Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/c14115-8cf8-40c8-87c8-ce82ebe11ac8/1/stpDyZMWkrp06-lxQO1zxqILnNM.roa
File: stpDyZMWkrp06-lxQO1zxqILnNM.roa (raw, json)
Hash identifier: 2r7zgQLsQDI+xqCL30CLzCwHAYzK8PuPxVaQDvC/Wgk=
Subject key identifier: B2:DA:43:C9:93:16:92:BA:74:EB:E9:71:40:ED:73:C6:A2:0B:9C:D3
Certificate issuer: /CN=1e9a92daf08c20b4691b925cf032e5491fe0acc0
Certificate serial: 035F80BD
Authority key identifier: 1E:9A:92:DA:F0:8C:20:B4:69:1B:92:5C:F0:32:E5:49:1F:E0:AC:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HpqS2vCMILRpG5Jc8DLlSR_grMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/c14115-8cf8-40c8-87c8-ce82ebe11ac8/1/stpDyZMWkrp06-lxQO1zxqILnNM.roa
Signing time: Thu 17 Mar 2022 09:23:38 +0000
ROA not before: Thu 17 Mar 2022 09:23:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 185.121.72.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56590525 (0x35f80bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e9a92daf08c20b4691b925cf032e5491fe0acc0
Validity
Not Before: Mar 17 09:23:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b2da43c9931692ba74ebe97140ed73c6a20b9cd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:77:aa:64:b2:d7:dd:b6:38:7a:e3:02:91:60:
00:03:ef:a0:a0:52:c5:f5:67:22:97:41:0b:9a:39:
25:d6:54:76:64:a6:b2:ba:ef:b9:8c:5c:05:47:40:
36:00:7a:13:49:93:d7:7b:8c:a6:f0:7b:8f:7a:57:
7f:4d:99:90:90:82:b5:54:66:38:f0:39:46:e4:50:
e5:ff:ab:9d:89:32:3d:6e:03:01:10:82:e0:d2:10:
4a:a9:b3:ef:c6:d1:39:00:2b:47:30:42:eb:4a:ec:
58:0d:42:91:a0:33:23:2c:d7:d2:73:88:d1:cb:e6:
dd:46:4c:96:b8:94:eb:5e:e3:ac:98:0b:ac:36:cf:
7e:6d:ad:8f:92:73:fd:fc:2a:4a:6b:c8:47:45:50:
ea:89:bb:ff:7b:72:f9:a8:f4:8c:f6:b1:73:20:fe:
1b:a0:85:53:19:24:c6:8f:de:63:f7:bf:06:f8:aa:
27:a0:17:bb:81:d6:08:3a:06:55:32:b3:60:9c:68:
86:cf:9b:0b:8f:de:5c:4e:cd:de:70:bf:ed:69:0a:
34:e5:7c:ff:9e:d0:8b:1b:3f:d9:44:65:b1:d4:30:
57:e9:ac:93:3e:46:a9:6c:f9:23:5a:5f:e6:2d:43:
10:aa:55:2f:61:bd:04:58:95:f4:df:46:53:4c:4b:
f9:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:DA:43:C9:93:16:92:BA:74:EB:E9:71:40:ED:73:C6:A2:0B:9C:D3
X509v3 Authority Key Identifier:
keyid:1E:9A:92:DA:F0:8C:20:B4:69:1B:92:5C:F0:32:E5:49:1F:E0:AC:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HpqS2vCMILRpG5Jc8DLlSR_grMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c14115-8cf8-40c8-87c8-ce82ebe11ac8/1/stpDyZMWkrp06-lxQO1zxqILnNM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c14115-8cf8-40c8-87c8-ce82ebe11ac8/1/HpqS2vCMILRpG5Jc8DLlSR_grMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.121.72.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:bb:83:ec:58:a0:b5:fa:c4:34:bf:92:98:16:bc:51:3e:88:
b3:a8:cc:8d:84:39:2f:e6:ba:6b:54:ff:98:32:2e:a5:ce:e8:
47:d6:69:14:a1:98:b0:97:e8:63:c4:de:24:f4:4b:0d:46:d3:
29:49:07:f8:a7:ae:a2:f0:1f:28:59:57:ed:df:5d:99:f2:7b:
8e:0d:21:d1:a5:5f:27:35:dc:85:72:4e:9f:d2:58:08:9b:00:
cb:9e:6c:ce:c1:66:f8:bd:28:45:a0:13:a5:f1:d3:0f:82:d0:
02:8c:08:d4:df:5b:7a:d9:c0:f9:e7:81:6d:87:d3:52:7c:bf:
93:d3:00:5d:ad:3e:b5:2f:d4:4d:bd:41:d1:6c:9b:04:7a:eb:
d6:27:d6:f2:13:3f:63:cf:25:2d:17:af:31:7f:c4:1f:70:b5:
ed:26:55:09:46:87:3d:b7:1e:29:e1:50:30:c8:13:2b:30:ba:
7c:c7:f2:52:62:cf:f8:a6:f7:2d:f2:3c:91:5b:28:39:c1:05:
04:f6:46:aa:17:2c:c3:56:76:d3:1f:01:47:77:d5:a4:f8:b7:
c1:73:e1:e1:bc:16:1e:f8:de:b9:3a:fe:7e:a0:37:34:5f:6c:
3e:86:62:1a:15:d9:b3:d4:73:1c:24:d3:44:bb:36:2d:6d:7f:
96:f1:5c:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:24 2024 by rpki-client on console-ams.rpki-client.org