Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/945dbd-2fb7-4dd1-96a6-0585de4d4ee7/1/Fp8PifFUOfOYuB-AAbiTB4HsRvk.roa
File: Fp8PifFUOfOYuB-AAbiTB4HsRvk.roa (raw, json)
Hash identifier: 30K9E8zHPxIqmyXPDrtINpWGu0q6cS7ARt4jBEHsswk=
Subject key identifier: 16:9F:0F:89:F1:54:39:F3:98:B8:1F:80:01:B8:93:07:81:EC:46:F9
Certificate issuer: /CN=44007172df9fc2d4a2ddbba934cebc9f0286d3ca
Certificate serial: 15FCD045
Authority key identifier: 44:00:71:72:DF:9F:C2:D4:A2:DD:BB:A9:34:CE:BC:9F:02:86:D3:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RABxct-fwtSi3bupNM68nwKG08o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/945dbd-2fb7-4dd1-96a6-0585de4d4ee7/1/Fp8PifFUOfOYuB-AAbiTB4HsRvk.roa
Signing time: Sat 01 Jan 2022 14:02:16 +0000
ROA not before: Sat 01 Jan 2022 14:02:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34962
IP address blocks: 185.83.214.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 368889925 (0x15fcd045)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44007172df9fc2d4a2ddbba934cebc9f0286d3ca
Validity
Not Before: Jan 1 14:02:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=169f0f89f15439f398b81f8001b8930781ec46f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:79:71:12:28:50:29:09:87:26:9d:94:e4:2f:
3d:28:13:62:97:00:0d:4c:59:12:79:c3:d4:6a:43:
e3:2f:1f:b3:35:85:7f:92:0f:23:33:39:d3:88:11:
71:cb:95:54:11:4e:6e:19:ea:c4:fe:9b:1d:3f:98:
e0:71:28:55:20:9e:a2:c0:f3:1d:be:16:a5:b4:dd:
7e:64:fb:1a:96:06:48:b7:b4:c6:83:7d:29:27:c4:
af:d1:48:0c:61:0f:c6:5c:97:84:e8:4b:77:cd:4f:
fa:0c:cd:d8:d6:a7:0b:f3:41:15:33:d0:b7:93:dd:
b4:f9:54:a9:39:7b:3b:11:06:44:d0:c2:3d:d9:3b:
e9:45:c1:1c:f3:12:d2:6c:21:b8:70:ea:8e:51:6e:
5f:d4:8c:b6:a8:cd:4c:1e:92:a3:1f:d4:19:3d:84:
61:29:eb:9a:33:72:12:5d:3d:7d:90:ff:bb:1d:38:
55:d2:10:fd:05:de:69:50:d5:91:5c:72:62:19:be:
1f:07:0d:37:ec:29:ca:12:c1:3b:88:4f:66:98:55:
67:0c:6b:35:a6:85:a4:fb:d6:df:89:42:34:50:6e:
eb:45:96:03:15:c6:00:54:cb:8d:96:b6:ea:ba:f4:
4a:a3:36:cd:3a:4e:81:f5:ef:2a:9d:0d:64:16:c7:
e9:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:9F:0F:89:F1:54:39:F3:98:B8:1F:80:01:B8:93:07:81:EC:46:F9
X509v3 Authority Key Identifier:
keyid:44:00:71:72:DF:9F:C2:D4:A2:DD:BB:A9:34:CE:BC:9F:02:86:D3:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RABxct-fwtSi3bupNM68nwKG08o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/945dbd-2fb7-4dd1-96a6-0585de4d4ee7/1/Fp8PifFUOfOYuB-AAbiTB4HsRvk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/945dbd-2fb7-4dd1-96a6-0585de4d4ee7/1/RABxct-fwtSi3bupNM68nwKG08o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.83.214.0/24
Signature Algorithm: sha256WithRSAEncryption
52:96:56:c6:68:44:7e:34:2f:22:c6:43:35:64:3c:03:3e:d8:
f2:9a:e9:b6:49:aa:89:cc:a2:06:84:e5:70:a3:4d:12:9c:5e:
3d:9b:12:55:43:e3:52:72:86:c2:24:fd:fd:80:be:ab:e2:6b:
77:8f:53:1d:2d:b0:ec:b9:8c:a2:bf:8d:e7:8c:b6:38:f9:43:
ac:39:ed:9c:87:d2:02:0f:78:d0:d7:ff:76:98:f4:9c:bb:0c:
4a:a8:65:30:18:71:5d:52:77:4c:39:ca:ff:f1:44:2f:79:ae:
6c:2d:f7:2a:c4:46:48:e6:39:83:6e:67:cc:27:aa:8e:cb:c3:
a2:0e:b5:47:b9:8a:77:dd:58:06:c2:f7:25:94:92:c4:6f:95:
5a:9a:a8:e4:d8:3f:f4:9f:a2:e2:3c:1f:9b:4f:39:49:48:92:
75:e4:74:e6:85:d8:bd:1e:a6:86:31:22:73:ec:9b:e8:54:cb:
04:39:e2:20:d1:54:65:08:be:94:dc:89:46:c7:4e:32:6a:3e:
79:73:47:d9:1b:73:d0:d0:70:6a:00:4f:ad:c9:92:a9:50:c9:
95:7b:af:7e:ac:6d:e0:b2:a3:c9:39:56:ba:ee:74:b3:79:46:
92:8c:7d:6e:92:1c:3e:7b:87:45:08:7d:9f:28:79:73:05:02:
7b:9d:42:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:51 2024 by rpki-client on console-ams.rpki-client.org