Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/b21a38-db62-4438-ba9c-f57f86df4f16/1/EDLCt4RvQVrr-4Csxq7eSjxqnlA.roa
File: EDLCt4RvQVrr-4Csxq7eSjxqnlA.roa (raw, json)
Hash identifier: xpR1z6KI9EhM3ea9GD4jcuVpQbIF+VLZZ3arrqoH5YQ=
Subject key identifier: 10:32:C2:B7:84:6F:41:5A:EB:FB:80:AC:C6:AE:DE:4A:3C:6A:9E:50
Certificate issuer: /CN=4777da157768423fcba9217392ec7f483b3b9442
Certificate serial: 1818BB53
Authority key identifier: 47:77:DA:15:77:68:42:3F:CB:A9:21:73:92:EC:7F:48:3B:3B:94:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R3faFXdoQj_LqSFzkux_SDs7lEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/b21a38-db62-4438-ba9c-f57f86df4f16/1/EDLCt4RvQVrr-4Csxq7eSjxqnlA.roa
Signing time: Tue 05 Apr 2022 16:49:19 +0000
ROA not before: Tue 05 Apr 2022 16:49:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60274
IP address blocks: 185.123.176.0/22 maxlen: 22
109.69.168.0/21 maxlen: 21
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 404274003 (0x1818bb53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4777da157768423fcba9217392ec7f483b3b9442
Validity
Not Before: Apr 5 16:49:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1032c2b7846f415aebfb80acc6aede4a3c6a9e50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:85:c6:a4:89:a4:39:17:cc:8f:3d:12:95:95:
0e:e6:d7:af:2c:92:f8:08:4a:06:b6:50:46:df:df:
9d:84:81:8b:f1:a9:22:63:25:a9:38:b2:53:36:8f:
82:60:08:c0:70:f6:b3:45:b2:b1:bf:f2:c0:92:9a:
da:8b:81:e7:b3:f4:c0:af:ce:5c:fa:ee:28:b3:00:
50:27:da:02:60:e5:99:85:22:9c:aa:86:8a:a9:a5:
b2:51:66:c8:10:42:1d:e4:34:99:2b:7b:a4:0d:d3:
90:a6:9e:44:52:91:e8:fe:a4:27:d3:6d:fb:3c:38:
e8:7b:b8:ef:87:5e:1f:6f:be:3d:e5:9b:f2:5e:77:
25:59:60:82:8d:32:2c:97:b8:6d:c7:e1:4f:d1:0e:
4a:cc:e7:b7:a8:f0:3c:3b:fc:a9:f0:bd:6c:f5:ac:
e8:56:af:ea:1a:16:62:f9:ab:e3:53:b8:43:1f:e0:
78:31:eb:20:96:3b:57:fd:77:f2:8c:e2:f0:02:64:
c3:e2:0e:e2:d4:5b:ac:9f:71:c5:d9:70:11:01:f1:
4b:e6:96:a8:ac:33:32:b4:01:c6:99:d3:bc:fe:70:
5f:33:c3:ac:ad:3b:15:f2:e6:4e:76:07:38:6d:ae:
31:c5:84:f1:c2:5d:06:10:58:01:ef:3f:ef:51:86:
1d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:32:C2:B7:84:6F:41:5A:EB:FB:80:AC:C6:AE:DE:4A:3C:6A:9E:50
X509v3 Authority Key Identifier:
keyid:47:77:DA:15:77:68:42:3F:CB:A9:21:73:92:EC:7F:48:3B:3B:94:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R3faFXdoQj_LqSFzkux_SDs7lEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/b21a38-db62-4438-ba9c-f57f86df4f16/1/EDLCt4RvQVrr-4Csxq7eSjxqnlA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/b21a38-db62-4438-ba9c-f57f86df4f16/1/R3faFXdoQj_LqSFzkux_SDs7lEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.69.168.0/21
185.123.176.0/22
Signature Algorithm: sha256WithRSAEncryption
37:98:ee:bb:cf:55:03:80:0f:4f:26:80:5e:17:c2:d0:4b:62:
c0:a9:69:43:4f:f7:5d:49:d4:f7:94:e5:e3:fd:19:20:04:41:
4d:9b:02:25:8b:7c:55:10:35:67:45:a3:83:77:ad:80:a1:30:
16:6a:99:40:96:ac:fd:97:99:3b:7c:29:8d:4a:9b:74:c5:91:
63:22:97:ad:9e:c6:ef:42:39:a0:49:1b:59:ab:d4:fe:f0:0a:
c2:48:b2:a0:73:01:a2:17:25:62:be:b0:86:45:67:2e:d5:b2:
41:7d:87:cb:e4:ca:40:8f:3e:c9:08:99:1c:bd:60:09:37:a8:
2a:bc:8d:3f:2b:57:74:8e:d4:ef:2e:f4:3b:61:bb:04:e2:da:
51:7e:9d:f9:2f:ed:24:7b:f3:2e:58:54:81:25:93:59:35:65:
4a:ce:9d:cf:10:bd:99:f5:8f:55:89:a3:52:01:19:34:bb:43:
ce:4d:c6:12:b3:b7:cc:88:cc:c2:b4:81:de:eb:7a:cd:47:6c:
b7:83:e9:a8:86:ec:bd:af:7b:f2:49:e3:c3:16:a4:91:47:9c:
c3:b2:6e:30:75:30:a7:f3:d2:1d:3f:32:5d:20:3f:cf:91:91:
2b:6b:7f:b7:db:93:85:8e:6e:09:f0:32:c1:11:38:81:c5:42:
73:ba:c8:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:32 2024 by rpki-client on console-ams.rpki-client.org