Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/771486-bee3-424a-b341-7cfdf2df6632/1/Ou7RUEbZFafIXAia1veZB2CJI08.roa
File: Ou7RUEbZFafIXAia1veZB2CJI08.roa (raw, json)
Hash identifier: CJb3P4rtwssAoupImIhXM2TdwHJqiyDVmnPQmeqAnOY=
Subject key identifier: 3A:EE:D1:50:46:D9:15:A7:C8:5C:08:9A:D6:F7:99:07:60:89:23:4F
Certificate issuer: /CN=310b05251378994cfa8088d23b6eeed4e9e6ab08
Certificate serial: 0185A2386B693EFAE023CECE1DF5D8662BEE
Authority key identifier: 31:0B:05:25:13:78:99:4C:FA:80:88:D2:3B:6E:EE:D4:E9:E6:AB:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MQsFJRN4mUz6gIjSO27u1Onmqwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/771486-bee3-424a-b341-7cfdf2df6632/1/Ou7RUEbZFafIXAia1veZB2CJI08.roa
Signing time: Wed 11 Jan 2023 19:04:44 +0000
ROA not before: Wed 11 Jan 2023 19:04:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42375
IP address blocks: 45.147.254.0/23 maxlen: 23
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:a2:38:6b:69:3e:fa:e0:23:ce:ce:1d:f5:d8:66:2b:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=310b05251378994cfa8088d23b6eeed4e9e6ab08
Validity
Not Before: Jan 11 19:04:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3aeed15046d915a7c85c089ad6f799076089234f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:b8:30:da:ac:67:7c:27:73:c5:99:8b:08:97:
18:e0:2e:6e:75:66:89:aa:3b:e6:12:b4:2c:1c:e5:
58:a2:5e:ad:6c:0c:bc:14:08:4d:cd:59:82:aa:06:
05:67:d2:23:e5:d6:76:95:da:fd:1e:ac:04:ff:1a:
7f:78:c1:49:98:66:16:bf:7b:11:64:0a:65:31:40:
c9:af:b7:f6:46:22:49:4f:aa:b2:40:e6:05:ee:76:
9f:35:04:5b:70:09:74:44:78:5d:86:6b:24:5f:e0:
77:6f:23:8a:9f:9d:2b:d0:ef:c8:6a:aa:10:80:7b:
df:20:88:5f:ee:0d:f0:c9:82:66:67:f1:7a:53:bf:
4b:23:ae:19:d5:72:25:2d:cf:9e:c5:12:7c:6e:5a:
3c:40:02:d1:db:ee:8a:ed:52:1a:a8:02:c9:3f:c8:
13:80:d6:f3:44:38:59:53:bb:04:42:26:ee:c4:a3:
0d:37:ed:82:b2:c1:82:2b:af:58:c0:4b:1e:fb:27:
fd:d8:93:c9:15:75:d5:ea:05:8d:dc:25:fc:8e:98:
2e:16:97:76:35:7f:69:84:a7:a9:43:b4:2e:1f:5b:
98:e2:cf:0f:c3:78:ac:0f:55:ab:03:bf:8c:98:cd:
85:2a:83:01:29:be:c4:c0:07:87:97:a3:f9:12:78:
40:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:EE:D1:50:46:D9:15:A7:C8:5C:08:9A:D6:F7:99:07:60:89:23:4F
X509v3 Authority Key Identifier:
keyid:31:0B:05:25:13:78:99:4C:FA:80:88:D2:3B:6E:EE:D4:E9:E6:AB:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MQsFJRN4mUz6gIjSO27u1Onmqwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/771486-bee3-424a-b341-7cfdf2df6632/1/Ou7RUEbZFafIXAia1veZB2CJI08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/771486-bee3-424a-b341-7cfdf2df6632/1/MQsFJRN4mUz6gIjSO27u1Onmqwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.147.254.0/23
Signature Algorithm: sha256WithRSAEncryption
3e:78:f5:81:9f:b1:4b:0e:a6:33:af:2e:57:c9:01:20:20:79:
12:96:1f:3f:5f:e1:32:cd:ca:70:45:1b:e2:ef:9c:6b:a8:f0:
6d:27:76:2c:fb:45:90:2c:a2:91:ee:8a:32:86:0e:88:e4:e2:
15:53:3b:9b:4c:cf:6c:98:49:78:61:16:bb:28:81:51:0d:fe:
0c:76:bf:27:63:61:9e:23:2b:51:da:a0:31:bf:c0:b3:d9:2d:
2e:f1:64:1d:cc:f6:7c:57:a6:2a:7d:93:41:27:86:b0:12:4c:
6c:53:91:c1:5c:95:93:42:1e:79:bb:dc:72:31:ba:ea:9d:aa:
a4:85:1e:84:cb:a7:64:5a:f2:87:78:2e:30:50:bb:bb:ef:36:
e8:a7:75:82:28:e4:86:9a:2d:da:e4:46:29:4e:59:15:2d:c7:
89:18:b6:fd:c2:3a:d2:40:d7:26:c0:61:bc:b0:cf:81:94:91:
34:8d:58:16:dd:32:b8:a0:a7:a4:5d:b0:f1:72:32:e2:9d:6e:
ef:c2:94:2e:b4:66:16:f8:88:e6:64:66:76:51:39:d5:a9:42:
95:5c:ea:12:36:b4:a4:69:81:a8:20:cd:66:dd:bb:6d:c8:3e:
f7:15:66:38:91:68:a1:f7:72:96:a5:12:41:6c:25:9c:cd:dd:
6d:0e:85:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:48 2024 by rpki-client on console-fra.rpki-client.org