Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/Vm6O5DEwwT4UCeT1I_fqqDjzWU4.roa
File: Vm6O5DEwwT4UCeT1I_fqqDjzWU4.roa (raw, json)
Hash identifier: mB2u2ZDudnt+/s92mSf7PR8zG6/kzBrj5dPHQv+ADeM=
Subject key identifier: 56:6E:8E:E4:31:30:C1:3E:14:09:E4:F5:23:F7:EA:A8:38:F3:59:4E
Certificate issuer: /CN=1045dacc837798c3e6cf31f4d27946a33b0de661
Certificate serial: 29F2B78A
Authority key identifier: 10:45:DA:CC:83:77:98:C3:E6:CF:31:F4:D2:79:46:A3:3B:0D:E6:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EEXazIN3mMPmzzH00nlGozsN5mE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/Vm6O5DEwwT4UCeT1I_fqqDjzWU4.roa
Signing time: Sat 01 Jan 2022 13:54:27 +0000
ROA not before: Sat 01 Jan 2022 13:54:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200687
IP address blocks: 93.179.92.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 703772554 (0x29f2b78a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1045dacc837798c3e6cf31f4d27946a33b0de661
Validity
Not Before: Jan 1 13:54:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=566e8ee43130c13e1409e4f523f7eaa838f3594e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:69:d1:03:22:ac:82:4e:4a:7d:b2:93:74:33:
86:e6:fb:74:8e:d1:40:e9:3c:98:17:26:85:51:2c:
d1:99:b8:ac:d6:c6:58:f3:18:e6:38:b8:14:7b:e4:
09:a4:cb:d3:b7:54:ad:4d:6a:4b:38:bd:1e:92:5d:
bc:a4:7a:92:9a:d8:b2:37:a6:af:d0:e3:1b:5a:af:
28:be:12:f8:97:c5:59:6a:3e:c7:6f:4b:b1:8b:e4:
3d:70:b0:b6:51:67:77:94:8e:da:f6:c7:c7:01:43:
ad:a2:6e:f4:32:b0:65:66:15:13:6d:27:11:6c:99:
e9:22:aa:ad:d9:78:ac:46:11:1d:05:d9:7e:6d:40:
da:14:96:35:09:ab:9a:3e:dc:63:28:9b:48:53:6e:
56:87:7f:c9:30:62:c0:8c:16:3f:93:0c:f0:88:29:
57:58:79:ff:6f:10:d4:66:37:f7:94:6a:b6:ab:c0:
ce:fb:ab:25:53:6f:bf:9f:8f:3d:34:d9:d8:7b:65:
c4:f3:5b:c5:9c:1d:73:ac:84:7c:94:76:84:80:26:
5b:ee:29:ad:29:18:42:5f:4f:65:af:8e:09:d1:90:
f4:cd:b5:e7:77:6b:c4:88:c3:32:c4:7b:8c:7c:d3:
de:e1:87:cb:d5:92:24:20:d7:d6:7c:64:08:c5:31:
64:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:6E:8E:E4:31:30:C1:3E:14:09:E4:F5:23:F7:EA:A8:38:F3:59:4E
X509v3 Authority Key Identifier:
keyid:10:45:DA:CC:83:77:98:C3:E6:CF:31:F4:D2:79:46:A3:3B:0D:E6:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EEXazIN3mMPmzzH00nlGozsN5mE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/Vm6O5DEwwT4UCeT1I_fqqDjzWU4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/EEXazIN3mMPmzzH00nlGozsN5mE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.179.92.0/24
Signature Algorithm: sha256WithRSAEncryption
69:cc:4b:99:24:65:72:9b:47:f6:b3:d8:fd:09:10:7c:4e:f4:
61:b7:2b:3e:f1:9f:53:dd:9e:05:a3:8a:c3:d9:da:1b:63:e0:
0f:d6:ab:4a:63:05:42:17:84:76:05:4e:03:e4:4b:24:93:bd:
a1:2a:7f:aa:ce:e9:76:f6:33:6d:a0:7f:81:5d:37:a4:7f:4f:
82:89:60:8d:10:7f:e1:7b:19:ac:d8:c3:f7:60:b9:d8:aa:07:
67:42:f4:a9:cc:2f:c6:63:cc:65:7f:cc:81:f2:44:10:f4:57:
78:0c:96:04:a7:70:9f:67:f6:f6:22:1c:89:4e:06:f8:2d:e4:
e8:0b:d0:0b:7d:b7:93:de:a0:65:aa:c5:09:0c:d8:23:76:13:
13:78:97:85:b7:45:73:7d:ff:a8:a4:54:07:d9:84:c6:0d:db:
27:6c:cd:8b:55:1b:15:1c:68:48:01:95:7d:76:84:86:8d:6f:
c2:98:37:88:4d:f0:99:62:7b:69:3c:d6:01:b7:a0:4c:65:9f:
d7:31:4c:ec:50:40:00:eb:9b:0c:8e:b2:ba:3a:ec:b9:bb:cc:
1a:c7:20:b7:53:16:b4:57:7b:34:04:72:fb:7b:44:f4:46:99:
44:5e:b1:9f:10:f2:f8:f4:38:89:9e:80:46:84:bb:fc:75:1e:
da:9a:74:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:13 2023 by rpki-client on console-ams.rpki-client.org