Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/nOzxKGkXtfRgw63TYLkt68VutAc.roa
File: nOzxKGkXtfRgw63TYLkt68VutAc.roa (raw, json)
Hash identifier: A/nff1Wk9YVBTOfng8GiJVi5NFL7IeDCf5WPeZg5Ak8=
Subject key identifier: 9C:EC:F1:28:69:17:B5:F4:60:C3:AD:D3:60:B9:2D:EB:C5:6E:B4:07
Certificate issuer: /CN=e8403b5e45cd58be5f6c5d33fa565ab49223e3db
Certificate serial: 3740390E
Authority key identifier: E8:40:3B:5E:45:CD:58:BE:5F:6C:5D:33:FA:56:5A:B4:92:23:E3:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/nOzxKGkXtfRgw63TYLkt68VutAc.roa
Signing time: Sat 01 Jan 2022 05:59:18 +0000
ROA not before: Sat 01 Jan 2022 05:59:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25261
IP address blocks: 213.192.232.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 926955790 (0x3740390e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8403b5e45cd58be5f6c5d33fa565ab49223e3db
Validity
Not Before: Jan 1 05:59:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9cecf1286917b5f460c3add360b92debc56eb407
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:fc:e2:c2:3d:f7:ea:7d:1a:c0:32:d5:d0:19:
29:ae:3d:7d:f7:26:4f:85:93:51:52:3d:fb:53:36:
fe:5b:1a:a9:66:99:84:5a:ef:88:84:26:dc:91:ed:
c6:f9:10:7f:5a:69:5f:bd:29:49:29:56:9c:f1:1b:
bc:e9:1d:90:27:18:30:1c:60:eb:b9:0c:1b:84:3e:
dd:0e:e3:0d:0a:72:47:52:3a:2e:45:0b:e5:e2:e5:
bc:15:2f:a3:fe:c7:21:73:8a:71:2b:21:1c:37:24:
a2:91:da:bf:93:6e:20:5a:ee:c9:9e:7e:63:5f:99:
86:a0:81:77:cb:41:7d:58:b2:c7:15:c8:3d:a3:47:
6c:87:54:ac:57:ef:e4:af:a3:07:a0:f9:77:36:94:
1e:e7:24:09:87:2b:0f:85:1b:96:1b:b1:39:89:7f:
c1:a9:08:6f:80:af:8d:3e:0d:e1:18:0f:ea:ed:df:
eb:26:9b:eb:eb:06:cd:3b:46:34:44:93:21:48:f1:
26:7b:6f:05:84:e1:9b:dc:56:72:6d:08:2f:cb:f7:
be:8c:04:a1:05:e9:da:3f:21:d0:08:8d:66:35:23:
d9:dc:cf:c1:25:16:95:a8:ff:da:84:41:62:fc:7c:
0f:47:82:93:d7:42:a2:0e:89:dd:19:e6:76:8f:45:
8a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:EC:F1:28:69:17:B5:F4:60:C3:AD:D3:60:B9:2D:EB:C5:6E:B4:07
X509v3 Authority Key Identifier:
keyid:E8:40:3B:5E:45:CD:58:BE:5F:6C:5D:33:FA:56:5A:B4:92:23:E3:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/nOzxKGkXtfRgw63TYLkt68VutAc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.192.232.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:b2:0c:30:59:ac:71:e2:e9:24:5f:09:1b:8a:9d:73:8d:8a:
9b:f5:b2:8d:92:63:59:1b:a2:f4:1d:2c:51:d7:af:d0:9c:0e:
cf:cd:b8:f0:7b:5d:73:73:1b:30:d3:2d:78:ae:f7:4a:5c:1a:
21:d9:73:ac:6f:1a:cc:f0:d4:2c:82:98:b5:bc:b8:6d:6f:a6:
7b:c1:7d:db:1c:09:a4:36:27:f5:8b:28:9f:50:18:ab:94:b3:
2a:4c:30:e5:87:d5:12:89:c3:10:31:fe:d5:54:5b:0a:56:94:
b9:79:e9:a4:58:f2:e8:09:25:d5:08:61:0d:f0:79:a8:b5:32:
a9:e2:0f:f9:45:b0:15:4a:ff:26:34:f4:68:c4:8f:bf:de:27:
58:cf:b8:12:86:a2:60:77:5d:60:4f:2d:dc:5f:75:76:ea:25:
95:44:01:03:07:fa:80:72:c8:4a:98:a2:8e:b4:c7:9e:40:52:
af:08:21:7e:0e:cd:59:d8:f5:78:21:71:0b:a9:b3:5f:6a:be:
4d:a6:dd:8c:25:04:d0:0b:58:1b:01:5d:a1:8e:11:8b:07:66:
a1:fe:f3:ef:4a:6a:8c:35:a7:3f:f3:26:bb:bd:10:d0:88:16:
35:e8:6d:0a:89:3c:0c:38:c4:84:db:02:62:90:e2:d1:ee:d5:
56:51:88:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:33 2023 by rpki-client on console-ams.rpki-client.org