Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/uXz-rOrvt151odGcwL0OkA7Q34g.roa
File: uXz-rOrvt151odGcwL0OkA7Q34g.roa (raw, json)
Hash identifier: Y7/foYi1nu1amWNEYUoh466jCClgXKcHC84L/amGKSw=
Subject key identifier: B9:7C:FE:AC:EA:EF:B7:5E:75:A1:D1:9C:C0:BD:0E:90:0E:D0:DF:88
Certificate issuer: /CN=1045dacc837798c3e6cf31f4d27946a33b0de661
Certificate serial: 29F684C5
Authority key identifier: 10:45:DA:CC:83:77:98:C3:E6:CF:31:F4:D2:79:46:A3:3B:0D:E6:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EEXazIN3mMPmzzH00nlGozsN5mE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/uXz-rOrvt151odGcwL0OkA7Q34g.roa
Signing time: Sat 01 Jan 2022 13:54:29 +0000
ROA not before: Sat 01 Jan 2022 13:54:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206424
IP address blocks: 95.85.83.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 704021701 (0x29f684c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1045dacc837798c3e6cf31f4d27946a33b0de661
Validity
Not Before: Jan 1 13:54:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b97cfeaceaefb75e75a1d19cc0bd0e900ed0df88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:dd:90:76:a7:f8:a8:4e:47:41:35:50:fe:ea:
6c:6d:cb:66:c9:1b:18:8e:47:82:f0:c0:37:9b:37:
77:79:a7:0a:68:39:25:8e:21:36:b4:c9:12:f5:1e:
1d:fc:1d:9a:ad:bd:c7:de:ef:f0:1e:ea:fb:8b:02:
ff:20:4a:f1:05:21:7c:8c:37:be:e3:77:2f:d2:cf:
6c:4b:96:82:83:4b:69:ae:86:e4:13:b8:01:ac:74:
c1:c1:87:ac:65:de:6b:04:a3:c8:d1:5e:ad:be:a0:
86:8e:d4:74:b9:7b:67:d0:4d:e0:8e:27:e0:f9:c0:
12:a4:43:09:6d:2b:70:3a:0c:4a:ee:c2:0a:56:d9:
08:fd:62:12:9f:a9:9c:c8:c0:dc:d9:39:04:87:b8:
85:bb:57:b4:e9:73:f5:1b:b7:e9:27:86:0c:81:40:
a9:45:ee:90:54:da:97:56:38:44:2f:e3:95:c1:85:
aa:0a:03:9c:d5:7d:e8:1f:76:de:48:86:e4:13:71:
ca:7f:b3:b3:01:b1:65:94:59:27:20:c9:00:35:39:
d4:d4:b8:7c:18:d2:f9:6d:68:80:c9:45:b4:1c:72:
e6:c9:d6:e9:f1:a5:7a:2c:b5:9a:c7:92:16:11:ac:
b9:3b:19:e6:52:44:cb:8e:d8:13:9f:12:53:13:6e:
dc:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:7C:FE:AC:EA:EF:B7:5E:75:A1:D1:9C:C0:BD:0E:90:0E:D0:DF:88
X509v3 Authority Key Identifier:
keyid:10:45:DA:CC:83:77:98:C3:E6:CF:31:F4:D2:79:46:A3:3B:0D:E6:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EEXazIN3mMPmzzH00nlGozsN5mE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/uXz-rOrvt151odGcwL0OkA7Q34g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/EEXazIN3mMPmzzH00nlGozsN5mE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.85.83.0/24
Signature Algorithm: sha256WithRSAEncryption
dd:3f:3a:df:76:a1:0a:40:82:bd:db:e8:02:9d:9c:47:ff:56:
b3:71:fe:e0:74:74:80:1f:18:4a:81:b6:25:2b:21:af:c6:c7:
2e:7c:93:5f:08:2b:fc:2b:58:8e:ab:e9:0a:cd:a0:3a:08:f3:
a5:50:8b:00:d4:a8:44:d9:b3:d9:d0:b8:fb:09:76:05:60:9c:
4e:cd:ab:de:f0:7f:e9:24:0b:b3:f5:cd:22:8d:c3:dc:92:c6:
b8:9c:78:91:f4:3f:e1:34:2d:09:3c:32:bc:84:09:c0:25:f5:
ee:4a:ff:78:3b:20:84:32:64:98:30:6b:aa:89:2d:87:93:3a:
d0:70:c5:e5:c9:88:b1:05:43:61:4c:d8:ce:ed:21:79:f7:74:
94:1b:9e:ea:2f:36:22:aa:f5:50:58:00:de:01:9c:6d:99:7e:
21:40:32:fa:5d:aa:23:6b:30:75:ac:b3:5d:b9:25:ef:4d:e6:
bc:ce:23:f9:0c:ee:db:fa:16:13:57:b2:e2:e2:16:7d:84:d7:
77:df:6c:ea:58:19:2e:e5:3d:64:69:ea:54:b9:8b:b7:f4:00:
fd:9e:36:2b:64:06:43:83:a9:b4:73:c0:53:49:24:30:9c:62:
79:32:e5:8e:fb:29:67:14:7f:5a:c5:f6:67:50:99:dd:bd:25:
7f:ba:ac:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:13 2023 by rpki-client on console-ams.rpki-client.org