Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Cof8idrQn147h0JGMZc3pUPiXHM.roa
File: Cof8idrQn147h0JGMZc3pUPiXHM.roa (raw, json)
Hash identifier: B76kv8m6kvEvkukOzq445pdKn4CFb1xVVnE0xo0Q44Y=
Subject key identifier: 0A:87:FC:89:DA:D0:9F:5E:3B:87:42:46:31:97:37:A5:43:E2:5C:73
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0645A42E
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Cof8idrQn147h0JGMZc3pUPiXHM.roa
Signing time: Sat 01 Jan 2022 06:52:39 +0000
ROA not before: Sat 01 Jan 2022 06:52:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202513
IP address blocks: 45.90.236.0/24 maxlen: 24
45.90.237.0/24 maxlen: 24
45.90.238.0/24 maxlen: 24
45.90.239.0/24 maxlen: 24
45.90.238.0/23 maxlen: 23
45.90.236.0/23 maxlen: 23
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105227310 (0x645a42e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 1 06:52:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0a87fc89dad09f5e3b874246319737a543e25c73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:86:d2:3f:3e:78:bb:c6:2c:7d:f3:91:d3:47:
e4:bb:8f:50:41:b1:18:0a:d6:71:3c:8a:05:b8:6c:
ee:e8:f7:a0:fa:a4:d5:af:f8:04:0e:bc:2b:0f:f4:
01:75:13:f8:6d:05:1d:d1:66:59:4a:b4:60:6c:58:
0b:96:88:c8:2e:9f:ab:4b:f2:7f:ab:ed:56:6e:51:
6b:c3:8a:35:9f:14:ae:50:3a:2c:ef:04:52:94:d5:
e5:eb:17:f0:c5:fe:6f:e4:1b:40:84:14:45:56:31:
99:4b:98:af:86:fb:77:d2:de:1a:27:7d:42:6e:2f:
11:28:0c:b7:9e:24:01:c1:f9:93:4a:0e:2c:44:8b:
55:9f:97:fb:5b:18:42:ea:a6:fb:53:df:0d:8d:dc:
ab:46:26:c7:a6:dd:99:b8:3a:e6:e8:38:fe:97:c8:
45:1e:18:93:93:3e:26:01:05:35:c2:77:e1:52:11:
40:07:a6:7a:57:2f:1c:c0:f8:1c:2d:30:c5:20:94:
24:b0:3f:6a:c4:aa:6c:ad:56:9c:e2:77:4c:37:7f:
65:3e:cd:f9:83:61:e3:c3:2d:55:bf:29:ec:78:6b:
20:1f:72:fe:dc:12:68:85:d0:34:4f:23:20:f2:46:
eb:00:9b:dc:ae:7a:68:cf:10:8c:ce:c3:31:8f:5d:
bc:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:87:FC:89:DA:D0:9F:5E:3B:87:42:46:31:97:37:A5:43:E2:5C:73
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Cof8idrQn147h0JGMZc3pUPiXHM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.236.0/22
Signature Algorithm: sha256WithRSAEncryption
14:7f:e2:a9:2b:d4:77:34:10:1f:0b:6e:67:5f:ef:f9:67:2c:
c0:31:1e:92:55:10:d3:d2:8d:e9:59:57:1a:03:92:53:0d:61:
ea:23:cc:43:fb:3d:8f:ff:77:21:7e:9c:6e:1b:10:dc:19:e0:
a6:17:4f:c9:da:40:5c:80:8b:80:f9:c9:73:9f:18:1c:86:a1:
dc:ab:1b:c7:09:17:af:c8:d8:fb:f8:e6:5f:16:8a:28:52:b9:
63:22:36:9d:9c:e2:02:08:c0:2e:80:43:6b:88:f9:69:d2:9f:
bf:4d:80:3a:ad:b2:a2:cd:56:3c:34:74:9a:c8:b7:43:4b:90:
97:98:36:d1:79:49:61:1d:3f:6c:ef:36:ff:d9:0f:d3:af:89:
59:91:4a:c2:07:6e:4f:7c:9f:2d:b0:66:9b:b9:92:67:37:46:
2e:7b:02:82:61:36:72:77:68:09:65:6b:3e:f7:d8:45:b4:17:
86:32:2a:a5:5d:58:f2:5a:d0:93:67:1b:43:48:48:cb:7e:b4:
ee:4a:0e:7f:2b:09:cd:47:d5:9a:de:7a:74:3a:57:66:f8:82:
08:cd:98:7b:a8:71:1a:7d:e0:47:71:4d:b7:cf:98:c4:47:3a:
0c:20:fd:57:22:b0:4a:ec:c7:88:54:79:00:3d:0c:a5:fa:f2:
be:bc:48:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:40 2024 by rpki-client on console-fra.rpki-client.org