Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/7a39b1-1d1c-4919-b19c-3eebe7196972/1/jiHkZkZ7T_GBfJfruIsS8iVeXAk.roa
File: jiHkZkZ7T_GBfJfruIsS8iVeXAk.roa (raw, json)
Hash identifier: go0y7/SdklkZZmNZ7rm9fShfbUonwvncg+3vyEt500A=
Subject key identifier: 8E:21:E4:66:46:7B:4F:F1:81:7C:97:EB:B8:8B:12:F2:25:5E:5C:09
Certificate issuer: /CN=679a75debd65359a45317f203f11a321e14b2f2c
Certificate serial: 06926914
Authority key identifier: 67:9A:75:DE:BD:65:35:9A:45:31:7F:20:3F:11:A3:21:E1:4B:2F:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5p13r1lNZpFMX8gPxGjIeFLLyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/7a39b1-1d1c-4919-b19c-3eebe7196972/1/jiHkZkZ7T_GBfJfruIsS8iVeXAk.roa
Signing time: Thu 28 Apr 2022 23:37:53 +0000
ROA not before: Thu 28 Apr 2022 23:37:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 89.35.25.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110258452 (0x6926914)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=679a75debd65359a45317f203f11a321e14b2f2c
Validity
Not Before: Apr 28 23:37:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8e21e466467b4ff1817c97ebb88b12f2255e5c09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:12:e5:6f:fc:cd:9e:e2:13:04:af:6c:f4:60:
b7:7e:a9:48:a8:09:2d:22:1e:55:a1:64:aa:f2:74:
2b:e4:ef:24:bf:94:7b:38:fb:f4:13:41:3f:98:e8:
7e:7d:20:54:6e:3b:b1:23:f8:09:f5:7d:5e:26:c3:
11:29:20:a5:b5:5d:55:8c:83:1f:54:41:62:68:58:
5f:72:4e:98:e0:f1:28:81:c1:44:29:4a:14:4d:97:
a4:89:3c:ff:16:a8:ec:dd:42:fd:6c:10:0e:61:ee:
17:d7:07:1d:01:76:f3:ea:3f:b2:43:ef:9a:9d:8a:
2c:61:59:d0:24:66:7f:8b:3d:14:da:9a:d0:ee:49:
55:0d:83:1e:0a:7b:b9:86:56:45:f0:f2:e6:ac:d3:
5c:95:68:52:27:8b:af:7b:79:89:fe:ad:e7:96:02:
84:61:cb:c3:1b:b1:53:22:43:70:71:97:91:6f:62:
b6:c9:49:ab:c6:f3:de:6a:ec:59:3c:67:89:99:7d:
00:4c:e2:45:b2:f1:18:2c:5d:7e:9b:ee:f7:43:da:
5d:2c:37:ae:cb:8d:e2:5a:cd:42:e6:f2:3f:f3:b2:
7d:64:48:6b:29:dc:eb:cd:a2:bf:5b:0a:14:f8:84:
81:19:ba:c0:24:6d:1c:59:e8:5b:a4:ae:e4:0a:ed:
74:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:21:E4:66:46:7B:4F:F1:81:7C:97:EB:B8:8B:12:F2:25:5E:5C:09
X509v3 Authority Key Identifier:
keyid:67:9A:75:DE:BD:65:35:9A:45:31:7F:20:3F:11:A3:21:E1:4B:2F:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5p13r1lNZpFMX8gPxGjIeFLLyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7a39b1-1d1c-4919-b19c-3eebe7196972/1/jiHkZkZ7T_GBfJfruIsS8iVeXAk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7a39b1-1d1c-4919-b19c-3eebe7196972/1/Z5p13r1lNZpFMX8gPxGjIeFLLyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.35.25.0/24
Signature Algorithm: sha256WithRSAEncryption
33:bc:0a:c8:d4:c0:4e:37:41:a3:cf:65:3c:2e:d2:01:d6:de:
b6:0b:43:b8:b5:53:8d:aa:81:74:96:be:1e:e0:5d:fc:47:13:
97:29:77:e9:9f:aa:05:bb:75:c3:6a:88:e7:ba:e0:9b:55:62:
84:f6:f6:da:58:91:56:34:25:e4:90:12:a7:0c:c9:1a:94:91:
7f:37:be:df:c9:3f:50:db:25:73:48:dd:9e:56:73:31:a9:e1:
af:7f:03:b2:c6:7e:5c:87:75:cb:f5:43:bf:76:28:5c:7c:26:
37:d8:bc:fe:a1:09:c1:2e:ac:0e:94:cd:b7:8d:56:d5:89:f4:
40:8b:7f:85:e3:c6:14:db:2d:93:40:31:db:37:bc:f6:51:1e:
bb:cc:74:c8:cc:0e:23:1e:3f:ae:c6:8a:27:4a:3c:4b:bc:6b:
12:0d:34:5a:b9:c4:58:a3:6c:f7:5e:97:47:78:64:0e:6e:02:
91:ea:5b:08:f6:8a:2d:38:7b:cc:27:b8:bf:b6:47:08:55:b3:
d5:18:34:7f:e1:77:e1:ce:15:dd:32:40:7f:0f:08:60:7d:b1:
1e:ca:00:f6:55:5d:ef:da:5a:75:5d:dd:87:e4:cd:52:92:a8:
c1:dd:26:02:14:c9:4b:7f:41:bd:89:db:46:75:fd:8a:4a:e3:
86:b0:d6:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:30 2023 by rpki-client on console-ams.rpki-client.org