Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/85018a-c238-4319-ad42-885757c1248f/1/OWM7shwOsZE5fetdGo76sxRbOSQ.roa
File: OWM7shwOsZE5fetdGo76sxRbOSQ.roa (raw, json)
Hash identifier: NNQkf/4dLM8IpNcftRuZMaBCVECpBoC3/tEA28QdwpI=
Subject key identifier: 39:63:3B:B2:1C:0E:B1:91:39:7D:EB:5D:1A:8E:FA:B3:14:5B:39:24
Certificate issuer: /CN=5d382238289a8802cf52b67d9bf4ae87a50933c3
Certificate serial: 064B8B72
Authority key identifier: 5D:38:22:38:28:9A:88:02:CF:52:B6:7D:9B:F4:AE:87:A5:09:33:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XTgiOCiaiALPUrZ9m_Suh6UJM8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/85018a-c238-4319-ad42-885757c1248f/1/OWM7shwOsZE5fetdGo76sxRbOSQ.roa
Signing time: Sun 20 Mar 2022 20:32:04 +0000
ROA not before: Sun 20 Mar 2022 20:32:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212752
IP address blocks: 45.90.80.0/24 maxlen: 24
45.90.83.0/24 maxlen: 24
45.90.82.0/24 maxlen: 24
45.90.81.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105614194 (0x64b8b72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d382238289a8802cf52b67d9bf4ae87a50933c3
Validity
Not Before: Mar 20 20:32:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=39633bb21c0eb191397deb5d1a8efab3145b3924
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:d9:da:3b:35:81:32:40:b6:95:1d:de:a4:be:
2d:77:83:43:ae:df:00:19:9d:b5:1c:06:5f:45:7c:
54:db:9f:bc:52:94:1e:83:9b:ea:a8:75:f5:4e:04:
cb:fc:5e:5a:3d:08:cf:b1:69:6e:05:ae:1f:21:cf:
9b:1c:b6:3c:ca:12:1d:75:31:3b:2c:9f:96:83:5e:
fa:2e:cc:48:83:9d:5c:f1:9c:66:35:80:74:cc:2a:
a0:7e:ce:57:53:c7:fb:19:27:7d:b7:65:90:98:45:
5d:c7:cb:3b:56:d6:61:3a:e2:f7:3f:c1:b1:b4:f1:
d5:9a:84:64:43:53:22:75:6d:17:61:03:54:57:ea:
19:97:48:e7:0c:4f:df:11:4b:89:9a:7e:c0:90:f6:
e5:a5:8c:85:7d:32:cf:0a:70:0c:56:5b:8d:1d:9d:
90:2b:2f:b4:a5:e8:06:14:87:48:07:26:c9:a9:7c:
53:76:7e:aa:c1:ff:58:7a:8b:aa:6e:5a:41:33:16:
5d:6a:73:9f:a6:97:1c:28:a7:2c:ff:fb:61:25:70:
2b:af:a0:11:d4:44:68:7d:3c:e1:e4:61:ce:c1:f2:
18:70:7a:89:d0:e0:99:7a:62:2e:10:71:20:a4:35:
b9:88:05:71:a7:7a:bd:32:e4:f2:79:55:ff:17:7b:
cc:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:63:3B:B2:1C:0E:B1:91:39:7D:EB:5D:1A:8E:FA:B3:14:5B:39:24
X509v3 Authority Key Identifier:
keyid:5D:38:22:38:28:9A:88:02:CF:52:B6:7D:9B:F4:AE:87:A5:09:33:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTgiOCiaiALPUrZ9m_Suh6UJM8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/85018a-c238-4319-ad42-885757c1248f/1/OWM7shwOsZE5fetdGo76sxRbOSQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/85018a-c238-4319-ad42-885757c1248f/1/XTgiOCiaiALPUrZ9m_Suh6UJM8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.80.0/22
Signature Algorithm: sha256WithRSAEncryption
7f:78:6c:c4:87:0c:bd:40:5d:b5:6b:6c:90:31:8f:47:1a:60:
24:a7:3b:30:57:84:83:f0:ed:8e:ef:0d:7f:37:60:3a:d5:0a:
60:c8:95:c6:9c:00:9e:31:bb:fe:c5:b6:d7:ca:d3:6a:f4:89:
d8:4b:3f:96:ea:d8:83:60:c0:df:f6:8e:c5:56:88:b4:d3:60:
e4:09:58:42:3e:49:aa:b2:e8:24:c5:63:8a:c3:29:d2:30:b9:
d7:22:57:83:58:74:35:70:f2:98:2a:d9:62:4c:03:e4:f2:5c:
13:8e:0b:0a:53:50:e9:28:15:31:db:9f:f9:bb:bd:8f:84:48:
c0:37:77:91:46:1f:d9:1a:b0:83:13:94:17:79:0f:89:1e:77:
ae:c6:1d:61:04:38:a7:bc:2c:bd:80:d7:c6:d7:e3:97:37:a1:
9e:5c:07:50:94:50:89:f5:4c:f5:72:6f:a3:c2:19:3e:9b:9f:
e4:a0:06:52:f8:eb:57:d6:8d:26:a8:3d:a9:f8:60:b0:1e:cf:
34:b4:f8:2a:e8:e6:9c:3e:bd:e9:4c:48:ca:e2:75:7c:83:4c:
82:0c:79:05:36:93:dc:bd:52:fc:2e:05:a8:c4:ce:84:99:3d:
15:61:78:4e:25:a3:dc:a7:53:36:a3:bc:c0:99:b9:a5:de:64:
a6:93:83:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:25 2023 by rpki-client on console-fra.rpki-client.org