Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/_H86Qpb8391kSI-ssYF73UYgwTo.roa
File: _H86Qpb8391kSI-ssYF73UYgwTo.roa (raw, json)
Hash identifier: O5pdzz5d0nuKfRIyrbqffQI5ZWRq1QNiMyd8yZ7ObFk=
Subject key identifier: FC:7F:3A:42:96:FC:DF:DD:64:48:8F:AC:B1:81:7B:DD:46:20:C1:3A
Certificate issuer: /CN=1045dacc837798c3e6cf31f4d27946a33b0de661
Certificate serial: 29FCD645
Authority key identifier: 10:45:DA:CC:83:77:98:C3:E6:CF:31:F4:D2:79:46:A3:3B:0D:E6:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EEXazIN3mMPmzzH00nlGozsN5mE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/_H86Qpb8391kSI-ssYF73UYgwTo.roa
Signing time: Sat 01 Jan 2022 13:54:32 +0000
ROA not before: Sat 01 Jan 2022 13:54:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213133
IP address blocks: 93.179.95.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 704435781 (0x29fcd645)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1045dacc837798c3e6cf31f4d27946a33b0de661
Validity
Not Before: Jan 1 13:54:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fc7f3a4296fcdfdd64488facb1817bdd4620c13a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:c1:f1:9f:eb:cd:47:f3:08:f8:3a:c1:c9:86:
01:b1:ed:11:8e:34:f5:cb:64:1a:59:72:d6:0e:02:
d3:0e:2b:e4:df:09:06:dc:0e:fb:d0:87:47:0e:4d:
bb:f3:c5:67:7a:d1:ca:d3:57:79:a8:e1:d4:80:d9:
1f:e2:11:29:05:14:f0:61:35:18:e4:cf:9b:5d:f9:
0b:4f:0b:6c:98:01:00:ab:8d:f3:88:df:84:1c:34:
6a:b2:b5:27:f8:71:09:17:67:6a:01:72:fb:8c:d5:
ed:ae:3e:45:0f:a4:cc:c6:43:e8:c6:fb:cb:58:bc:
82:a3:39:d0:88:c1:ee:bd:b7:c3:9f:f5:cb:ba:35:
81:19:41:12:9d:f5:12:a2:77:f4:a2:b4:95:e1:cc:
97:ac:8d:ac:ec:10:80:e6:67:2f:f9:f9:77:d2:d9:
42:97:88:64:6a:b7:b6:77:1c:cb:bc:11:f1:92:16:
2c:b5:b9:3f:b3:3e:6c:60:41:34:98:f1:fb:2a:a7:
0a:fb:10:23:78:6e:76:c3:5d:46:1c:a3:a1:a6:30:
f1:54:72:7d:de:17:c6:31:27:ae:12:c4:76:31:97:
f0:2e:a6:5b:13:b1:78:02:25:c4:b8:02:3a:d9:3f:
11:4b:d0:b8:4e:45:1a:0c:8e:97:b5:63:7b:51:2d:
a9:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:7F:3A:42:96:FC:DF:DD:64:48:8F:AC:B1:81:7B:DD:46:20:C1:3A
X509v3 Authority Key Identifier:
keyid:10:45:DA:CC:83:77:98:C3:E6:CF:31:F4:D2:79:46:A3:3B:0D:E6:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EEXazIN3mMPmzzH00nlGozsN5mE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/_H86Qpb8391kSI-ssYF73UYgwTo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/EEXazIN3mMPmzzH00nlGozsN5mE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.179.95.0/24
Signature Algorithm: sha256WithRSAEncryption
95:dc:97:6f:37:56:db:d0:f4:c1:09:a5:11:16:bd:cf:6f:d0:
82:ec:cd:ef:3e:50:fb:81:e2:55:92:46:6b:0c:29:13:bf:48:
d6:31:d5:45:01:2d:5c:1f:64:91:16:ef:5d:d1:c8:7a:c0:00:
e8:ff:6e:d6:7c:8e:56:26:52:98:4f:d2:6d:5a:22:5d:f0:9c:
36:69:2d:25:d5:53:7d:92:5d:98:dd:d1:84:44:22:5a:8f:08:
76:dc:11:c0:44:f3:35:92:be:54:9b:21:7f:c9:f8:87:32:14:
80:1f:7b:cc:a6:51:ee:ea:b7:49:8e:0a:00:cc:71:33:f3:52:
db:42:8c:d5:b0:33:9a:35:54:ff:34:15:e4:13:af:21:5b:09:
a4:c9:0e:ae:c1:a8:04:2e:61:fb:d6:bb:0d:0e:90:14:c8:62:
5d:9c:92:af:bb:fa:1b:73:5d:16:26:e5:39:28:8c:dd:04:a5:
83:fc:e9:67:41:30:25:9e:b7:21:01:fe:dc:b8:d2:1a:4a:3b:
fe:fa:28:6e:ac:7c:46:73:3c:e1:67:b6:f6:fe:9b:aa:f3:2f:
10:64:70:59:b1:55:bf:bc:90:b9:0e:8b:e7:99:1e:39:9d:e9:
b5:28:c6:6f:9d:5c:fe:f7:0a:15:95:15:08:2a:8b:53:1e:7c:
c3:90:fe:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:13 2023 by rpki-client on console-ams.rpki-client.org