Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/2c2817-3701-4783-8fbd-eec4885c4f8d/1/XJJZelzdD0P3j3wVmw-qkgBXJmE.roa
File: XJJZelzdD0P3j3wVmw-qkgBXJmE.roa (raw, json)
Hash identifier: 4aUOcbYIrC3tazRRMaIktkJwWOTnNLPBuIBr2HV9gMo=
Subject key identifier: 5C:92:59:7A:5C:DD:0F:43:F7:8F:7C:15:9B:0F:AA:92:00:57:26:61
Certificate issuer: /CN=20ca2d4cb3e56b5d29970a97fc645eb2fd6876a1
Certificate serial: 03E13D66
Authority key identifier: 20:CA:2D:4C:B3:E5:6B:5D:29:97:0A:97:FC:64:5E:B2:FD:68:76:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IMotTLPla10plwqX_GResv1odqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/2c2817-3701-4783-8fbd-eec4885c4f8d/1/XJJZelzdD0P3j3wVmw-qkgBXJmE.roa
Signing time: Sat 01 Jan 2022 13:04:36 +0000
ROA not before: Sat 01 Jan 2022 13:04:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210671
IP address blocks: 85.92.119.0/24 maxlen: 24
128.0.67.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65092966 (0x3e13d66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20ca2d4cb3e56b5d29970a97fc645eb2fd6876a1
Validity
Not Before: Jan 1 13:04:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5c92597a5cdd0f43f78f7c159b0faa9200572661
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:01:c1:a4:81:3f:bd:7c:c0:58:4f:06:6a:74:
7b:c3:bb:a1:92:90:13:a9:fd:a4:e8:63:e7:3b:71:
05:a4:73:aa:5d:fe:d5:36:83:a3:53:7a:b9:61:e2:
e2:ea:27:00:19:16:67:91:ce:9c:2f:b2:91:0e:7e:
ae:e6:81:9c:fa:25:8c:5a:ed:1a:c2:79:44:19:a3:
a0:aa:12:ff:56:07:15:f5:a4:d2:ed:5c:92:15:d1:
46:c5:05:d4:55:22:ce:9c:d6:a9:04:4c:ab:46:a4:
0c:72:54:4b:9f:5a:2f:65:97:04:35:b7:3a:c5:86:
2c:a1:46:67:7e:09:68:c9:79:94:dc:80:db:c9:fb:
12:1f:90:92:03:c9:24:ff:b0:f7:31:af:13:06:ec:
33:10:38:90:35:25:79:c7:be:e0:b1:0c:1f:ae:c3:
88:45:01:77:ff:35:c3:04:cd:dc:ea:b6:5d:8e:ed:
ab:d1:95:66:a6:fc:05:ba:1e:da:10:43:fd:b0:52:
f6:0e:ce:6c:94:be:a1:cf:79:a6:99:26:c2:7a:d7:
5d:a9:92:79:41:cf:c1:81:e5:81:c0:77:68:d2:56:
43:39:3a:25:cf:66:b4:b8:d7:37:56:e3:bc:b0:25:
b5:77:6d:43:df:3f:54:97:be:d6:d0:3b:88:24:d6:
ca:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:92:59:7A:5C:DD:0F:43:F7:8F:7C:15:9B:0F:AA:92:00:57:26:61
X509v3 Authority Key Identifier:
keyid:20:CA:2D:4C:B3:E5:6B:5D:29:97:0A:97:FC:64:5E:B2:FD:68:76:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMotTLPla10plwqX_GResv1odqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2c2817-3701-4783-8fbd-eec4885c4f8d/1/XJJZelzdD0P3j3wVmw-qkgBXJmE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2c2817-3701-4783-8fbd-eec4885c4f8d/1/IMotTLPla10plwqX_GResv1odqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.92.119.0/24
128.0.67.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:83:11:22:52:69:bc:2d:a7:d5:51:b9:97:17:cc:29:63:da:
f3:37:91:e1:bc:d2:2c:20:c6:60:e9:7a:51:da:b8:4a:ac:28:
27:be:d5:a2:c0:c1:eb:01:54:ad:56:f4:98:07:54:96:9e:55:
d5:4e:f2:24:33:76:87:a8:15:ff:b3:ba:2a:97:50:2d:1f:02:
ac:7f:7a:4f:c0:82:e1:74:c9:83:bf:37:8a:1a:fa:94:af:c2:
25:88:3e:b3:3c:6a:34:bc:a9:fa:a6:60:c2:7d:1b:ac:21:62:
e5:ce:e3:e2:80:08:89:ef:20:ef:8a:d0:3c:3f:47:8d:d8:b4:
10:71:e3:6e:79:7a:c3:8f:23:65:28:27:1f:8f:70:49:6c:e4:
96:92:30:49:98:93:4b:7a:0d:c7:d5:b3:c5:79:fb:d9:39:6d:
a5:a8:c0:89:28:06:ca:9d:7f:b1:f4:b0:cc:c1:59:09:6a:7f:
2b:38:33:62:e9:4e:d8:53:4d:e6:b5:20:46:7b:6d:4d:b9:95:
d6:6a:37:e1:33:2b:df:99:26:a5:97:59:3c:1d:2f:80:5e:11:
e5:44:77:32:fb:12:11:23:97:68:f7:a1:d3:92:7b:7f:2a:b0:
34:97:6e:be:37:9f:0f:77:9e:98:28:39:fe:4b:3e:7d:d3:b7:
e7:5d:38:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:30 2023 by rpki-client on console-fra.rpki-client.org