Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/ENRGmdBndrpQj3t0gfUDi7BlJ3o.roa
File: ENRGmdBndrpQj3t0gfUDi7BlJ3o.roa (raw, json)
Hash identifier: czBmCB8Sd32MIk3UL+6yARVCu8h+SoM0JjteyuMR0io=
Subject key identifier: 10:D4:46:99:D0:67:76:BA:50:8F:7B:74:81:F5:03:8B:B0:65:27:7A
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0CA328C3
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/ENRGmdBndrpQj3t0gfUDi7BlJ3o.roa
Signing time: Sat 01 Jan 2022 05:04:49 +0000
ROA not before: Sat 01 Jan 2022 05:04:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3356
IP address blocks: 45.148.12.0/22 maxlen: 22
45.147.84.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 212019395 (0xca328c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 1 05:04:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=10d44699d06776ba508f7b7481f5038bb065277a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6f:d0:33:3e:fd:76:98:15:af:4c:5e:57:fc:
20:34:ce:c3:5e:87:c2:b6:04:0d:09:0b:55:8d:a0:
3d:b7:f9:33:a5:1a:25:48:d3:72:0e:18:eb:ad:45:
3f:48:8b:31:a8:31:f2:86:d1:3b:d5:49:34:f4:72:
3c:1e:a8:19:cb:4a:89:fc:56:88:8b:3c:c0:8e:ad:
11:e5:b0:70:d6:c2:68:36:fe:ff:ab:e3:fb:40:7c:
a9:e8:1f:71:d3:5d:c2:bf:cf:f1:9a:aa:2f:42:63:
ee:13:df:ce:25:79:c1:f3:a9:59:00:cd:54:5c:90:
dd:a9:9d:54:5f:cd:aa:e1:4c:1b:e0:0a:de:61:56:
8e:56:ef:e6:09:5e:d9:9d:40:16:62:c6:3e:95:60:
a1:be:25:91:dc:2f:43:0c:86:ab:2c:a9:b2:3b:fc:
9d:9f:f7:65:ed:6f:ce:61:b9:20:7b:e4:87:1b:cb:
06:51:49:66:c8:00:c4:ba:fb:dc:72:de:d5:b1:c7:
14:51:c4:96:a9:06:4a:94:99:bb:71:75:f8:79:8d:
b5:48:cc:ab:a7:ee:b8:ef:44:6b:85:56:61:e5:8d:
32:7b:d8:02:f0:c0:4b:a1:88:aa:38:be:96:58:b3:
16:8b:d3:07:95:46:ce:c5:42:30:65:02:a2:1b:da:
e6:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:D4:46:99:D0:67:76:BA:50:8F:7B:74:81:F5:03:8B:B0:65:27:7A
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/ENRGmdBndrpQj3t0gfUDi7BlJ3o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.147.84.0/22
45.148.12.0/22
Signature Algorithm: sha256WithRSAEncryption
7d:00:3c:b0:21:43:16:2b:7f:3a:7b:9e:97:f4:88:76:62:78:
21:16:c0:54:36:69:8a:88:f6:33:3e:77:d7:3d:db:05:2f:19:
b6:79:42:81:97:ba:24:ca:2c:02:37:fa:78:87:c0:4e:b2:a4:
80:11:5d:bc:65:f6:0d:29:ad:28:db:1c:36:88:c4:23:30:12:
b5:70:3b:2d:a0:8a:f4:b8:68:83:f5:1a:39:fb:a4:85:d1:67:
58:ba:db:67:e0:c3:50:a5:fc:9a:72:23:8b:6e:13:44:4b:7b:
ad:02:0f:87:7b:c4:d7:0d:18:d8:e6:43:52:a0:92:13:5b:d4:
2e:c2:49:f2:d9:2e:fb:9a:42:79:e8:18:a6:8f:ef:42:4a:14:
53:fe:8c:8b:f6:e8:20:bb:83:8e:78:4a:fb:84:65:42:d3:fb:
48:6d:8f:02:d5:e8:61:5c:28:80:30:02:4c:f2:a5:19:91:d2:
c5:4a:45:ea:ad:b0:de:0d:71:4d:2f:0b:2e:26:d0:eb:f1:36:
da:ce:f0:a6:fb:59:4b:5b:d6:00:dc:45:d0:1c:09:72:76:2e:
d3:99:be:9c:16:9a:f1:65:14:e7:f0:2d:f0:38:18:4b:ae:b1:
17:95:1a:f7:ad:e3:97:b8:e2:cf:e3:28:ea:a6:9d:f5:f0:ee:
57:7e:2f:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:58 2023 by rpki-client on console-fra.rpki-client.org