Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/K98fqEu8JxlDesrjClHOFlmdZiU.roa
File: K98fqEu8JxlDesrjClHOFlmdZiU.roa (raw, json)
Hash identifier: NnZFn21ygh2MbXbUQ7ZyMyoA1qJe/b7ZTTZVqjF+VYU=
Subject key identifier: 2B:DF:1F:A8:4B:BC:27:19:43:7A:CA:E3:0A:51:CE:16:59:9D:66:25
Certificate issuer: /CN=1045dacc837798c3e6cf31f4d27946a33b0de661
Certificate serial: 29ED23B0
Authority key identifier: 10:45:DA:CC:83:77:98:C3:E6:CF:31:F4:D2:79:46:A3:3B:0D:E6:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EEXazIN3mMPmzzH00nlGozsN5mE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/K98fqEu8JxlDesrjClHOFlmdZiU.roa
Signing time: Sat 01 Jan 2022 13:54:22 +0000
ROA not before: Sat 01 Jan 2022 13:54:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59975
IP address blocks: 93.179.93.0/24 maxlen: 24
93.179.94.0/24 maxlen: 24
95.181.145.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 703407024 (0x29ed23b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1045dacc837798c3e6cf31f4d27946a33b0de661
Validity
Not Before: Jan 1 13:54:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2bdf1fa84bbc2719437acae30a51ce16599d6625
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:67:7c:5d:de:50:87:e3:ed:9e:1e:f4:f6:39:
70:bc:b6:a4:b7:1c:be:b4:5c:ea:bc:a9:b2:68:f3:
28:15:f6:ca:29:da:6a:73:d3:46:97:1f:9f:96:3e:
21:99:6c:0b:c0:ba:b1:f4:9f:01:82:1d:58:23:2b:
23:e1:fb:d5:ff:c3:23:9e:a4:03:26:aa:5e:f8:e8:
3b:3c:33:23:06:2e:8a:99:10:a1:83:13:2d:d3:3d:
a3:2a:1d:b6:dd:12:c4:9e:f4:04:89:26:d3:cf:c0:
c1:39:42:d4:69:8c:99:7e:21:e8:b0:04:af:4a:e1:
ab:6d:12:98:ba:30:c9:05:20:1d:64:90:95:2d:24:
d8:25:e0:a6:e3:05:2a:26:9c:2f:08:9a:20:56:ce:
8a:15:18:b0:e2:e5:b2:6a:e8:94:de:7b:40:8b:ad:
8a:04:a5:f0:fc:47:f7:12:c9:0d:0b:6d:b0:10:36:
cb:e5:73:90:65:94:73:bd:aa:fa:fb:7a:07:6b:c2:
fd:ca:cc:49:99:53:bf:d7:b8:43:84:c8:13:65:ec:
e6:8d:2c:e1:2a:0e:41:96:1c:c0:66:59:1a:c6:ae:
8d:74:55:ac:db:a8:9f:6e:ac:85:4b:39:32:6a:cc:
b3:0e:c6:c7:24:b0:25:ba:ab:1e:90:22:6d:5c:65:
b8:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:DF:1F:A8:4B:BC:27:19:43:7A:CA:E3:0A:51:CE:16:59:9D:66:25
X509v3 Authority Key Identifier:
keyid:10:45:DA:CC:83:77:98:C3:E6:CF:31:F4:D2:79:46:A3:3B:0D:E6:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EEXazIN3mMPmzzH00nlGozsN5mE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/K98fqEu8JxlDesrjClHOFlmdZiU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/EEXazIN3mMPmzzH00nlGozsN5mE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.179.93.0-93.179.94.255
95.181.145.0/24
Signature Algorithm: sha256WithRSAEncryption
af:12:16:44:07:e0:4b:b9:6b:69:1c:6e:ed:23:a1:04:52:e9:
81:6d:87:39:f6:6c:e6:53:d9:d5:15:e8:41:3b:d1:1c:72:f1:
be:cc:d8:c7:9a:c4:32:e2:bd:0b:ad:f5:e0:72:1a:11:18:7b:
ca:4a:7c:04:f9:46:b1:a1:a9:c3:ad:65:5e:51:61:ba:58:f2:
df:41:aa:72:02:22:7b:3a:7b:7b:56:03:41:10:20:05:f4:c5:
f7:a6:3b:08:3c:a3:3f:00:c4:12:2d:3b:62:3d:01:07:0c:4a:
78:f9:90:0e:d4:df:58:8d:27:aa:4a:b3:9c:ae:39:41:7c:4b:
3e:60:09:3b:49:21:17:da:8d:43:34:55:22:b2:d7:32:da:cf:
24:97:ed:a2:66:2a:66:6d:ea:79:7a:23:17:77:78:57:4a:2f:
8e:37:a0:15:79:25:8c:a0:e7:24:80:70:f8:df:41:08:37:59:
cb:81:c9:3d:16:62:1a:eb:4a:8e:16:e4:bc:ef:43:cd:90:2a:
49:6b:f5:76:c9:e0:68:f2:fe:d7:08:77:1a:a1:84:7f:fa:c7:
10:a3:10:d8:f6:a2:2f:bd:76:91:ea:16:a7:cf:b0:a1:53:38:
de:f2:c7:eb:ae:45:98:1d:05:61:42:18:42:45:08:68:22:23:
01:f1:63:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:19 2023 by rpki-client on console-fra.rpki-client.org