Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/IgQF9nmQEGNF-qAEBQKU0CcC_K8.roa
File: IgQF9nmQEGNF-qAEBQKU0CcC_K8.roa (raw, json)
Hash identifier: xVQCWdCSUSjKAKItD+CfBgFd/wKBdDmyc07dpL6Pvbw=
Subject key identifier: 22:04:05:F6:79:90:10:63:45:FA:A0:04:05:02:94:D0:27:02:FC:AF
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 01856C786371968E591915787AE4A5351C2F
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/IgQF9nmQEGNF-qAEBQKU0CcC_K8.roa
Signing time: Sun 01 Jan 2023 08:35:07 +0000
ROA not before: Sun 01 Jan 2023 08:35:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212426
IP address blocks: 45.137.18.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:78:63:71:96:8e:59:19:15:78:7a:e4:a5:35:1c:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Jan 1 08:35:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=220405f67990106345faa004050294d02702fcaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:96:77:38:84:f7:d5:08:58:d9:59:0b:db:3d:
f3:5b:0a:42:7b:dc:f2:42:ad:b4:0f:8b:5a:55:7b:
65:5a:41:f1:da:b6:9b:bd:58:b6:b8:27:8b:f6:e2:
2b:76:c6:f2:18:5d:8f:31:71:cc:c8:ac:09:5f:c6:
0f:13:88:48:18:90:65:03:66:6d:6a:30:fe:8f:b7:
b4:55:b7:26:a4:ad:7c:bd:ab:9b:d2:25:71:61:1a:
d0:9e:31:56:30:99:76:95:c5:ee:1b:68:de:9a:06:
14:90:cd:f3:e3:5c:5f:51:04:a8:e0:e9:94:07:db:
22:fd:20:49:8e:1c:0c:7f:e2:71:10:8e:7b:fb:4e:
d9:42:6d:70:82:03:46:a2:95:4f:fc:8d:9c:27:97:
4e:f2:41:df:95:e6:2c:df:74:2d:01:e6:aa:f7:fe:
77:2f:c5:a1:0e:ee:68:01:f0:84:7a:4d:48:b5:42:
51:cb:aa:6b:05:9b:13:f7:f0:cc:3f:c9:14:fb:f2:
8c:0f:2c:b7:ce:64:dc:e0:dc:22:d1:00:d2:ee:c6:
56:a9:83:72:91:f5:d1:18:82:73:c6:f5:56:c2:9d:
b0:61:dd:b7:9e:1c:65:39:fc:89:60:2f:1e:c5:93:
de:8a:6c:03:6d:b8:18:c8:a5:75:4b:bb:dd:69:15:
ab:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:04:05:F6:79:90:10:63:45:FA:A0:04:05:02:94:D0:27:02:FC:AF
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/IgQF9nmQEGNF-qAEBQKU0CcC_K8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.18.0/24
Signature Algorithm: sha256WithRSAEncryption
05:65:07:b5:4c:2f:7e:55:fd:67:f1:82:b5:2b:be:4a:c3:a4:
48:a4:78:19:94:61:16:b0:4e:a3:97:5d:83:75:88:32:0e:95:
28:1e:b8:dd:62:e1:7b:6e:96:c9:3c:dc:1e:68:7a:bd:44:02:
c5:a9:5a:b0:aa:33:08:0c:b8:cf:87:0c:84:85:7d:c5:0b:4f:
28:be:67:ae:52:2b:5a:e3:f6:40:b2:7c:ec:f2:bd:a8:79:fa:
e1:fa:da:6b:22:61:f9:3b:87:da:e9:41:13:cd:88:67:b7:73:
20:d5:46:9c:db:9e:a8:03:52:cc:f9:0e:a0:7d:0b:45:50:30:
82:25:67:e1:4c:ee:93:9a:2f:a3:72:85:ac:bf:06:18:39:95:
78:10:e2:4a:cd:5c:41:a6:a9:b6:80:1b:a9:b5:55:73:3a:63:
8d:ba:82:a5:d8:85:65:2f:ff:8d:ba:78:36:75:f8:54:53:16:
87:88:e9:3e:ac:79:88:e5:b4:12:bb:50:fd:1e:cc:92:db:64:
dc:5a:4c:08:01:95:32:82:3e:25:2a:51:68:2b:65:a8:7f:34:
f2:9d:41:de:ad:2e:2a:22:ac:fc:09:6a:9f:bb:9a:a7:30:13:
3b:aa:87:08:5a:38:27:2b:3b:96:39:da:7f:34:10:ae:06:b0:
85:3d:39:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:00 2024 by rpki-client on console-fra.rpki-client.org