Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/7a39b1-1d1c-4919-b19c-3eebe7196972/1/8EQL6hqKniKUK1YwL8iXUxwDntc.roa
File: 8EQL6hqKniKUK1YwL8iXUxwDntc.roa (raw, json)
Hash identifier: Pws3TgeJBWSI+alxVxNmFdLHoQSUJgmAXAU1aGyd35E=
Subject key identifier: F0:44:0B:EA:1A:8A:9E:22:94:2B:56:30:2F:C8:97:53:1C:03:9E:D7
Certificate issuer: /CN=679a75debd65359a45317f203f11a321e14b2f2c
Certificate serial: 054E4B38
Authority key identifier: 67:9A:75:DE:BD:65:35:9A:45:31:7F:20:3F:11:A3:21:E1:4B:2F:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5p13r1lNZpFMX8gPxGjIeFLLyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/7a39b1-1d1c-4919-b19c-3eebe7196972/1/8EQL6hqKniKUK1YwL8iXUxwDntc.roa
Signing time: Sat 01 Jan 2022 06:53:47 +0000
ROA not before: Sat 01 Jan 2022 06:53:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22773
IP address blocks: 185.137.36.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89017144 (0x54e4b38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=679a75debd65359a45317f203f11a321e14b2f2c
Validity
Not Before: Jan 1 06:53:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f0440bea1a8a9e22942b56302fc897531c039ed7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:2c:0a:6b:01:72:3c:f8:3a:13:f6:bf:e0:c7:
84:45:66:80:23:79:8f:8d:eb:0f:37:e6:4f:2f:eb:
21:59:f7:5b:96:ca:0c:88:50:d3:98:e3:16:b5:e2:
fa:ca:a1:43:36:ba:af:1e:bd:0c:3f:67:5a:ca:0c:
3b:f5:e8:4d:f6:e6:27:96:ed:67:b7:f9:40:cc:bc:
ab:5e:f9:ec:00:ba:94:6a:67:bc:bf:23:aa:77:aa:
2d:3d:ba:e8:52:1e:9e:e5:f5:44:6b:70:d4:33:d4:
dc:9f:4d:5f:fe:08:72:8a:18:07:87:68:da:82:d5:
3e:69:a4:36:19:7e:ce:9d:9f:b0:9b:06:23:c2:64:
bf:85:3c:9a:ac:af:13:df:14:70:d7:b9:d3:af:50:
26:97:b6:33:be:ab:51:6c:f7:70:fc:f0:53:c0:bc:
ec:54:86:5a:44:c3:67:2e:94:a9:e0:b2:5e:1a:c9:
fa:82:43:61:35:19:ac:2a:a8:23:73:59:74:b0:ca:
58:0c:00:36:bd:95:52:58:31:57:b2:e8:20:b8:bb:
c9:66:73:a2:f9:9c:dd:fa:77:e8:10:79:dd:f5:88:
02:b8:42:83:dd:06:42:99:67:0f:63:f9:67:ac:44:
a9:21:cc:a4:1e:f0:0b:d0:43:f4:d4:22:7f:d0:0c:
52:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:44:0B:EA:1A:8A:9E:22:94:2B:56:30:2F:C8:97:53:1C:03:9E:D7
X509v3 Authority Key Identifier:
keyid:67:9A:75:DE:BD:65:35:9A:45:31:7F:20:3F:11:A3:21:E1:4B:2F:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5p13r1lNZpFMX8gPxGjIeFLLyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7a39b1-1d1c-4919-b19c-3eebe7196972/1/8EQL6hqKniKUK1YwL8iXUxwDntc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7a39b1-1d1c-4919-b19c-3eebe7196972/1/Z5p13r1lNZpFMX8gPxGjIeFLLyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.137.36.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:ba:e5:8d:5b:1d:96:33:46:c9:ec:39:99:b4:76:91:94:e5:
ad:e9:bf:16:fd:67:24:e2:7a:aa:6c:3b:d8:78:ae:f4:55:1b:
be:f6:87:33:9a:7b:0d:ab:6f:6d:91:d5:a1:5a:49:1e:db:7d:
8b:6d:f6:05:cf:58:f3:f1:b0:da:1d:22:5f:b9:c0:79:3e:46:
b4:96:4f:ca:00:70:15:8b:ef:20:37:aa:8b:1d:03:19:9d:93:
9c:2a:f9:6c:35:f4:3b:cf:30:52:30:aa:a1:ad:27:52:b6:44:
6e:16:6b:5a:c0:7f:46:f8:0d:38:1c:f3:5f:3a:b5:92:d5:dd:
ab:21:b2:71:c6:f9:7f:19:82:30:36:e0:e4:77:85:96:8e:23:
95:1f:ce:68:c7:1d:36:f1:ac:64:d9:65:61:7b:36:a3:84:77:
b7:07:74:24:76:1c:91:c4:4f:d7:99:e6:83:7e:fc:6c:87:9b:
93:e3:6f:95:f2:44:03:ea:59:37:a9:b4:ee:4c:02:63:52:5b:
91:3a:d2:31:bc:06:b1:e7:c6:17:37:16:e7:d1:70:2a:d9:2a:
1e:ca:d8:73:12:5a:dc:8d:d4:43:a3:61:fd:81:09:fa:9d:43:
c1:47:65:93:e8:ee:bf:4f:52:88:e0:4c:6b:8e:ae:4b:6d:61:
11:8a:a1:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:36 2023 by rpki-client on console-fra.rpki-client.org