Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/Kqg_COOC-g8xHOxK0n_7Yg3fiwk.roa
File: Kqg_COOC-g8xHOxK0n_7Yg3fiwk.roa (raw, json)
Hash identifier: uJU831zA7hgglEUJTTSdqubKPUt/IfbDq/Dz1eLKQ+k=
Subject key identifier: 2A:A8:3F:08:E3:82:FA:0F:31:1C:EC:4A:D2:7F:FB:62:0D:DF:8B:09
Certificate issuer: /CN=e8403b5e45cd58be5f6c5d33fa565ab49223e3db
Certificate serial: 374759AE
Authority key identifier: E8:40:3B:5E:45:CD:58:BE:5F:6C:5D:33:FA:56:5A:B4:92:23:E3:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/Kqg_COOC-g8xHOxK0n_7Yg3fiwk.roa
Signing time: Sat 01 Jan 2022 05:59:24 +0000
ROA not before: Sat 01 Jan 2022 05:59:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206046
IP address blocks: 92.60.165.0/24 maxlen: 24
92.60.163.0/24 maxlen: 24
92.60.162.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 927422894 (0x374759ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8403b5e45cd58be5f6c5d33fa565ab49223e3db
Validity
Not Before: Jan 1 05:59:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2aa83f08e382fa0f311cec4ad27ffb620ddf8b09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:cc:e8:1a:0b:75:c1:b8:08:97:68:f4:39:95:
25:8a:df:72:8b:23:a1:54:30:71:b0:49:ef:ae:27:
0d:2f:4a:a9:79:d7:0f:44:c5:1a:84:66:28:68:ae:
71:49:e7:66:4d:59:d9:47:ad:41:5b:12:69:f2:46:
9d:e7:b5:4b:a2:68:88:08:f7:db:a4:29:59:e4:ab:
1c:98:a6:6e:79:c4:5e:08:d4:90:4d:de:a4:cf:67:
e0:cb:9f:3a:57:b6:a5:30:89:60:f8:95:07:21:22:
8e:96:2e:dc:ad:c1:b5:24:60:2e:7a:e5:1a:64:bf:
fe:6f:18:37:7b:04:32:a9:43:91:f7:9d:72:cf:8d:
bf:7b:6b:a8:ec:e0:c8:c7:a7:a0:1c:f9:ad:8e:3c:
1d:bb:cc:11:2f:0e:43:d5:f7:73:ee:aa:a9:7c:01:
45:ea:50:22:ac:ff:7e:bd:47:02:84:51:19:a6:ac:
28:bb:3a:97:f1:eb:5c:e0:02:50:5f:c7:fe:b9:20:
12:aa:c2:70:6e:39:ec:9a:b8:62:3b:ff:79:f8:09:
18:7b:50:0c:63:9e:ff:80:6e:9e:d7:f7:0c:5c:de:
61:e5:84:d2:f6:4e:b0:28:45:36:f6:a1:10:7c:74:
e2:e9:38:5e:77:51:db:e4:89:54:25:d2:7f:90:31:
68:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:A8:3F:08:E3:82:FA:0F:31:1C:EC:4A:D2:7F:FB:62:0D:DF:8B:09
X509v3 Authority Key Identifier:
keyid:E8:40:3B:5E:45:CD:58:BE:5F:6C:5D:33:FA:56:5A:B4:92:23:E3:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/Kqg_COOC-g8xHOxK0n_7Yg3fiwk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.60.162.0/23
92.60.165.0/24
Signature Algorithm: sha256WithRSAEncryption
43:f7:5d:9f:3c:ac:ae:69:54:a7:fa:47:e5:ab:54:af:37:90:
ac:77:06:e3:75:29:b9:6b:f0:b0:c7:00:be:0c:9e:cc:4c:d0:
8c:db:69:9e:8f:8d:18:e9:17:27:b0:ca:91:ac:a3:b0:cc:c2:
50:24:3e:06:cd:60:31:2a:94:03:2b:c0:23:00:ae:73:2d:ef:
93:95:3a:66:1d:e6:8c:da:99:1b:53:b3:31:cd:3d:d1:a2:4b:
14:9c:f8:b5:d6:66:e3:ea:7a:ee:26:7a:9d:a7:43:9f:15:96:
64:4c:10:1c:ad:31:8d:a5:d8:9c:2c:06:65:04:d0:2b:79:b1:
ce:39:aa:e8:1f:63:75:5f:5b:22:a4:80:4b:12:01:30:4c:0b:
2d:e2:6a:be:5e:c0:3a:3e:06:b6:86:cd:8f:03:ee:2d:67:9b:
18:1c:26:4f:7d:5c:f9:ea:a8:60:a9:d7:a4:0f:a8:fb:d8:cb:
be:9f:3c:af:af:84:05:c2:fc:97:8e:0d:f8:13:8a:cb:54:ed:
c5:43:2e:07:eb:4c:a5:5b:c8:d3:57:93:5f:14:e8:21:c9:c3:
f1:e3:65:72:07:c3:33:c4:ce:3b:c9:1e:69:03:f8:67:db:93:
92:5a:f5:b5:c7:41:7e:79:16:d8:ae:05:d6:78:d7:52:72:1d:
85:65:56:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:33 2023 by rpki-client on console-ams.rpki-client.org