Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/7a39b1-1d1c-4919-b19c-3eebe7196972/1/sGYXJrtijKPCgLFNMpW39vRI_Qw.roa
File: sGYXJrtijKPCgLFNMpW39vRI_Qw.roa (raw, json)
Hash identifier: VMpGEBqalCXwfVXRJ7O49y12bPV/Eeb3fUGq/sOOkQw=
Subject key identifier: B0:66:17:26:BB:62:8C:A3:C2:80:B1:4D:32:95:B7:F6:F4:48:FD:0C
Certificate issuer: /CN=679a75debd65359a45317f203f11a321e14b2f2c
Certificate serial: 06305707
Authority key identifier: 67:9A:75:DE:BD:65:35:9A:45:31:7F:20:3F:11:A3:21:E1:4B:2F:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5p13r1lNZpFMX8gPxGjIeFLLyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/7a39b1-1d1c-4919-b19c-3eebe7196972/1/sGYXJrtijKPCgLFNMpW39vRI_Qw.roa
Signing time: Thu 24 Mar 2022 00:26:15 +0000
ROA not before: Thu 24 Mar 2022 00:26:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 89.43.48.0/24 maxlen: 24
89.35.25.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 103831303 (0x6305707)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=679a75debd65359a45317f203f11a321e14b2f2c
Validity
Not Before: Mar 24 00:26:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b0661726bb628ca3c280b14d3295b7f6f448fd0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c2:0b:dd:eb:2a:6c:8b:d9:37:4f:dc:6b:ba:
33:73:02:bc:55:9f:51:ca:dd:1f:f5:7c:ca:f5:28:
26:54:2a:33:fd:13:cb:e9:5a:eb:71:04:64:7d:07:
c9:44:23:a6:53:28:ed:10:68:c4:70:4a:a3:4a:70:
56:c7:6b:e5:c7:4e:48:dc:84:cd:31:e4:d5:a8:8a:
04:40:74:6a:be:66:c3:77:7c:76:ba:35:f8:1d:7f:
68:2c:ae:0c:9f:15:5f:6d:05:37:f6:b8:0b:e5:79:
15:66:52:51:fd:76:90:61:b9:ae:ae:d5:b1:7c:24:
d2:ec:38:bc:26:b5:09:58:2c:96:50:00:14:50:b3:
f9:44:7a:2a:6c:8a:4c:62:49:03:8b:91:a5:8d:2f:
a4:b2:33:49:c1:ad:00:6b:00:d7:cf:9f:8d:c7:ab:
1b:63:68:09:db:e5:0b:33:2c:4b:38:5f:f7:19:27:
10:af:14:73:b8:c6:c6:da:21:59:4b:6b:50:27:93:
d4:96:50:68:3b:c2:70:4d:86:d0:7f:65:f8:75:fb:
68:fa:5b:34:e0:86:14:cc:2f:80:3f:0b:e3:cd:95:
6b:34:9e:0a:e2:70:5b:d6:12:c5:ee:63:5b:a2:79:
d5:bb:6d:ee:8e:e5:90:33:19:25:d8:33:81:fc:7a:
40:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:66:17:26:BB:62:8C:A3:C2:80:B1:4D:32:95:B7:F6:F4:48:FD:0C
X509v3 Authority Key Identifier:
keyid:67:9A:75:DE:BD:65:35:9A:45:31:7F:20:3F:11:A3:21:E1:4B:2F:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5p13r1lNZpFMX8gPxGjIeFLLyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7a39b1-1d1c-4919-b19c-3eebe7196972/1/sGYXJrtijKPCgLFNMpW39vRI_Qw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7a39b1-1d1c-4919-b19c-3eebe7196972/1/Z5p13r1lNZpFMX8gPxGjIeFLLyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.35.25.0/24
89.43.48.0/24
Signature Algorithm: sha256WithRSAEncryption
23:72:0b:c6:4e:40:21:95:76:8d:f2:7a:88:04:9c:73:a0:87:
df:60:58:30:73:ec:15:18:85:d3:3c:00:20:4e:f2:64:ba:fa:
b0:08:89:fd:90:b8:f5:c9:7f:84:6b:0e:98:71:32:47:44:f9:
3f:7a:6e:a2:34:76:fa:24:c8:b5:c4:82:59:74:00:b8:43:ac:
18:14:6c:06:be:47:30:e1:dc:08:9b:0d:81:31:bb:ca:fc:66:
40:ce:62:31:07:1e:3e:2e:81:9c:da:05:81:92:90:e2:fd:09:
12:88:17:c6:d7:80:ef:54:14:34:30:3d:55:87:c6:41:59:7a:
c2:70:fa:3b:f7:f4:28:3f:50:d6:38:24:e4:83:92:7d:19:33:
fc:96:93:65:3d:22:49:b2:dd:66:5d:61:3b:0e:57:f7:93:dc:
aa:b7:c7:de:40:6f:2a:25:57:f0:b8:51:69:8e:87:8b:4e:5a:
b1:cf:d9:c3:44:12:74:25:85:db:76:92:e1:dc:61:c3:24:a6:
bb:34:bb:c3:64:2c:42:90:ed:66:bc:5c:62:d6:0d:16:69:13:
31:a7:e6:88:81:a1:10:ef:6c:1a:d4:09:ba:c2:2e:b0:e5:28:
59:e4:0a:02:cb:fb:61:9f:b3:f3:c2:7b:11:42:c1:9e:58:92:
a9:61:9d:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:30 2023 by rpki-client on console-ams.rpki-client.org