Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/9c0a7e-9963-4c0d-94ac-446d0a7e9404/1/cFqXHhe7woViyLedTqdM1sLuFyw.roa
File: cFqXHhe7woViyLedTqdM1sLuFyw.roa (raw, json)
Hash identifier: r3IGi0gMylQGeDrk8wUaBSzX9nn50IpSmlCt3pi+pjk=
Subject key identifier: 70:5A:97:1E:17:BB:C2:85:62:C8:B7:9D:4E:A7:4C:D6:C2:EE:17:2C
Certificate issuer: /CN=73dfeea9c7de246e6d7d1a507406285b226f9286
Certificate serial: 03BC4244
Authority key identifier: 73:DF:EE:A9:C7:DE:24:6E:6D:7D:1A:50:74:06:28:5B:22:6F:92:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c9_uqcfeJG5tfRpQdAYoWyJvkoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/9c0a7e-9963-4c0d-94ac-446d0a7e9404/1/cFqXHhe7woViyLedTqdM1sLuFyw.roa
Signing time: Sat 01 Jan 2022 03:01:26 +0000
ROA not before: Sat 01 Jan 2022 03:01:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 52045
IP address blocks: 185.41.21.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62669380 (0x3bc4244)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73dfeea9c7de246e6d7d1a507406285b226f9286
Validity
Not Before: Jan 1 03:01:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=705a971e17bbc28562c8b79d4ea74cd6c2ee172c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:de:87:49:9d:b1:32:07:a8:c3:af:66:4f:fa:
32:61:eb:91:aa:e7:31:93:24:05:48:64:7c:63:fd:
c1:c9:6a:2a:17:18:10:29:37:ae:4d:ee:ca:fa:14:
64:94:cf:02:8c:a7:15:81:05:d3:1b:dc:6b:83:b1:
15:a6:9b:ca:13:19:b2:3c:d7:ec:62:84:13:8e:ef:
19:cf:40:51:ac:80:ad:89:7d:dd:77:ff:ab:3b:62:
4e:e2:de:c6:d0:e5:3e:06:d3:2b:2c:66:fd:fc:a4:
24:50:30:ae:8e:b4:7b:e0:48:f1:21:5d:01:96:8b:
ce:90:04:1f:a7:99:a7:71:2d:a3:f6:11:2a:d1:71:
cb:3e:25:81:f4:26:c0:0a:6b:8b:69:a7:e3:89:ec:
73:25:24:a5:19:61:72:fd:b7:c4:55:1b:15:30:44:
fa:71:41:9f:1d:fc:a0:8e:4d:bf:f1:b5:57:77:12:
83:30:2f:a6:7d:22:96:68:7c:40:eb:0c:89:64:a8:
60:34:f5:2d:80:38:5e:aa:41:54:db:69:fc:ee:59:
dc:65:22:28:85:a7:81:35:4f:13:8c:43:ac:d3:8e:
b1:56:14:a1:26:93:ed:89:d9:d7:e3:a7:7d:07:e3:
53:69:35:77:1b:08:96:2f:4a:16:e9:01:67:3f:75:
1d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:5A:97:1E:17:BB:C2:85:62:C8:B7:9D:4E:A7:4C:D6:C2:EE:17:2C
X509v3 Authority Key Identifier:
keyid:73:DF:EE:A9:C7:DE:24:6E:6D:7D:1A:50:74:06:28:5B:22:6F:92:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9_uqcfeJG5tfRpQdAYoWyJvkoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/9c0a7e-9963-4c0d-94ac-446d0a7e9404/1/cFqXHhe7woViyLedTqdM1sLuFyw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/9c0a7e-9963-4c0d-94ac-446d0a7e9404/1/c9_uqcfeJG5tfRpQdAYoWyJvkoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.41.21.0/24
Signature Algorithm: sha256WithRSAEncryption
96:a4:27:c7:a1:b0:be:9c:24:96:79:72:f1:84:49:68:0d:53:
47:5d:91:c4:21:a1:f2:1b:2e:1f:4d:62:04:df:e5:1d:10:7f:
03:70:0c:5a:df:da:95:f3:5f:0a:48:1f:ac:32:10:b6:a2:6a:
15:43:88:a9:90:14:f4:0d:76:80:7c:0c:95:16:e0:a7:af:4e:
09:98:86:d6:6f:56:20:ab:c6:9a:53:85:9a:d9:1b:b5:09:9d:
4f:9d:4f:8d:1c:ff:55:f7:ef:33:8f:7a:61:b5:83:70:85:36:
0e:89:fc:7a:35:07:d2:09:1d:40:4f:0f:66:6e:48:93:39:6d:
6c:59:2c:f5:1d:f0:3b:b0:5d:68:67:a6:89:d4:0c:5b:d0:18:
d6:1f:31:09:29:30:14:bb:a7:99:4e:96:17:cc:c7:b6:ab:e7:
ab:71:29:f3:16:cf:28:ab:75:e0:9a:53:cf:dc:b8:98:63:15:
e6:4d:b5:0b:4d:0a:dd:71:ba:18:b4:7f:a4:1e:10:a0:e1:81:
06:25:e5:00:a2:f4:c6:38:62:0b:60:10:e4:40:fd:bc:85:28:
20:2c:25:25:0e:c1:26:92:0e:f0:8e:37:0e:57:36:db:ad:88:
53:a2:6f:7c:14:e8:cb:0b:29:58:40:7d:fe:ba:6b:ad:cd:77:
2d:10:10:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:13 2023 by rpki-client on console-ams.rpki-client.org