Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/b4MMybhPTYFqEkxY-PAkliA7R7g.roa
File: b4MMybhPTYFqEkxY-PAkliA7R7g.roa (raw, json)
Hash identifier: sz6aMYpNOq+rPa4sjjrmiLXMCr0mZK+pyma8SL2NfXY=
Subject key identifier: 6F:83:0C:C9:B8:4F:4D:81:6A:12:4C:58:F8:F0:24:96:20:3B:47:B8
Certificate issuer: /CN=1045dacc837798c3e6cf31f4d27946a33b0de661
Certificate serial: 29E597AA
Authority key identifier: 10:45:DA:CC:83:77:98:C3:E6:CF:31:F4:D2:79:46:A3:3B:0D:E6:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EEXazIN3mMPmzzH00nlGozsN5mE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/b4MMybhPTYFqEkxY-PAkliA7R7g.roa
Signing time: Sat 01 Jan 2022 13:54:19 +0000
ROA not before: Sat 01 Jan 2022 13:54:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25436
IP address blocks: 188.68.7.0/24 maxlen: 24
95.85.82.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 702912426 (0x29e597aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1045dacc837798c3e6cf31f4d27946a33b0de661
Validity
Not Before: Jan 1 13:54:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6f830cc9b84f4d816a124c58f8f02496203b47b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8a:c7:95:da:d2:01:e0:7d:9d:e4:ba:7f:d6:
77:73:0c:9a:a3:f7:95:f0:e4:d6:11:b4:29:54:97:
26:35:58:67:ec:77:59:d5:d4:bf:d2:3a:6b:fa:4e:
84:d9:67:ff:fb:23:28:ce:c2:5b:c2:b3:e0:5e:44:
93:f2:6c:74:f7:29:6b:e8:d8:bd:a1:36:cb:61:66:
8b:71:ba:2d:9c:f7:cd:b8:fb:28:bd:54:d1:0f:db:
c4:e2:c2:0d:cf:78:eb:be:d5:25:e7:3f:8d:62:c4:
43:ed:4a:b9:fb:e5:af:b7:13:d5:ad:08:60:df:23:
10:3d:d2:4f:b3:b6:fe:dc:e7:b9:67:63:ad:f9:30:
e4:98:11:a3:7f:28:57:f9:51:6a:af:a8:31:87:cf:
52:58:2a:63:9f:9f:88:34:73:dc:a2:7b:47:a6:86:
ff:3e:a1:62:96:6d:f3:9a:9b:21:76:24:65:5a:aa:
1f:25:8e:c4:9f:52:d1:52:b3:54:f8:f9:e6:f3:66:
31:f9:1f:75:1e:6b:c4:96:03:9d:f3:d3:99:7d:2b:
1f:b7:48:cd:9b:aa:96:55:e8:41:aa:7f:6f:77:05:
b4:0d:e1:e1:02:c1:0a:2d:b8:80:ab:de:c6:27:b6:
41:be:fb:58:69:e5:86:4f:c8:f9:65:35:85:c3:5c:
a6:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:83:0C:C9:B8:4F:4D:81:6A:12:4C:58:F8:F0:24:96:20:3B:47:B8
X509v3 Authority Key Identifier:
keyid:10:45:DA:CC:83:77:98:C3:E6:CF:31:F4:D2:79:46:A3:3B:0D:E6:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EEXazIN3mMPmzzH00nlGozsN5mE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/b4MMybhPTYFqEkxY-PAkliA7R7g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/EEXazIN3mMPmzzH00nlGozsN5mE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.85.82.0/24
188.68.7.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:22:01:df:f4:2b:fa:0f:85:0e:54:87:f1:6b:d7:aa:eb:1a:
6c:c2:9a:4c:1e:7e:a1:28:ef:07:9a:d0:a0:1c:6b:93:22:d4:
e2:4b:f2:18:01:23:d3:c0:73:23:c8:22:cf:23:82:76:35:3e:
78:82:e1:30:20:fc:11:dc:08:a4:57:c4:48:0b:63:59:03:0e:
2f:07:6a:64:ec:7a:53:7b:6a:70:3f:cc:70:43:f5:64:9d:06:
74:d0:f0:6c:0c:05:8a:d9:27:57:c5:3a:a3:fa:d4:2e:71:cd:
f0:34:49:4f:63:7d:f2:b8:fd:88:b6:d6:7d:ce:f5:21:62:15:
3d:96:dd:ca:dc:cd:8c:48:29:64:14:c2:1d:3b:fa:b0:59:d2:
90:68:5f:ae:c0:06:79:e0:25:c5:23:19:9c:bb:08:16:d7:cb:
e6:d7:50:03:5b:9c:fb:91:8b:cf:2a:d4:e5:8c:e4:2c:84:a2:
0b:19:aa:83:8c:db:f0:45:3b:64:bd:ee:c2:9c:c4:6f:19:a2:
4f:8a:7e:1d:62:31:a6:45:d4:d6:67:44:9f:35:5b:8f:7a:06:
b1:08:35:35:0c:e2:c2:3e:45:e7:ca:85:8c:52:d5:b8:2c:e4:
7c:3d:5e:29:e4:c8:94:a5:f8:0c:50:a0:2c:83:e1:43:43:88:
48:59:5b:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:19 2023 by rpki-client on console-fra.rpki-client.org