Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/7EWXRziv_-ZkRyqxnzemzJ22fL4.roa
File: 7EWXRziv_-ZkRyqxnzemzJ22fL4.roa (raw, json)
Hash identifier: cJJWnn5c67MrU3TDbyiu2nUANrcUywy77KOl4KINq3Q=
Subject key identifier: EC:45:97:47:38:AF:FF:E6:64:47:2A:B1:9F:37:A6:CC:9D:B6:7C:BE
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 0190C1E73898811690EC5D43FA5F03B3865E
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/7EWXRziv_-ZkRyqxnzemzJ22fL4.roa
Signing time: Wed 17 Jul 2024 18:14:34 +0000
ROA not before: Wed 17 Jul 2024 18:14:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 45.137.16.0/24 maxlen: 24
45.137.17.0/24 maxlen: 24
45.137.19.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:c1:e7:38:98:81:16:90:ec:5d:43:fa:5f:03:b3:86:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Jul 17 18:14:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ec45974738afffe664472ab19f37a6cc9db67cbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:46:67:f9:1e:5b:e7:93:c3:3e:77:fa:66:3b:
7e:2d:cf:7d:a7:03:2f:74:af:a2:a9:13:61:cc:12:
f4:93:6e:86:c2:8c:98:7b:f1:e3:12:4c:1a:ef:84:
61:3e:10:36:dd:ab:53:52:64:f5:56:76:65:ce:4a:
f0:cf:33:c7:c6:07:7a:b3:84:12:36:dc:bb:d3:f6:
11:63:ec:fc:b4:8a:66:1a:e9:b3:31:44:09:5a:45:
f4:ac:0b:32:34:f6:c9:44:76:7c:c4:e2:da:90:f8:
14:42:86:b6:66:63:c0:fa:94:c3:5f:73:33:e6:a3:
ec:37:24:9d:db:6f:d9:bf:09:75:9d:b7:e8:15:b7:
e0:f4:91:8e:9a:a9:0d:29:1f:58:f1:17:06:67:a8:
dd:d6:17:38:0e:46:20:76:e0:cd:2e:83:cd:3b:d2:
9a:64:2d:18:d8:df:cb:16:48:58:1c:24:4c:e5:a7:
65:21:11:98:75:03:ed:50:2b:d3:6a:9c:fa:0c:c8:
5a:83:2f:c1:35:63:ab:1c:2a:2e:38:df:cf:06:63:
6f:82:35:8f:bf:a6:81:e0:35:51:66:61:5d:43:22:
3c:83:07:4d:65:a2:ab:df:b0:93:15:d4:25:f2:de:
30:12:b0:43:9a:02:9e:43:10:47:1d:bc:a0:82:d1:
c7:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:45:97:47:38:AF:FF:E6:64:47:2A:B1:9F:37:A6:CC:9D:B6:7C:BE
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/7EWXRziv_-ZkRyqxnzemzJ22fL4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.16.0/23
45.137.19.0/24
Signature Algorithm: sha256WithRSAEncryption
43:41:12:d1:93:76:fc:d6:61:72:6c:ef:1a:8e:66:01:95:b9:
c5:f7:3b:78:1f:6f:62:74:de:11:9c:32:41:17:19:c7:09:43:
c6:92:9c:c5:88:6b:13:61:2e:55:c7:df:2f:4c:92:c9:0c:71:
c9:1b:e4:2c:7e:65:ae:bc:b0:af:b9:bc:de:69:d3:c2:e9:46:
35:1e:c9:eb:10:6e:9d:39:78:5e:a1:6e:67:82:07:9c:5d:bd:
a4:94:69:3d:1f:5a:29:95:e4:fd:d0:35:43:9e:e4:da:0c:35:
a7:10:ca:f7:f8:c4:27:9a:01:a9:b3:69:eb:ad:82:bf:19:eb:
69:6e:40:0b:27:07:8e:c4:19:09:a6:5b:00:4f:3e:85:af:8a:
a2:e7:39:b2:b2:d2:c7:47:aa:d3:20:c9:59:69:1a:92:50:77:
29:20:27:f8:5a:94:d3:3a:24:4f:a9:aa:dd:f4:ff:9d:16:dc:
7b:19:c3:07:c3:11:29:88:66:42:3a:2f:9a:dd:cf:34:40:09:
2f:4f:91:85:b0:e6:88:3b:09:e2:19:7d:70:c9:6c:2a:de:07:
ce:2d:8c:b5:24:7a:90:84:e0:0c:65:1b:56:4e:f2:b0:c8:67:
0b:70:a1:8e:08:4e:91:21:aa:4f:8c:de:1c:99:dc:18:0a:02:
12:cc:41:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 31 12:12:33 2024 by rpki-client on console-ams.rpki-client.org