Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/O0vYMoyh-B8wjPwpZxiOZChDTbc.roa
File: O0vYMoyh-B8wjPwpZxiOZChDTbc.roa (raw, json)
Hash identifier: VXIfBCUHHJuW+JuOTeAchzZJDMOTJ3rkNTJfLug2YUU=
Subject key identifier: 3B:4B:D8:32:8C:A1:F8:1F:30:8C:FC:29:67:18:8E:64:28:43:4D:B7
Certificate issuer: /CN=1f68138d4ec2ea51cacef09ff1058a370a5be190
Certificate serial: 3F022274
Authority key identifier: 1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/O0vYMoyh-B8wjPwpZxiOZChDTbc.roa
Signing time: Wed 11 May 2022 08:14:01 +0000
ROA not before: Wed 11 May 2022 08:14:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1299
IP address blocks: 217.212.224.0/19 maxlen: 19
193.45.0.0/22 maxlen: 22
2.255.248.0/21 maxlen: 21
193.45.6.0/24 maxlen: 24
193.45.10.0/23 maxlen: 24
193.45.14.0/23 maxlen: 23
193.45.142.0/24 maxlen: 24
193.45.142.0/23 maxlen: 23
193.45.254.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1057104500 (0x3f022274)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f68138d4ec2ea51cacef09ff1058a370a5be190
Validity
Not Before: May 11 08:14:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3b4bd8328ca1f81f308cfc2967188e6428434db7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:20:58:17:b9:51:05:2e:6d:f6:cf:4a:ac:fd:
51:4e:53:40:da:8f:ce:ad:32:f8:0b:6c:00:d5:93:
13:a4:b8:9d:92:4d:dc:1a:fa:5d:5b:b1:b8:02:51:
c2:3c:be:10:a5:3f:20:38:92:74:f3:62:d4:04:ed:
f5:69:e0:55:83:2d:84:74:e6:87:79:cc:de:a0:9b:
41:14:94:ce:3b:b0:d4:64:b5:25:7b:1b:13:82:4d:
ff:05:b8:38:17:a4:67:ee:c2:19:cf:f5:f4:bc:2e:
a8:50:f3:1a:fa:04:6b:5c:d7:a6:c7:0d:9b:31:b1:
70:f3:d0:8f:0f:80:98:49:26:ff:1b:d6:a5:87:08:
03:1f:b1:ef:25:bc:7b:f5:86:e4:35:1a:32:e8:75:
02:44:12:89:6a:6b:94:f3:71:73:12:ec:86:d8:71:
8c:c7:7b:78:61:07:75:c9:40:93:ed:c2:d8:80:a8:
fb:b7:0c:13:1f:e0:cc:81:10:fc:cb:7d:5a:93:44:
5a:1b:5b:7b:4e:f4:23:56:ab:ac:ec:56:00:fe:58:
77:ce:53:99:32:9d:3d:b8:30:f9:fd:59:39:6c:1a:
a5:d7:29:0c:32:8c:5e:81:e0:f8:0d:3a:6f:c5:fd:
92:59:a6:1c:ac:30:4c:a6:64:1c:e9:10:83:31:f4:
2c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:4B:D8:32:8C:A1:F8:1F:30:8C:FC:29:67:18:8E:64:28:43:4D:B7
X509v3 Authority Key Identifier:
keyid:1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/O0vYMoyh-B8wjPwpZxiOZChDTbc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.255.248.0/21
193.45.0.0/22
193.45.6.0/24
193.45.10.0/23
193.45.14.0/23
193.45.142.0/23
193.45.254.0/24
217.212.224.0/19
Signature Algorithm: sha256WithRSAEncryption
a0:8e:dc:7a:2d:49:c9:68:99:9b:be:16:a6:ca:fa:57:3e:ab:
e0:89:20:d3:d8:4d:61:c1:50:83:9d:23:e8:3d:b8:a9:a5:09:
f7:46:09:d3:30:17:20:a5:2f:7e:a6:b2:47:81:12:32:0e:24:
6d:bb:63:99:8a:78:de:7a:81:0a:ea:56:e4:d9:4a:ab:7a:38:
5f:26:1f:fd:5e:05:2f:47:6d:56:1e:45:ae:28:06:65:b3:29:
f8:3b:82:5d:99:4f:47:a7:08:15:22:50:bc:d4:9c:d6:f4:4a:
f2:34:42:cd:fd:5c:24:d3:b3:4c:c2:2c:fc:6e:6c:15:dd:51:
25:40:79:04:f9:84:52:f9:cc:85:5a:f1:09:8f:ca:fe:1f:c5:
be:c6:f3:0a:0b:d2:5d:03:d2:43:f0:85:6d:9d:7e:c5:cd:b5:
d3:7c:e1:78:92:48:d7:b0:7d:6c:d2:7d:f1:96:b9:79:24:bc:
a9:71:1a:77:5e:1e:59:4e:72:2c:3e:d0:3d:d6:91:cd:7c:ba:
16:d4:0c:d5:83:d0:b7:e8:c4:70:e4:b2:3b:45:aa:c7:8f:3c:
d4:b5:ef:33:cb:c6:16:08:ed:ed:83:75:fd:83:7b:87:70:3a:
db:e5:a4:81:3d:8a:d6:86:a9:28:e9:99:9e:7d:c7:56:3e:74:
7e:3d:a5:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:52 2023 by rpki-client on console-fra.rpki-client.org