Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/cc94c8-72e4-4398-b37b-71169567e39c/1/7MdJnz0fSoOPrLIKu-jd6-uqZK8.roa
File: 7MdJnz0fSoOPrLIKu-jd6-uqZK8.roa (raw, json)
Hash identifier: LuNEJuOhCcLZ8z+vUqPiF7OBRk4jAz3jAes2tU0U3oA=
Subject key identifier: EC:C7:49:9F:3D:1F:4A:83:8F:AC:B2:0A:BB:E8:DD:EB:EB:AA:64:AF
Certificate issuer: /CN=08953a5f11a8279cdf8798960de1e22eb1227d95
Certificate serial: 14741C0F
Authority key identifier: 08:95:3A:5F:11:A8:27:9C:DF:87:98:96:0D:E1:E2:2E:B1:22:7D:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CJU6XxGoJ5zfh5iWDeHiLrEifZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/cc94c8-72e4-4398-b37b-71169567e39c/1/7MdJnz0fSoOPrLIKu-jd6-uqZK8.roa
Signing time: Tue 07 Jun 2022 12:43:02 +0000
ROA not before: Tue 07 Jun 2022 12:43:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 21472
IP address blocks: 162.33.228.0/23 maxlen: 23
5.2.16.0/21 maxlen: 21
5.2.16.0/23 maxlen: 23
5.2.18.0/23 maxlen: 23
5.2.23.0/24 maxlen: 24
5.2.20.0/23 maxlen: 23
78.143.254.0/24 maxlen: 24
185.79.56.0/24 maxlen: 24
185.79.56.0/22 maxlen: 22
185.149.176.0/22 maxlen: 22
195.49.144.0/22 maxlen: 22
91.224.190.0/23 maxlen: 23
2a00:e740::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 343153679 (0x14741c0f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08953a5f11a8279cdf8798960de1e22eb1227d95
Validity
Not Before: Jun 7 12:43:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ecc7499f3d1f4a838facb20abbe8ddebebaa64af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:22:58:e3:dd:a7:00:db:97:45:66:95:99:68:
91:82:e0:3e:42:d5:33:30:ec:a1:86:9a:46:8d:da:
a2:6a:9f:e1:6c:98:27:3c:d9:03:f7:8e:da:a6:79:
42:a5:51:48:1e:9c:16:d6:1a:dd:2f:49:02:03:a4:
b9:cf:54:20:47:69:5e:fd:ac:92:8a:6d:2c:60:03:
7a:a4:fa:f9:73:f7:8e:49:75:c6:18:54:06:42:01:
bb:d1:0b:5c:6b:34:9d:2c:e9:34:55:71:e9:b1:67:
ad:c9:8b:9e:b9:41:f3:48:52:64:be:65:ea:35:84:
c7:e7:ec:ba:96:5b:09:4d:e2:5b:b3:e0:9b:32:57:
7c:70:a0:4a:64:c2:d8:04:7f:c7:f3:a2:5b:5d:21:
c6:7e:7c:1b:6f:47:2d:e4:94:40:95:b2:e9:c2:36:
04:8a:10:49:be:41:9a:4f:ff:3d:c5:3e:6d:97:ff:
2f:6c:09:78:fd:5e:34:17:e2:e7:66:78:4b:ae:e6:
05:bd:71:e8:2f:ab:ac:0a:1e:5f:8d:a4:91:5b:c6:
1c:7c:b9:29:31:a3:5d:3e:0c:f1:f4:d7:06:83:f3:
2c:e6:e3:d0:62:93:4d:4c:7f:b7:6e:24:32:e4:f0:
30:bc:06:52:6d:12:fd:dc:75:c2:98:26:45:7f:60:
9e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:C7:49:9F:3D:1F:4A:83:8F:AC:B2:0A:BB:E8:DD:EB:EB:AA:64:AF
X509v3 Authority Key Identifier:
keyid:08:95:3A:5F:11:A8:27:9C:DF:87:98:96:0D:E1:E2:2E:B1:22:7D:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CJU6XxGoJ5zfh5iWDeHiLrEifZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/cc94c8-72e4-4398-b37b-71169567e39c/1/7MdJnz0fSoOPrLIKu-jd6-uqZK8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/cc94c8-72e4-4398-b37b-71169567e39c/1/CJU6XxGoJ5zfh5iWDeHiLrEifZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.2.16.0/21
78.143.254.0/24
91.224.190.0/23
162.33.228.0/23
185.79.56.0/22
185.149.176.0/22
195.49.144.0/22
IPv6:
2a00:e740::/32
Signature Algorithm: sha256WithRSAEncryption
8f:14:7c:f2:5e:4b:fc:bd:55:f5:76:50:9a:05:38:e2:90:a7:
8e:b5:e4:9f:ce:c8:db:15:0d:80:81:3a:fe:52:84:08:0f:93:
7d:23:00:5e:ce:d7:f5:0c:bb:6a:91:c2:ff:96:48:05:a1:40:
49:80:53:02:e6:d1:ad:14:ab:ce:1c:ee:fb:95:6d:f9:76:34:
53:79:89:87:e2:9b:70:ef:83:fb:ec:d1:bf:67:dc:32:44:4a:
f2:66:3b:c6:95:c8:d4:ca:b9:a3:9a:f8:bf:cb:38:52:94:cd:
33:86:c3:4f:ac:1e:f2:ed:e3:cc:20:71:5e:16:41:7f:1c:e8:
8e:84:63:47:c8:ea:94:08:ae:0c:04:35:89:1a:70:21:8d:b5:
b5:92:d8:e7:7a:72:f3:58:82:a6:84:13:52:91:1d:be:ac:c8:
75:38:25:ee:15:ea:1b:18:be:0a:9b:e7:ec:85:bf:1c:a4:56:
05:a5:51:e8:de:f4:c9:40:ac:02:a3:28:95:d2:9d:24:43:69:
a4:9f:28:c3:ba:57:c3:28:a8:2c:1b:b4:b2:a3:8a:ed:2e:ea:
b7:c0:1b:8b:3c:9d:fe:1c:bf:38:c3:14:f7:3e:70:ed:c4:8c:
83:24:63:16:f1:e0:b9:e2:a2:11:68:6e:ef:aa:b1:7c:c0:42:
62:3a:72:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:58 2023 by rpki-client on console-ams.rpki-client.org