Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/XX-IzCxL6lTbHMluSy-tuje6pxk.roa
File: XX-IzCxL6lTbHMluSy-tuje6pxk.roa (raw, json)
Hash identifier: OtP/if29l/44IIyZHSkCxkLzxeLi/IysjEGDknIQ+8A=
Subject key identifier: 5D:7F:88:CC:2C:4B:EA:54:DB:1C:C9:6E:4B:2F:AD:BA:37:BA:A7:19
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0CAB54EE
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/XX-IzCxL6lTbHMluSy-tuje6pxk.roa
Signing time: Sat 01 Jan 2022 05:04:52 +0000
ROA not before: Sat 01 Jan 2022 05:04:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22773
IP address blocks: 45.148.12.0/22 maxlen: 22
45.147.84.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 212554990 (0xcab54ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 1 05:04:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5d7f88cc2c4bea54db1cc96e4b2fadba37baa719
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:f2:25:ec:1a:ac:16:d1:22:3a:a7:9d:c5:d3:
9a:20:d1:a8:4a:ab:1e:31:d4:1c:97:ce:be:37:3c:
27:c6:0d:10:9d:08:4a:76:3b:2d:82:e6:c9:8c:84:
71:0c:56:c6:ac:e6:10:01:26:35:e1:82:1d:ac:ab:
83:50:c5:60:32:07:a8:bd:20:8f:f2:3a:0c:59:c8:
b0:b7:ad:f7:3a:7f:26:90:55:be:52:84:fb:82:35:
2d:40:fd:a9:e5:be:7a:65:16:ce:92:3a:08:57:87:
c1:df:18:08:5e:a4:b7:c3:0a:9c:d3:91:cf:2f:44:
48:1b:74:83:ef:76:c9:f1:f4:e0:1b:81:3f:7d:1d:
f7:b9:b1:4b:1f:59:82:c9:1b:49:a4:a4:78:44:14:
b9:e1:f4:a2:ad:72:45:78:0b:d3:3f:df:03:74:e3:
36:1e:42:d3:88:c0:07:30:ee:72:ea:c4:f6:33:43:
5a:a8:94:61:5f:4d:51:96:0e:0f:2d:20:d8:cf:93:
8e:47:ea:70:d1:0c:ca:e7:7d:3f:af:a1:3f:29:43:
ab:29:0b:46:78:43:0e:e1:0e:e0:5d:b8:69:ae:b6:
f8:71:30:54:81:99:9e:82:c3:9f:e0:ca:fe:2b:00:
4f:5e:f7:87:7c:32:0e:4d:af:88:ee:84:bf:98:46:
b4:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:7F:88:CC:2C:4B:EA:54:DB:1C:C9:6E:4B:2F:AD:BA:37:BA:A7:19
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/XX-IzCxL6lTbHMluSy-tuje6pxk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.147.84.0/22
45.148.12.0/22
Signature Algorithm: sha256WithRSAEncryption
25:0a:f6:39:05:b4:5b:10:bf:72:73:86:a5:d6:79:fd:4d:a9:
3b:b7:2c:df:8b:3b:6a:f8:5b:be:e0:52:e9:1f:82:66:91:50:
88:84:27:bf:9a:ac:3b:ed:31:86:f8:15:f8:2d:52:a6:3d:e9:
70:17:33:ad:50:21:2d:76:5a:32:5a:fe:a6:88:ae:45:e9:9f:
c3:2a:2f:5b:02:28:e0:8c:c3:f1:38:f6:62:98:d7:9b:db:96:
c6:a0:7a:78:c5:fb:34:49:2c:0f:47:d2:9c:3a:0b:ca:bd:12:
10:00:2f:7f:d3:40:f2:d9:24:1b:99:c1:45:59:25:15:41:ac:
7b:4f:e1:2b:b6:8a:ae:b3:b7:92:b6:ea:5c:e5:cd:77:68:67:
48:4b:a9:c4:45:8f:7b:f1:80:08:72:e1:8f:40:b8:95:41:86:
bc:d5:2c:91:ae:5a:d1:90:9a:9d:3c:ee:82:7e:a8:84:e8:08:
b3:12:5c:81:06:b5:a4:cb:90:9a:00:5a:40:bd:8b:1b:07:d2:
d2:6f:be:b2:14:98:46:84:21:f9:01:61:6f:b0:2d:56:56:d0:
fa:07:ff:8c:bf:f4:d8:21:13:29:db:4d:d9:c2:c9:75:83:53:
da:cc:a3:9f:2c:59:91:08:e5:27:5a:b0:33:f8:7c:47:f2:26:
cf:9d:c2:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:02 2023 by rpki-client on console-fra.rpki-client.org