Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/giutdgdZ-X-1o8vuFJXT6lp_JD4.roa
File: giutdgdZ-X-1o8vuFJXT6lp_JD4.roa (raw, json)
Hash identifier: FCyrhzZePxokkopt2LhLPhbq2UVitzuyKjxUug6glRM=
Subject key identifier: 82:2B:AD:76:07:59:F9:7F:B5:A3:CB:EE:14:95:D3:EA:5A:7F:24:3E
Certificate issuer: /CN=e8403b5e45cd58be5f6c5d33fa565ab49223e3db
Certificate serial: 37434192
Authority key identifier: E8:40:3B:5E:45:CD:58:BE:5F:6C:5D:33:FA:56:5A:B4:92:23:E3:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/giutdgdZ-X-1o8vuFJXT6lp_JD4.roa
Signing time: Sat 01 Jan 2022 05:59:20 +0000
ROA not before: Sat 01 Jan 2022 05:59:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44989
IP address blocks: 212.163.144.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 927154578 (0x37434192)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8403b5e45cd58be5f6c5d33fa565ab49223e3db
Validity
Not Before: Jan 1 05:59:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=822bad760759f97fb5a3cbee1495d3ea5a7f243e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:b2:38:0c:28:43:67:cb:e5:d4:12:19:be:c6:
f7:e4:86:9e:66:4a:ef:9a:f1:ad:47:8a:25:c7:ec:
8f:5b:70:87:99:3a:43:46:4e:b2:c3:d9:05:4c:99:
c9:02:fc:1a:c8:02:b6:af:2a:fd:e6:46:83:00:38:
c4:eb:1d:42:5b:e8:8c:97:bc:94:b4:47:0d:8a:69:
af:08:ce:bf:16:bb:dd:51:91:68:a6:73:c5:40:5a:
ea:21:24:55:d8:2c:bb:67:ab:7c:d0:8c:13:dd:2a:
c1:b7:15:a9:02:cc:55:69:c5:cf:cb:d9:de:71:35:
d3:06:b7:d0:61:89:67:9b:e7:8e:dc:e1:9d:ea:47:
08:a0:3e:64:b5:81:23:1a:ba:63:76:81:76:9d:88:
f8:b1:0d:af:ee:14:cd:a8:04:4e:bb:32:d6:ad:09:
6f:14:48:aa:d2:8f:a8:d3:27:95:b6:fe:75:34:bc:
7f:c2:5a:36:26:f9:0e:4d:f0:0c:a2:56:b8:da:c0:
71:0e:ce:c6:73:ac:74:4b:fe:72:2b:be:ce:7f:17:
5c:02:fe:de:a8:aa:ea:52:0a:53:9a:88:12:55:75:
3a:8b:c1:2b:61:72:c7:a3:bb:d6:41:8d:11:52:6f:
65:5e:48:a8:d0:f4:25:92:e1:70:4e:03:10:6d:2b:
fb:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:2B:AD:76:07:59:F9:7F:B5:A3:CB:EE:14:95:D3:EA:5A:7F:24:3E
X509v3 Authority Key Identifier:
keyid:E8:40:3B:5E:45:CD:58:BE:5F:6C:5D:33:FA:56:5A:B4:92:23:E3:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/giutdgdZ-X-1o8vuFJXT6lp_JD4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.163.144.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:7b:26:57:a6:70:13:c8:20:8c:0c:38:7c:97:8c:56:9b:dd:
2d:03:66:80:f4:80:4c:bf:c5:61:3e:51:d2:b8:92:fd:00:3a:
b7:05:8f:7f:0e:a0:03:f0:46:f3:bb:79:89:04:28:c3:47:54:
01:2d:81:f2:af:a4:dc:4b:83:0d:75:a5:9c:f9:ca:95:0e:2f:
5c:4b:b0:5b:b7:f5:ac:14:68:e4:57:9e:0b:e4:ce:99:7f:25:
54:2d:65:9f:26:ad:aa:ec:fa:e1:c9:06:9c:ba:6b:b9:04:a0:
42:ba:a9:71:25:94:64:3b:5a:d0:12:43:50:bd:9b:57:b7:1e:
f9:3c:fd:65:d8:b7:0c:29:fb:61:32:69:80:00:b0:73:08:ce:
be:f4:75:4a:fc:ee:16:8b:a3:63:bc:63:1a:3b:90:d0:74:8d:
88:04:ad:c5:cc:c7:c7:41:c6:81:00:3d:64:55:91:48:f9:46:
da:8e:f6:94:f4:b3:66:84:f1:bc:2d:ea:50:83:91:09:55:42:
82:4f:04:ce:c9:76:b9:df:c6:0f:89:53:e6:d1:de:98:84:4d:
af:fc:70:d1:33:d4:8d:30:63:e0:af:94:98:e8:01:ec:00:e7:
18:7e:8e:91:8b:85:08:cb:fb:02:35:e1:61:ac:af:71:e0:7b:
92:6c:09:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:33 2023 by rpki-client on console-ams.rpki-client.org