Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/820fea-3c8d-4977-8000-6d7163442244/1/FjUXGsqbz6ZsBD6ixeWfi-eFEI8.roa
File: FjUXGsqbz6ZsBD6ixeWfi-eFEI8.roa (raw, json)
Hash identifier: 3h3iSzz4nB3AAEzztp2AcZQvbSfj9Ejj/OFOwR0LznE=
Subject key identifier: 16:35:17:1A:CA:9B:CF:A6:6C:04:3E:A2:C5:E5:9F:8B:E7:85:10:8F
Certificate issuer: /CN=2557fa956f0f53980d79c32ce1e6e93efd488fd7
Certificate serial: 0239EEC5
Authority key identifier: 25:57:FA:95:6F:0F:53:98:0D:79:C3:2C:E1:E6:E9:3E:FD:48:8F:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JVf6lW8PU5gNecMs4ebpPv1Ij9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/820fea-3c8d-4977-8000-6d7163442244/1/FjUXGsqbz6ZsBD6ixeWfi-eFEI8.roa
Signing time: Sat 01 Jan 2022 05:01:12 +0000
ROA not before: Sat 01 Jan 2022 05:01:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208118
IP address blocks: 152.89.64.0/22 maxlen: 32
2a09:2e40::/29 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37351109 (0x239eec5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2557fa956f0f53980d79c32ce1e6e93efd488fd7
Validity
Not Before: Jan 1 05:01:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1635171aca9bcfa66c043ea2c5e59f8be785108f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:76:a2:cc:2b:f3:9f:c0:fd:bb:cb:aa:77:fd:
62:b7:07:10:bc:bd:2e:20:71:39:2c:84:3c:b1:5d:
71:22:18:fe:2b:e3:20:cd:84:95:23:5b:f9:6c:7a:
ae:6b:1e:49:a9:2d:86:22:20:19:c5:45:8e:0d:90:
25:9f:a7:88:34:3a:fe:0e:98:44:35:1c:76:b0:bb:
a4:98:4c:bb:cf:65:b2:86:0e:f0:10:1e:0b:69:bf:
54:ff:37:46:89:49:8c:80:d9:64:59:cb:ca:f4:67:
11:f3:35:d6:3b:80:df:44:68:a5:54:c5:89:19:73:
46:7c:5e:dd:bc:89:86:bd:d2:5d:7f:c7:70:c0:a5:
c5:11:4e:bc:b5:32:83:76:c3:97:c4:27:ab:ea:5f:
96:af:aa:e3:e9:3e:4a:81:d9:bd:00:33:6c:a3:58:
1a:80:b8:31:39:dd:7e:b4:cd:6d:1f:45:9e:84:f0:
03:2e:7b:3f:43:1e:09:d9:90:b3:f9:17:87:6e:a9:
fb:52:9d:87:fa:fc:b1:dd:cc:0d:ca:7f:cb:a9:1a:
7b:59:66:10:d6:46:6a:58:6d:6b:29:49:b3:e4:16:
21:6b:1f:7c:04:d4:df:01:d8:95:ad:39:40:b9:5f:
8d:66:2c:31:13:42:b2:56:3f:b3:0a:e8:7a:c6:54:
a8:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:35:17:1A:CA:9B:CF:A6:6C:04:3E:A2:C5:E5:9F:8B:E7:85:10:8F
X509v3 Authority Key Identifier:
keyid:25:57:FA:95:6F:0F:53:98:0D:79:C3:2C:E1:E6:E9:3E:FD:48:8F:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JVf6lW8PU5gNecMs4ebpPv1Ij9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/820fea-3c8d-4977-8000-6d7163442244/1/FjUXGsqbz6ZsBD6ixeWfi-eFEI8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/820fea-3c8d-4977-8000-6d7163442244/1/JVf6lW8PU5gNecMs4ebpPv1Ij9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.89.64.0/22
IPv6:
2a09:2e40::/29
Signature Algorithm: sha256WithRSAEncryption
2d:6d:ed:11:41:5a:ae:02:f8:f5:4e:a6:73:1b:0d:ea:4f:e7:
22:8b:7c:54:e4:cb:b6:5b:00:3f:25:68:e5:53:81:e4:63:4a:
46:c6:bb:6f:d9:9a:3e:0c:93:33:fb:14:22:ee:33:93:80:4c:
9b:d5:82:6a:ad:ed:0a:78:97:df:af:db:72:1a:31:cb:dd:a3:
86:a7:8a:cc:70:8c:8c:61:a5:b1:b4:12:94:81:2d:36:c2:fe:
cf:49:a7:74:16:5c:34:aa:d3:ab:3a:8c:f1:bc:41:01:5b:df:
aa:7a:51:ec:61:b4:c0:1a:96:db:55:6c:9b:4e:02:c5:c0:2e:
84:5a:59:48:0e:ec:18:a8:cb:c2:2b:ef:26:74:3c:b1:f5:00:
b8:37:14:2d:e8:be:d8:9f:ca:0a:f8:78:75:4d:6c:26:df:d5:
20:13:4c:d9:07:61:2e:3f:c7:8e:da:59:97:c9:26:94:12:b1:
20:d8:d9:e4:51:fb:81:04:30:ca:6c:bc:45:8a:a8:19:ec:c7:
f6:e8:c0:c4:1b:4d:15:68:27:de:78:8a:73:74:30:ab:20:16:
fc:6f:fc:d2:13:5c:4d:9a:29:57:66:ac:59:e7:fb:65:98:11:
ab:92:84:c2:23:bc:e9:b9:3e:3e:cb:50:a6:6f:fb:79:e8:97:
61:11:f9:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:51 2024 by rpki-client on console-ams.rpki-client.org