Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/7a39b1-1d1c-4919-b19c-3eebe7196972/1/4bDsjOsLpPG5GOqD635x6htBATc.roa
File: 4bDsjOsLpPG5GOqD635x6htBATc.roa (raw, json)
Hash identifier: soU35JnSyIdzZVn3KP6iIRe3G/97lNvl27yh3bxNG/U=
Subject key identifier: E1:B0:EC:8C:EB:0B:A4:F1:B9:18:EA:83:EB:7E:71:EA:1B:41:01:37
Certificate issuer: /CN=679a75debd65359a45317f203f11a321e14b2f2c
Certificate serial: 05503B0A
Authority key identifier: 67:9A:75:DE:BD:65:35:9A:45:31:7F:20:3F:11:A3:21:E1:4B:2F:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5p13r1lNZpFMX8gPxGjIeFLLyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/7a39b1-1d1c-4919-b19c-3eebe7196972/1/4bDsjOsLpPG5GOqD635x6htBATc.roa
Signing time: Sat 01 Jan 2022 06:53:49 +0000
ROA not before: Sat 01 Jan 2022 06:53:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60781
IP address blocks: 86.104.226.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89144074 (0x5503b0a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=679a75debd65359a45317f203f11a321e14b2f2c
Validity
Not Before: Jan 1 06:53:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e1b0ec8ceb0ba4f1b918ea83eb7e71ea1b410137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:85:6f:b5:61:41:07:67:a4:d3:3c:f2:84:d8:
41:91:5f:27:02:53:11:f6:95:27:e2:68:a7:cc:e3:
5e:cd:49:c8:9d:4e:04:be:8a:5e:bf:aa:59:6f:93:
35:c7:9f:cb:24:69:3c:ce:8c:18:11:35:a4:48:e8:
fa:e7:85:d9:29:e8:46:e3:fe:11:0f:f6:34:63:ab:
ca:18:74:88:2a:a2:85:df:63:bc:bf:71:11:94:85:
44:a7:69:f4:9d:38:6d:07:5b:81:fd:16:de:61:5b:
98:c0:e8:41:11:93:6e:a1:62:38:7d:30:f1:10:7a:
00:52:f2:39:be:3f:79:0d:a5:38:0e:d5:30:14:a3:
03:49:94:43:cc:36:0a:f2:9b:0e:c0:af:0d:76:50:
a3:f9:c4:95:bc:45:ed:c4:16:64:aa:a0:ab:2d:41:
3b:df:7d:43:af:f9:56:75:77:d5:c3:48:2c:05:78:
b5:72:4e:ed:64:03:78:56:ab:4d:65:c6:4c:f5:fb:
f6:d7:a1:c9:5b:c4:2d:30:ff:f9:3e:01:1f:43:f7:
28:34:f0:c5:b9:c3:e0:a4:18:6b:65:80:47:89:e1:
7d:29:eb:51:e8:11:21:e6:da:a4:47:5a:f3:24:71:
3e:94:d4:f2:ae:a8:7e:2c:45:55:13:05:7d:c1:9c:
cc:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:B0:EC:8C:EB:0B:A4:F1:B9:18:EA:83:EB:7E:71:EA:1B:41:01:37
X509v3 Authority Key Identifier:
keyid:67:9A:75:DE:BD:65:35:9A:45:31:7F:20:3F:11:A3:21:E1:4B:2F:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5p13r1lNZpFMX8gPxGjIeFLLyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7a39b1-1d1c-4919-b19c-3eebe7196972/1/4bDsjOsLpPG5GOqD635x6htBATc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7a39b1-1d1c-4919-b19c-3eebe7196972/1/Z5p13r1lNZpFMX8gPxGjIeFLLyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.104.226.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:86:59:9e:a7:e8:99:3e:66:fc:ae:e3:a7:c4:7d:10:e2:65:
0c:71:57:fa:b9:97:70:af:0e:d4:f8:6a:4b:62:a3:c6:44:5f:
dd:e1:5a:f7:25:f0:4f:5c:50:67:ba:ba:63:00:43:a1:b6:00:
6c:1b:02:a7:46:3d:f6:55:44:a0:09:ab:3c:ff:3a:b0:91:ea:
8e:23:60:d3:e3:3e:02:fc:ab:9f:7f:0d:20:28:44:5a:b9:1f:
02:3a:20:56:78:18:25:6c:e9:69:51:c9:33:2b:2b:b9:c4:f1:
de:69:ea:4a:6c:53:4d:21:ab:e6:b2:c1:d6:92:44:29:f6:cc:
ac:cf:db:03:c3:67:6a:c8:34:51:87:25:2c:ee:48:d6:03:a4:
97:40:95:f6:a2:a1:70:ef:f2:76:1e:0a:ab:3a:85:f6:1e:ba:
3a:8b:b0:b6:db:54:de:28:db:77:6b:b3:09:c8:74:f2:f0:ee:
44:39:96:4c:f8:d7:e0:4b:d4:fe:09:e9:f9:8d:f1:99:c7:40:
04:5b:fb:51:ff:8f:08:40:bb:77:9d:e3:bb:3c:84:f0:73:55:
b6:9c:73:08:07:0b:6e:b5:b0:52:20:a5:50:44:e1:15:7d:87:
c7:ad:99:63:27:d6:79:fd:15:52:10:10:00:a8:84:c9:65:2b:
a4:9f:a2:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:36 2023 by rpki-client on console-fra.rpki-client.org