Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/oAE7FFKa9B-y8G7_XV-tMjW4lDs.roa
File: oAE7FFKa9B-y8G7_XV-tMjW4lDs.roa (raw, json)
Hash identifier: Vm5dGll5GXOivjN0zer7xgt0sVS/GsZ/8zSBkuqXqno=
Subject key identifier: A0:01:3B:14:52:9A:F4:1F:B2:F0:6E:FF:5D:5F:AD:32:35:B8:94:3B
Certificate issuer: /CN=11dd0ebff5ba38a8758b794d04d62905194a3266
Certificate serial: 02CF3F56
Authority key identifier: 11:DD:0E:BF:F5:BA:38:A8:75:8B:79:4D:04:D6:29:05:19:4A:32:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/oAE7FFKa9B-y8G7_XV-tMjW4lDs.roa
Signing time: Thu 10 Mar 2022 16:44:47 +0000
ROA not before: Thu 10 Mar 2022 16:44:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 185.160.195.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47136598 (0x2cf3f56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11dd0ebff5ba38a8758b794d04d62905194a3266
Validity
Not Before: Mar 10 16:44:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a0013b14529af41fb2f06eff5d5fad3235b8943b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fc:4f:3c:80:15:fe:ba:a0:a9:11:7a:8f:0b:
48:10:4b:14:54:75:a4:00:c8:97:f5:72:96:2f:1f:
26:40:82:4d:2e:48:80:74:90:82:64:7f:21:cf:20:
54:9c:01:28:fa:63:d0:a6:2e:9e:20:eb:3a:05:da:
0e:ac:91:d8:80:79:05:62:9e:ce:84:7c:e9:7a:73:
e2:db:49:06:ff:02:b0:5f:5f:b5:da:8d:7a:22:e7:
e1:a6:ae:30:b5:27:c1:05:b0:20:0f:f1:a3:fb:f2:
1b:08:3c:ac:7f:78:20:a6:71:35:12:0c:cf:e7:fe:
13:ff:ab:23:69:5a:ed:99:1d:74:f3:fa:49:b8:a9:
e5:6b:90:34:83:d3:9d:87:17:79:36:fd:41:4d:d0:
72:10:3f:b1:eb:b4:a2:dc:b5:28:82:6e:7d:16:21:
c4:7d:26:d3:4c:0c:e0:a9:9d:69:c3:96:c8:7b:25:
bb:8c:e9:9c:23:ea:ef:7e:10:5b:89:ac:bd:cf:ac:
25:0e:1a:c6:60:80:54:33:2b:cf:d3:91:80:be:0a:
60:04:b4:a2:24:9f:12:16:ff:a6:6b:e0:70:ef:ef:
b8:7f:d3:9d:f9:a2:bb:e8:d7:2d:01:1f:89:e2:b4:
02:00:70:68:1a:93:e1:33:a5:8f:9c:e1:8d:b1:af:
c7:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:01:3B:14:52:9A:F4:1F:B2:F0:6E:FF:5D:5F:AD:32:35:B8:94:3B
X509v3 Authority Key Identifier:
keyid:11:DD:0E:BF:F5:BA:38:A8:75:8B:79:4D:04:D6:29:05:19:4A:32:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/oAE7FFKa9B-y8G7_XV-tMjW4lDs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.160.195.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:a7:ac:eb:d2:a9:a2:07:be:4a:89:d0:b7:b5:12:71:3a:e1:
a6:c0:b4:b8:c8:93:54:91:bf:db:df:df:db:90:b2:cd:48:98:
5c:72:1c:5b:e1:34:13:96:84:cc:79:b9:14:7d:4b:39:89:c8:
98:ae:b0:ce:f0:95:ce:19:47:11:ef:a8:29:bf:d1:6f:46:34:
43:0f:37:39:bb:b9:a2:e8:bd:2c:20:77:72:83:3f:1a:7e:fc:
e6:ef:12:05:75:67:3e:65:a1:53:6f:75:fa:fb:9c:b2:2f:e1:
d8:69:2d:12:01:6e:ba:14:d6:a8:dd:fd:0f:40:54:ef:9e:e8:
a1:05:e9:1c:ff:f3:56:a4:f3:ad:d0:b6:aa:9f:31:86:5b:11:
eb:29:0f:7d:19:fc:da:3e:5a:c9:3a:13:57:5a:af:fb:d6:9e:
50:f3:85:fd:73:f8:e4:5a:2b:3e:cb:a3:94:fe:3b:2b:45:b0:
fe:56:65:74:0b:30:91:98:23:99:29:22:4e:4f:39:a0:64:ee:
e7:7f:6f:4c:17:8b:8a:78:4b:9c:2a:a0:53:56:ab:13:c0:e9:
61:f6:4c:33:75:1e:d2:7a:ed:a5:d3:0f:98:5a:8b:a5:15:f6:
c2:1a:7f:cb:ab:1f:bb:54:22:04:33:52:5d:d9:0c:b8:83:f4:
66:35:fe:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:16 2023 by rpki-client on console-ams.rpki-client.org