XK-JYpKCTWIBjdLRmI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/86a426-56ee-46dd-9425-7f92c34eb07c/1/hZd4WcYgOnxFzug--wVjlXgjUAY.roa
Signing time: Sun 01 Jan 2023 11:05:11 +0000
ROA not before: Sun 01 Jan 2023 11:05:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12533
IP address blocks: 82.145.96.0/19 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:01:c6:ec:57:b3:52:c4:3e:36:53:57:cc:d4:e8:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c2cb7f9ca0efd72be258a4a09358806374b4662
Validity
Not Before: Jan 1 11:05:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=85977859c6203a7c45cee83efb05639578235006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:f1:22:16:4c:22:28:fb:a6:15:c0:b7:97:3a:
94:b2:ab:74:17:81:b8:17:8e:bb:40:4e:e3:b9:1c:
eb:da:99:d6:3e:50:dd:c3:cb:6b:b6:10:56:06:23:
d7:27:82:52:b6:31:4c:cb:2a:58:36:c6:e8:c3:2b:
a6:55:55:2c:1b:9b:ff:c0:bd:82:68:f0:08:7b:d5:
d6:4e:78:2b:32:c8:fb:e9:df:8c:35:1d:7d:64:c4:
3f:64:19:40:de:3d:f1:00:22:2a:aa:ed:56:3a:78:
78:75:bc:26:5c:dc:e7:a5:3d:64:13:f8:93:7b:a0:
d9:f4:6d:95:8f:e4:9d:18:20:a0:60:89:6d:18:b4:
9a:b2:b2:f2:6f:59:07:8f:c4:21:83:38:5f:a0:63:
0d:38:8b:81:79:45:0e:17:ba:e8:aa:b1:c3:d2:81:
fc:ef:c9:80:b2:68:13:3c:52:f3:c5:c8:ac:19:e2:
97:c1:e8:65:32:95:a8:04:28:0b:24:f2:0c:3c:73:
3a:09:c3:54:99:f5:57:fa:ed:84:b2:fb:9f:d9:2b:
cc:b2:05:b1:1d:d3:43:ba:e4:75:2b:c5:37:38:b7:
66:fa:c1:ea:0e:a8:cf:81:07:82:11:90:fb:ff:b8:
ef:a2:fa:9e:66:59:02:bf:94:2b:88:94:fe:c5:2c:
14:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:97:78:59:C6:20:3A:7C:45:CE:E8:3E:FB:05:63:95:78:23:50:06
X509v3 Authority Key Identifier:
keyid:9C:2C:B7:F9:CA:0E:FD:72:BE:25:8A:4A:09:35:88:06:37:4B:46:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nCy3-coO_XK-JYpKCTWIBjdLRmI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/86a426-56ee-46dd-9425-7f92c34eb07c/1/hZd4WcYgOnxFzug--wVjlXgjUAY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/86a426-56ee-46dd-9425-7f92c34eb07c/1/nCy3-coO_XK-JYpKCTWIBjdLRmI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.145.96.0/19
Signature Algorithm: sha256WithRSAEncryption
2c:c1:e7:09:13:30:f3:18:cb:69:d1:7f:11:1b:da:8e:a8:4d:
f9:8e:8d:9b:8b:50:4b:78:cf:65:22:92:b3:fe:ff:d4:d0:c0:
e6:15:cd:b5:10:2a:00:3a:7f:6b:4e:af:e4:86:5a:5d:e5:f9:
a2:42:3a:95:de:16:70:28:a3:a4:3d:1e:68:8a:81:e8:c7:0d:
84:5f:e1:ea:f4:3f:93:50:40:32:ae:65:b8:09:f4:3b:40:f2:
75:f6:4c:4c:a4:3b:de:ae:5a:ad:fd:ff:c1:c5:fa:5d:3e:26:
67:d1:fb:3a:7e:89:20:aa:64:60:26:76:eb:14:0c:37:a0:0a:
a0:1d:49:87:19:38:83:ce:96:f6:da:4a:19:87:87:c2:ae:8e:
5d:cd:0d:50:36:a3:f3:15:aa:d9:c9:2f:01:2b:27:b1:02:e4:
11:f4:d2:84:ff:01:70:7d:f9:ab:a3:64:c1:9e:34:12:35:10:
72:63:d8:82:bb:1a:9f:bb:90:0b:5a:10:03:d3:b9:51:50:ed:
01:c0:51:4d:a8:75:37:6e:91:68:73:40:6a:c6:0a:c0:c2:5c:
08:66:97:f7:54:83:37:04:04:78:92:a9:9e:fc:b7:0f:5c:39:
7f:01:c4:a0:57:a7:a5:f2:5b:2a:2a:da:54:82:b7:73:d3:28:
82:fa:98:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:53 2024 by rpki-client on console-fra.rpki-client.org