Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/ZD7KXZpWxP9-3EQG4vX6ih-QljI.roa
File: ZD7KXZpWxP9-3EQG4vX6ih-QljI.roa (raw, json)
Hash identifier: NcaTp+RYTOQeAfG/qm4PYBQSnxiHmGz+nhHs+Jz18v8=
Subject key identifier: 64:3E:CA:5D:9A:56:C4:FF:7E:DC:44:06:E2:F5:FA:8A:1F:90:96:32
Certificate issuer: /CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Certificate serial: 0396FF3D
Authority key identifier: FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/ZD7KXZpWxP9-3EQG4vX6ih-QljI.roa
Signing time: Sat 01 Jan 2022 11:01:27 +0000
ROA not before: Sat 01 Jan 2022 11:01:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44667
IP address blocks: 45.157.252.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60227389 (0x396ff3d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Validity
Not Before: Jan 1 11:01:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=643eca5d9a56c4ff7edc4406e2f5fa8a1f909632
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:93:e5:00:38:37:c5:3f:f2:8e:ab:64:91:1d:
92:84:0f:cb:98:8b:fb:f5:03:04:41:88:c3:48:ed:
21:ed:e4:12:ec:57:0a:a4:5d:bc:7e:6b:05:1e:c0:
4f:15:8f:ad:16:17:b5:3a:07:ff:cb:3a:fb:0e:47:
3f:f9:b3:fe:72:f9:e2:c4:6c:3d:e9:32:ef:5a:36:
7a:15:53:b2:6a:5a:e6:72:f8:a3:40:88:c1:52:69:
9d:49:8a:14:6a:68:94:23:4e:2c:7f:e7:eb:8b:a9:
95:a1:88:6e:bd:d6:08:c5:df:9b:b6:b0:38:97:02:
ec:b4:07:82:56:de:1f:5b:0d:d6:aa:37:2b:0e:2d:
47:54:38:46:b4:7c:aa:0b:12:2e:51:31:6b:69:04:
da:d8:15:4c:a7:18:65:a0:5e:17:50:d1:04:3a:58:
08:e0:d7:e2:5b:f9:3c:56:55:c5:a7:2b:43:12:9d:
a1:6a:e9:26:8f:4d:f2:d5:7c:39:f2:9d:54:65:a7:
78:ba:4c:ee:5e:83:cb:23:98:a1:ef:5e:77:1f:f5:
a2:c4:83:a1:19:5a:e9:f7:48:16:93:f2:5e:c5:d0:
bb:91:60:d9:6b:8b:8c:aa:b3:3e:52:e1:3a:5c:22:
a1:2a:9a:3c:df:ac:5e:db:de:58:44:1b:9e:ad:75:
9e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:3E:CA:5D:9A:56:C4:FF:7E:DC:44:06:E2:F5:FA:8A:1F:90:96:32
X509v3 Authority Key Identifier:
keyid:FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/ZD7KXZpWxP9-3EQG4vX6ih-QljI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/_neeViOLby6gaO3k4grvAMkEEys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.252.0/22
Signature Algorithm: sha256WithRSAEncryption
6c:fd:f7:17:42:91:f5:3d:b6:f1:4a:cb:63:f7:4b:86:4d:39:
b4:e9:00:81:3d:26:68:07:c0:3a:c8:90:89:40:95:08:58:51:
5f:94:8b:88:19:52:a3:7d:b5:b2:d4:ff:a6:b6:3c:53:79:2d:
ea:8c:9e:c2:af:0f:21:c9:a1:46:9c:88:30:d0:13:29:bf:68:
bd:89:c4:c6:4d:80:aa:54:d5:62:41:b4:db:8f:38:92:ea:57:
21:97:10:9b:00:ff:83:93:b3:20:3d:d5:11:54:ab:d4:4b:64:
64:0c:65:92:13:d7:58:02:84:57:b8:b9:f0:51:cc:89:6f:4d:
64:cc:06:26:77:1b:12:27:cb:b2:76:57:3e:95:18:17:04:d7:
d8:f5:e1:fe:94:b5:81:4d:55:4f:79:37:00:3d:84:11:93:47:
41:30:9d:21:5f:7f:00:a2:9e:9a:be:6e:ac:fb:03:b7:91:5f:
36:a8:da:34:a4:75:76:75:a6:8a:e2:18:54:bd:7f:10:14:d5:
97:b5:5b:db:da:c1:23:57:7a:01:67:7d:6c:04:df:43:99:c1:
60:86:da:c8:eb:63:6b:2c:d9:83:c9:53:59:33:20:22:d3:e3:
33:2a:c4:cd:e2:70:b0:f8:10:b0:a6:d2:4d:70:08:92:c6:b1:
f4:17:f0:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:13 2024 by rpki-client on console-fra.rpki-client.org