Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/Ewoz7t2pOYD53Q-oraczs-M-mX8.roa
File: Ewoz7t2pOYD53Q-oraczs-M-mX8.roa (raw, json)
Hash identifier: SaivfOTZjwoGARjYagl7ZtuDdgzVkSmGl4XLcLFoQiA=
Subject key identifier: 13:0A:33:EE:DD:A9:39:80:F9:DD:0F:A8:AD:A7:33:B3:E3:3E:99:7F
Certificate issuer: /CN=e8403b5e45cd58be5f6c5d33fa565ab49223e3db
Certificate serial: 3745E1BC
Authority key identifier: E8:40:3B:5E:45:CD:58:BE:5F:6C:5D:33:FA:56:5A:B4:92:23:E3:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/Ewoz7t2pOYD53Q-oraczs-M-mX8.roa
Signing time: Sat 01 Jan 2022 05:59:22 +0000
ROA not before: Sat 01 Jan 2022 05:59:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199329
IP address blocks: 212.49.180.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 927326652 (0x3745e1bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8403b5e45cd58be5f6c5d33fa565ab49223e3db
Validity
Not Before: Jan 1 05:59:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=130a33eedda93980f9dd0fa8ada733b3e33e997f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:9b:99:16:f9:17:d1:77:18:72:a0:64:44:82:
01:8c:ff:58:9d:5c:cf:28:fd:33:45:f7:0c:38:30:
1c:65:7d:7e:45:7e:0b:2c:d7:9a:74:42:7e:61:a4:
1c:6e:cd:02:ee:31:07:c2:a3:75:e5:ab:2d:b6:0c:
e4:5a:ef:15:b1:53:15:63:82:54:b1:50:ae:0d:9b:
fc:6b:ff:82:f4:04:b1:5e:d7:52:bc:a5:84:25:13:
84:9f:f9:83:fd:64:af:a0:bb:43:36:a7:ee:7a:6e:
ac:b1:cb:13:99:d9:da:94:13:0f:f7:9b:d3:97:8f:
7c:8b:36:3c:5d:ee:b6:09:06:22:7f:2a:ea:f5:d5:
e8:a5:d6:49:ce:f7:bb:9a:3b:fe:7b:63:e5:53:c5:
89:2e:4c:19:bb:e1:c4:a2:4e:ae:1e:bd:09:84:c8:
0c:f4:42:97:23:b4:e5:f7:d3:45:f7:a8:83:84:6b:
fa:67:c2:6e:f7:de:1e:10:db:d9:41:1c:ff:3f:35:
42:f4:96:8f:87:ff:0b:03:02:d8:24:53:f6:aa:56:
25:94:10:f6:90:51:ca:98:d5:51:51:1f:76:cd:30:
3c:84:79:4b:6a:8a:bc:d8:d7:e3:7f:3c:e6:bb:cd:
75:e9:f1:e2:44:65:1b:91:f1:ca:7c:7a:c6:ff:a9:
ab:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:0A:33:EE:DD:A9:39:80:F9:DD:0F:A8:AD:A7:33:B3:E3:3E:99:7F
X509v3 Authority Key Identifier:
keyid:E8:40:3B:5E:45:CD:58:BE:5F:6C:5D:33:FA:56:5A:B4:92:23:E3:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/Ewoz7t2pOYD53Q-oraczs-M-mX8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.49.180.0/24
Signature Algorithm: sha256WithRSAEncryption
38:8b:0c:c9:8b:aa:a3:52:0b:72:f4:9a:b2:3b:ea:32:15:74:
5a:48:8e:b4:68:65:4f:68:3b:79:9c:8b:5f:c6:50:06:ee:85:
54:bb:35:a5:be:1a:6e:8c:65:0d:ab:34:1c:66:ed:c7:7c:ba:
26:54:34:b4:e1:fd:86:50:5c:b1:5d:80:17:81:19:9c:ea:41:
40:20:fb:33:84:b2:d8:2c:fd:d0:6c:35:b5:6d:c0:ce:5b:d4:
15:40:fa:1b:8a:f1:b1:c2:a6:99:78:af:d5:d5:15:c6:12:2e:
ae:c0:3e:17:5b:ab:9b:a6:a8:59:fc:88:21:d3:cf:aa:f2:b6:
36:75:9a:a3:83:4c:28:71:73:02:01:81:0b:c3:09:65:76:84:
a1:f3:e7:40:6e:93:31:d3:99:39:ba:fd:cc:44:b2:ca:8e:35:
9a:1c:25:35:5e:da:03:19:80:87:f4:03:32:02:41:b9:b2:61:
41:cf:f8:fe:21:22:3a:b4:c6:7d:2d:6e:1d:ae:20:04:af:9f:
33:d5:aa:e1:b0:01:9e:71:99:ba:dc:4d:21:00:cf:ee:08:bc:
35:a5:6b:98:73:bb:75:bd:b8:fa:9a:76:a5:53:03:af:d4:f6:
b4:76:d7:cb:63:33:d7:85:1c:c2:c3:fa:0c:75:bb:00:25:e4:
13:04:8f:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:43 2023 by rpki-client on console-fra.rpki-client.org