Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/byTf9klXylnYODMuMS6yCYPaayQ.roa
File: byTf9klXylnYODMuMS6yCYPaayQ.roa (raw, json)
Hash identifier: DRbfj4xzk7aSDZhzVbjso7Ui2HTbQ89DXdPdYy4iH1M=
Subject key identifier: 6F:24:DF:F6:49:57:CA:59:D8:38:33:2E:31:2E:B2:09:83:DA:6B:24
Certificate issuer: /CN=1045dacc837798c3e6cf31f4d27946a33b0de661
Certificate serial: 29E81E8F
Authority key identifier: 10:45:DA:CC:83:77:98:C3:E6:CF:31:F4:D2:79:46:A3:3B:0D:E6:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EEXazIN3mMPmzzH00nlGozsN5mE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/byTf9klXylnYODMuMS6yCYPaayQ.roa
Signing time: Sat 01 Jan 2022 13:54:20 +0000
ROA not before: Sat 01 Jan 2022 13:54:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42042
IP address blocks: 188.68.5.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 703078031 (0x29e81e8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1045dacc837798c3e6cf31f4d27946a33b0de661
Validity
Not Before: Jan 1 13:54:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6f24dff64957ca59d838332e312eb20983da6b24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:b1:b0:e5:8c:03:af:64:f8:40:d0:6b:1b:b5:
af:03:ad:a8:10:37:69:2a:a9:d8:10:b2:71:42:7d:
ec:bc:c9:11:ca:7f:4d:8a:fd:79:01:40:a2:d4:b7:
f7:b0:f2:a4:94:ed:f9:81:ec:7f:a2:48:bb:c4:f2:
52:25:da:9a:72:23:d8:37:2c:c7:4e:06:03:40:11:
e0:ee:3c:8e:e5:92:e7:a2:6d:32:db:d1:c0:07:89:
89:79:7a:02:77:4a:6e:6f:1d:11:48:73:4d:d7:5b:
db:f8:40:e9:f5:a3:3c:0e:37:22:96:e0:9c:ac:ed:
b2:fd:6f:38:33:6e:4b:ad:e8:fe:5c:74:78:7f:ed:
53:9e:5b:b7:c0:e0:18:82:0f:16:0c:a6:78:cc:59:
84:fa:8e:9b:f2:93:90:b0:9b:46:cf:81:40:14:90:
c6:e6:71:78:2b:c5:5c:b9:7c:bb:2a:6b:9d:c9:1b:
3f:25:fc:8c:d7:08:dd:1d:4c:80:de:c8:5b:a1:4e:
0e:10:3b:44:99:eb:f0:e0:52:91:97:f4:82:d4:92:
71:61:0f:39:3b:6c:24:50:4b:bb:f9:97:13:0a:ef:
a3:82:27:d5:8d:12:77:3c:2b:2f:b2:a7:38:d6:b2:
f1:e9:d6:e4:d3:44:19:f1:bd:7c:c8:d8:a1:e2:c4:
21:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:24:DF:F6:49:57:CA:59:D8:38:33:2E:31:2E:B2:09:83:DA:6B:24
X509v3 Authority Key Identifier:
keyid:10:45:DA:CC:83:77:98:C3:E6:CF:31:F4:D2:79:46:A3:3B:0D:E6:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EEXazIN3mMPmzzH00nlGozsN5mE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/byTf9klXylnYODMuMS6yCYPaayQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/EEXazIN3mMPmzzH00nlGozsN5mE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.68.5.0/24
Signature Algorithm: sha256WithRSAEncryption
dc:36:00:54:fe:b8:7e:a9:2c:23:91:8e:0c:a2:2a:43:85:39:
31:2b:f0:0f:17:93:88:aa:cb:89:8d:3a:0d:e1:1d:76:48:05:
eb:b7:e5:e7:10:59:25:6d:ce:13:a1:8e:4b:be:95:a3:06:07:
24:6d:e1:d0:9f:51:da:f6:a3:54:06:b7:3b:3e:8a:a9:35:7b:
a5:c1:df:a5:3c:da:e1:86:b0:28:79:79:e9:1f:65:b9:cf:8f:
56:68:cb:66:17:b7:af:be:7a:16:31:e4:b1:76:a3:fe:ba:00:
ef:50:79:06:cd:fe:92:75:68:72:41:b4:eb:d7:75:21:f5:35:
49:b6:88:4c:af:f2:cb:4d:6e:24:cd:5e:d9:1f:55:f8:ee:c8:
31:fd:70:72:eb:3d:8e:a2:fb:06:00:92:6e:42:e1:11:1f:34:
7f:81:55:be:2b:6e:bb:e0:2f:2a:d2:60:d0:b0:06:3a:f3:55:
ea:78:b0:0e:aa:d2:19:6d:fa:db:75:e1:c3:bd:49:c8:a0:fb:
21:f2:e2:69:ec:3a:84:f1:0d:e6:f5:f5:11:ec:da:c0:72:f9:
5e:bf:9a:be:a9:7a:64:25:31:6c:db:d7:7b:17:f9:ac:88:b1:
30:cd:95:f3:96:1f:f5:c6:a1:ef:34:3d:6e:8d:b5:76:dc:de:
8c:00:61:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:19 2023 by rpki-client on console-fra.rpki-client.org