Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/8EyOXIOW6jDuwtI_3dZQU-x7Ous.roa
File: 8EyOXIOW6jDuwtI_3dZQU-x7Ous.roa (raw, json)
Hash identifier: 2xuq14DcmCryQg/RBNvskHipO4cswKvem1VnsXC4prk=
Subject key identifier: F0:4C:8E:5C:83:96:EA:30:EE:C2:D2:3F:DD:D6:50:53:EC:7B:3A:EB
Certificate issuer: /CN=1045dacc837798c3e6cf31f4d27946a33b0de661
Certificate serial: 29E616C1
Authority key identifier: 10:45:DA:CC:83:77:98:C3:E6:CF:31:F4:D2:79:46:A3:3B:0D:E6:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EEXazIN3mMPmzzH00nlGozsN5mE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/8EyOXIOW6jDuwtI_3dZQU-x7Ous.roa
Signing time: Sat 01 Jan 2022 13:54:19 +0000
ROA not before: Sat 01 Jan 2022 13:54:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 38971
IP address blocks: 178.57.71.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 702944961 (0x29e616c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1045dacc837798c3e6cf31f4d27946a33b0de661
Validity
Not Before: Jan 1 13:54:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f04c8e5c8396ea30eec2d23fddd65053ec7b3aeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b2:db:d0:d8:4c:07:81:10:ae:c9:5e:65:15:
d4:32:5a:75:c8:7b:a3:58:42:95:17:1f:20:cf:78:
a0:d4:c1:62:e2:b3:59:5f:1e:ed:cd:62:54:ec:64:
df:52:10:7f:9a:1c:fe:66:88:52:0e:a9:68:c8:8d:
25:42:80:f4:d2:62:d8:2c:c0:0a:f7:b4:db:54:5e:
5e:9b:a5:0e:d8:f5:2a:b9:fd:69:44:2f:8c:b1:fc:
44:25:53:36:68:8e:92:31:90:4b:8b:82:cd:0e:1b:
95:79:a2:f8:13:60:01:13:7c:4b:f5:a0:05:78:64:
ba:1b:b4:4a:b8:4d:4b:ac:28:6b:85:49:75:e3:36:
53:4a:2e:ba:d4:ae:79:94:b1:ce:02:62:99:44:15:
f4:a8:e5:05:55:6b:8a:47:d5:2b:50:81:a1:b8:0d:
b9:cb:d4:0b:46:4e:39:e0:a3:60:bc:88:da:97:7f:
99:53:d6:80:b5:a3:38:b3:d9:72:2d:55:6c:83:51:
be:d8:94:ae:f3:fb:0a:e6:8e:22:ba:2f:e7:26:a1:
ef:d9:6c:08:9b:45:80:99:22:f7:36:22:b1:ae:8b:
5c:7f:c4:3f:a6:da:3e:92:e9:9f:84:4d:8b:6f:9d:
d2:07:7c:4d:0a:12:33:45:2b:e4:21:23:af:a9:87:
b3:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:4C:8E:5C:83:96:EA:30:EE:C2:D2:3F:DD:D6:50:53:EC:7B:3A:EB
X509v3 Authority Key Identifier:
keyid:10:45:DA:CC:83:77:98:C3:E6:CF:31:F4:D2:79:46:A3:3B:0D:E6:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EEXazIN3mMPmzzH00nlGozsN5mE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/8EyOXIOW6jDuwtI_3dZQU-x7Ous.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/EEXazIN3mMPmzzH00nlGozsN5mE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.57.71.0/24
Signature Algorithm: sha256WithRSAEncryption
93:28:04:b8:16:fa:ab:bf:f4:95:d6:ba:55:3f:6b:90:10:ef:
a3:4f:4e:d0:3d:f5:35:9d:89:99:ba:d5:d7:24:cd:73:bf:48:
fe:b8:e6:b6:48:1e:fe:80:ec:fb:f8:77:a7:22:d5:24:bc:44:
6d:ec:4f:84:48:6c:e4:24:25:61:e5:5c:fc:df:76:63:ad:a3:
24:42:82:74:7c:ae:69:06:63:09:a6:51:2c:3b:03:67:3d:f4:
69:95:70:44:4c:b2:68:6d:d8:06:e7:c9:d9:43:a0:10:1b:0e:
61:29:09:f3:68:3c:8d:0e:1d:2b:43:6d:ea:46:06:cf:b0:5c:
92:4a:40:71:66:a0:53:f6:15:83:c4:cf:99:e0:b6:d5:7e:18:
83:16:a9:cc:9a:e0:36:ca:c6:26:b5:01:80:d3:a4:63:b9:61:
b7:f0:0f:33:29:ce:25:79:29:9d:e7:c0:59:b4:d8:68:0c:4c:
83:26:9f:52:53:aa:44:3b:85:a7:5d:3a:3e:1d:5f:ff:72:87:
f1:94:e1:e5:c4:b0:77:ee:94:73:43:53:28:28:a9:38:21:24:
40:bf:fc:f2:dd:40:d9:5c:58:be:79:f6:28:a2:ec:c7:b7:ef:
af:20:4d:ca:3f:72:30:59:a3:6b:bd:a6:ec:30:84:a8:f6:79:
05:52:de:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:13 2023 by rpki-client on console-ams.rpki-client.org