Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/4VtnJhu89I1shrqzNAwh_SZOahk.roa
File: 4VtnJhu89I1shrqzNAwh_SZOahk.roa (raw, json)
Hash identifier: 3FRcKLzw1W3H4XhfTH2MXGl+GTLFEUshE/0eHhoIexk=
Subject key identifier: E1:5B:67:26:1B:BC:F4:8D:6C:86:BA:B3:34:0C:21:FD:26:4E:6A:19
Certificate issuer: /CN=1f68138d4ec2ea51cacef09ff1058a370a5be190
Certificate serial: 3F082118
Authority key identifier: 1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/4VtnJhu89I1shrqzNAwh_SZOahk.roa
Signing time: Fri 13 May 2022 08:10:38 +0000
ROA not before: Fri 13 May 2022 08:10:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1299
IP address blocks: 217.212.224.0/19 maxlen: 19
193.45.0.0/22 maxlen: 22
2.255.248.0/21 maxlen: 21
193.45.6.0/24 maxlen: 24
193.45.10.0/23 maxlen: 24
193.45.14.0/23 maxlen: 23
193.45.142.0/24 maxlen: 24
193.45.142.0/23 maxlen: 23
193.45.254.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1057497368 (0x3f082118)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f68138d4ec2ea51cacef09ff1058a370a5be190
Validity
Not Before: May 13 08:10:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e15b67261bbcf48d6c86bab3340c21fd264e6a19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:11:44:34:ce:77:ed:0e:05:23:f9:83:a6:72:
ac:b0:51:d1:46:d5:c2:46:e4:b2:3b:23:27:4a:8d:
4c:b8:61:c3:2c:b3:15:a6:31:46:59:04:dd:6a:10:
b7:85:17:67:a2:2c:6c:62:a5:5d:80:52:a3:d5:45:
b1:11:4a:e1:d5:9a:00:65:0e:f2:0f:b0:9a:b7:51:
89:46:4e:d8:a3:28:42:cc:dd:49:83:9c:30:1b:71:
66:38:d2:36:1b:87:3e:a0:55:df:9f:45:2d:7e:f2:
8a:e5:61:2d:f3:89:74:02:c6:39:4e:86:b0:04:e0:
92:6d:54:9b:ec:7c:26:22:f7:9d:11:54:f0:10:8e:
b9:01:6f:7e:de:f5:82:9f:27:03:c6:fb:b0:e2:cc:
58:3c:e6:83:ee:cf:e9:63:f1:f6:2d:17:35:47:61:
77:19:c3:c1:8c:32:d0:e2:4b:7d:25:8c:f5:2b:76:
d0:d6:a8:8d:ee:fb:2e:7f:a7:8b:fb:5d:8f:00:65:
53:19:ed:b6:42:8b:66:67:29:6a:9c:47:ad:45:33:
75:a4:5e:2c:58:9f:3b:bf:23:a4:df:91:71:9f:90:
2a:05:f4:b1:4f:9e:70:3d:54:62:fd:c6:43:b9:84:
cb:f3:29:a8:d9:e1:d6:e1:91:42:a3:1f:ea:71:1a:
87:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:5B:67:26:1B:BC:F4:8D:6C:86:BA:B3:34:0C:21:FD:26:4E:6A:19
X509v3 Authority Key Identifier:
keyid:1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/4VtnJhu89I1shrqzNAwh_SZOahk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.255.248.0/21
193.45.0.0/22
193.45.6.0/24
193.45.10.0/23
193.45.14.0/23
193.45.142.0/23
193.45.254.0/24
217.212.224.0/19
Signature Algorithm: sha256WithRSAEncryption
4e:ea:72:71:5a:e2:ea:24:8e:de:89:69:b1:ad:75:71:c2:65:
1f:ab:e3:71:78:89:13:9b:23:be:84:51:a2:e5:9b:2f:01:e6:
47:37:f7:b6:ec:48:0f:eb:14:dd:09:a2:89:7c:ef:6d:47:35:
bb:6e:b2:4a:e7:b1:74:be:bf:af:c9:c5:78:a6:33:4f:e7:90:
26:29:b0:d9:fe:35:e9:df:81:2b:36:9b:07:48:4f:cf:5f:77:
0f:5b:c3:e1:ce:4d:64:53:67:ec:c7:2a:4b:03:08:d0:f7:cb:
7e:7c:76:cb:6a:5b:aa:7a:07:35:c2:64:dc:f5:ed:7a:34:af:
48:9f:44:99:d7:e0:85:20:dd:b9:ae:a6:5f:78:53:e4:ae:af:
12:a5:43:9a:4d:b7:08:68:d2:a7:59:04:1e:9f:c2:96:78:4d:
8c:e5:cc:39:20:52:a0:34:27:a4:ae:5b:80:32:ab:c9:13:cf:
6b:4d:fa:7a:dd:32:fe:b0:ca:fe:3d:c9:8c:59:3f:38:79:9c:
de:8a:3c:2a:c7:8e:89:cf:39:69:68:8a:10:bc:7c:f3:0c:29:
bc:22:39:89:53:8a:36:22:c2:98:28:f1:dd:b1:62:21:aa:49:
3c:17:4f:0d:23:a9:99:1a:21:2f:89:0b:cd:08:0e:f2:2d:6a:
e2:21:49:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:44 2023 by rpki-client on console-ams.rpki-client.org