Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/qU99kYG_f9mL3zy_djtbDg-O8ec.roa
File: qU99kYG_f9mL3zy_djtbDg-O8ec.roa (raw, json)
Hash identifier: w8qzgbNb1hTEyYguX/OhdvEcruGaBO2uz2nyeAfyVis=
Subject key identifier: A9:4F:7D:91:81:BF:7F:D9:8B:DF:3C:BF:76:3B:5B:0E:0F:8E:F1:E7
Certificate issuer: /CN=e8403b5e45cd58be5f6c5d33fa565ab49223e3db
Certificate serial: 018572FA5B1ED424102A171695839CAE36D9
Authority key identifier: E8:40:3B:5E:45:CD:58:BE:5F:6C:5D:33:FA:56:5A:B4:92:23:E3:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/qU99kYG_f9mL3zy_djtbDg-O8ec.roa
Signing time: Mon 02 Jan 2023 14:54:48 +0000
ROA not before: Mon 02 Jan 2023 14:54:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41994
IP address blocks: 212.163.10.0/24 maxlen: 25
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:fa:5b:1e:d4:24:10:2a:17:16:95:83:9c:ae:36:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8403b5e45cd58be5f6c5d33fa565ab49223e3db
Validity
Not Before: Jan 2 14:54:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a94f7d9181bf7fd98bdf3cbf763b5b0e0f8ef1e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:bb:0b:57:ba:8e:7e:7f:9e:1b:10:2f:7d:4f:
71:fd:d1:b6:1e:45:db:16:4a:17:7e:c3:83:06:e6:
b3:fc:a7:2a:75:1f:79:cc:90:aa:b7:74:f5:94:54:
8b:36:27:a6:ea:42:ef:c6:be:12:63:f0:0f:50:6b:
6d:27:9a:49:69:35:21:2c:ba:28:fc:ee:43:f6:19:
bf:58:a1:cf:6e:be:db:1d:4f:12:e6:89:04:87:1f:
d9:1b:32:dd:95:fd:d3:54:e6:de:1a:6d:9f:14:d2:
09:ec:8c:40:02:a0:1d:59:d1:46:b2:78:19:71:72:
01:6f:22:10:b3:e3:c3:43:87:fc:34:7e:89:89:ac:
c5:69:8b:c4:62:0b:f5:3f:3e:6b:e3:c8:e5:37:85:
da:b9:b9:c4:e8:30:a2:51:57:65:59:31:c6:ea:57:
ac:c4:8e:5c:ff:ea:7a:7f:75:3b:09:41:13:c6:8c:
2d:06:19:62:2f:cb:ef:6a:ab:ca:3b:16:07:b6:4f:
bd:5f:8d:f4:fc:de:76:78:6e:37:f6:9d:ff:cf:cc:
95:c9:30:ce:bb:0b:67:e9:07:89:9c:29:1d:10:65:
c3:23:f1:49:a4:1b:ca:e8:be:2d:c8:eb:96:5e:89:
28:82:e3:8e:73:36:63:90:59:a3:bf:37:67:6c:4f:
f8:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:4F:7D:91:81:BF:7F:D9:8B:DF:3C:BF:76:3B:5B:0E:0F:8E:F1:E7
X509v3 Authority Key Identifier:
keyid:E8:40:3B:5E:45:CD:58:BE:5F:6C:5D:33:FA:56:5A:B4:92:23:E3:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/qU99kYG_f9mL3zy_djtbDg-O8ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.163.10.0/24
Signature Algorithm: sha256WithRSAEncryption
af:e8:d3:b4:41:13:3d:13:59:95:11:2f:71:06:84:cf:f4:7f:
0f:28:b8:5c:29:24:94:ec:1f:3a:49:3c:78:6e:52:1a:b0:89:
a7:b2:02:fc:73:75:20:71:7e:c8:2a:54:dc:64:b5:dd:8f:59:
81:a3:54:e2:1a:84:0b:53:6b:e7:fe:65:9b:eb:58:c4:f5:37:
f9:e3:31:12:71:84:ac:0c:a8:58:ea:ef:4e:aa:4b:2e:ba:93:
9a:2d:95:7d:b5:19:0b:b3:49:69:b3:0d:14:f3:13:aa:58:13:
ba:16:66:70:c8:35:51:dd:c0:64:98:60:23:53:cc:67:1a:99:
33:c9:c8:f6:62:68:19:2e:32:9b:3d:7a:4c:23:5b:15:5f:c8:
73:1e:28:2e:3f:6a:f2:b3:72:3b:2b:a5:76:92:a1:2b:63:5f:
4c:0c:d9:2b:44:16:71:c4:af:63:73:a2:ae:1f:73:12:03:94:
0a:64:52:8a:71:e9:8c:34:d0:5f:05:de:fd:7d:77:33:96:cd:
f5:26:0d:9e:9c:34:92:d8:42:b5:87:ba:7b:93:44:68:97:7d:
98:7d:d5:8c:3d:39:1d:94:91:93:ab:e5:b0:03:bd:c4:f7:cc:
52:56:8d:c4:cc:29:e0:42:e1:10:f7:b4:39:2f:2c:9b:9e:b1:
4b:ad:45:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:33 2023 by rpki-client on console-ams.rpki-client.org