Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/OGkRHg7383X09FA8g-kYVgWDirU.roa
File: OGkRHg7383X09FA8g-kYVgWDirU.roa (raw, json)
Hash identifier: z2GfCHEfqYPdWtW0AKvLZF5Bcf7iU1AJgmtpfIPLLOY=
Subject key identifier: 38:69:11:1E:0E:F7:F3:75:F4:F4:50:3C:83:E9:18:56:05:83:8A:B5
Certificate issuer: /CN=1045dacc837798c3e6cf31f4d27946a33b0de661
Certificate serial: 29F3E5FE
Authority key identifier: 10:45:DA:CC:83:77:98:C3:E6:CF:31:F4:D2:79:46:A3:3B:0D:E6:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EEXazIN3mMPmzzH00nlGozsN5mE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/OGkRHg7383X09FA8g-kYVgWDirU.roa
Signing time: Sat 01 Jan 2022 13:54:28 +0000
ROA not before: Sat 01 Jan 2022 13:54:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201112
IP address blocks: 188.68.4.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 703849982 (0x29f3e5fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1045dacc837798c3e6cf31f4d27946a33b0de661
Validity
Not Before: Jan 1 13:54:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3869111e0ef7f375f4f4503c83e9185605838ab5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:95:e1:61:f7:df:ee:47:de:c5:73:00:a3:79:
79:86:a9:d7:4b:76:d2:29:63:a2:48:bb:c6:d2:b5:
14:e5:06:e7:18:d0:10:ce:70:a2:db:08:ba:2d:ac:
e2:fb:55:d5:fb:32:f5:d6:e9:9a:14:fa:df:d5:80:
c8:45:bc:bc:cc:2f:98:5c:1a:be:bc:01:82:07:c6:
68:0d:be:af:33:64:98:18:c1:e3:88:71:2c:1c:98:
0d:9e:ec:49:88:2c:af:29:a0:06:5c:d5:03:42:c9:
ab:4e:4c:62:2a:6d:16:03:c0:1c:df:c6:43:a8:66:
fe:49:44:ac:64:8a:4e:3c:b5:f3:c6:2e:94:ca:fd:
2b:d3:c5:cf:bf:0a:0c:34:2b:bc:ee:83:87:fb:b1:
1a:03:d2:50:75:2b:0e:de:de:60:b4:53:cf:a6:ce:
ab:fa:5d:59:76:a2:da:4f:71:5f:26:9f:e3:1c:2f:
40:b5:dd:df:19:f0:a2:83:55:0d:62:ff:31:92:cd:
26:ee:5f:ff:88:6e:9e:de:38:72:10:36:b9:c7:b4:
62:20:1a:b1:b3:11:e0:d9:50:01:82:bd:db:a7:57:
d4:79:ff:0b:eb:07:86:8f:ca:7a:41:60:01:b7:c4:
ec:73:46:59:56:1e:f7:95:e5:f0:38:d9:2a:e5:4c:
47:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:69:11:1E:0E:F7:F3:75:F4:F4:50:3C:83:E9:18:56:05:83:8A:B5
X509v3 Authority Key Identifier:
keyid:10:45:DA:CC:83:77:98:C3:E6:CF:31:F4:D2:79:46:A3:3B:0D:E6:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EEXazIN3mMPmzzH00nlGozsN5mE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/OGkRHg7383X09FA8g-kYVgWDirU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/EEXazIN3mMPmzzH00nlGozsN5mE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.68.4.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:78:8e:a6:91:e0:1a:ba:4b:da:5e:f4:52:d5:fe:8f:b2:ee:
19:8d:da:82:3c:f3:1d:bc:8b:d7:c5:6e:6f:74:78:86:37:ea:
da:d7:ec:f8:6e:9d:e1:c3:8d:8e:12:2b:de:14:e4:8c:b4:b5:
6b:73:fb:db:bb:d1:06:1f:1c:3b:99:ad:46:09:92:54:63:b5:
f7:b3:b3:37:02:28:c5:c7:a1:c3:c3:54:35:f5:e4:5a:bb:23:
8e:15:38:eb:66:ee:17:25:87:06:cd:51:b2:6f:7d:c5:f6:78:
33:67:f1:f9:09:d6:f5:49:27:3f:05:ff:bc:3a:a1:66:49:42:
08:d3:0f:61:76:75:7e:72:13:b0:ee:0b:06:e2:fd:de:9e:6a:
59:f7:a3:d1:3c:f1:df:7b:4a:f0:91:71:9f:f8:a5:c6:9d:ef:
30:0a:17:67:45:66:ab:8b:8c:f8:38:6f:76:fc:ca:44:3a:97:
c2:e4:11:93:85:8d:4e:30:fb:22:22:8c:0b:52:07:b7:56:d1:
d0:5d:d7:69:2c:27:e6:01:58:53:77:77:7d:bb:53:8f:f2:66:
da:37:c1:2f:38:7c:b4:c8:cc:d5:74:10:c6:52:f1:fc:ff:e6:
d8:1a:41:4e:7b:0b:6b:b8:1a:f5:1f:2f:3a:af:d2:3b:11:e4:
97:b1:df:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:13 2023 by rpki-client on console-ams.rpki-client.org