Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/u_CYzaJS7ego_r_8tRiLmi19pkA.roa
File: u_CYzaJS7ego_r_8tRiLmi19pkA.roa (raw, json)
Hash identifier: EExCdA/NNl6aaBN2C9lCz63GsN61u9oBV3A3C7uaCdk=
Subject key identifier: BB:F0:98:CD:A2:52:ED:E8:28:FE:BF:FC:B5:18:8B:9A:2D:7D:A6:40
Certificate issuer: /CN=e180ebbbca0f890de353891421a83dd5b653d940
Certificate serial: 16B3E165
Authority key identifier: E1:80:EB:BB:CA:0F:89:0D:E3:53:89:14:21:A8:3D:D5:B6:53:D9:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4YDru8oPiQ3jU4kUIag91bZT2UA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/u_CYzaJS7ego_r_8tRiLmi19pkA.roa
Signing time: Sat 19 Mar 2022 20:28:45 +0000
ROA not before: Sat 19 Mar 2022 20:28:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 194.67.69.0/24 maxlen: 24
194.67.70.0/24 maxlen: 24
194.67.80.0/23 maxlen: 23
194.67.82.0/23 maxlen: 23
194.67.95.0/24 maxlen: 24
185.182.108.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 380887397 (0x16b3e165)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e180ebbbca0f890de353891421a83dd5b653d940
Validity
Not Before: Mar 19 20:28:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bbf098cda252ede828febffcb5188b9a2d7da640
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:75:b8:f5:db:cd:50:94:b1:2d:93:f3:0e:cc:
b0:d3:84:94:1d:90:1b:d1:b3:26:38:8e:e8:db:9b:
92:c5:28:7f:2a:1e:1c:bf:25:21:cf:29:e9:0c:89:
34:d6:8b:0e:db:46:63:53:01:71:58:02:1e:68:af:
13:0a:77:b4:89:7f:c3:73:ab:07:c5:83:ae:f4:f6:
02:3c:fa:15:8f:3f:31:46:ca:31:58:d4:4d:9e:9b:
5e:0e:76:45:98:9a:cf:9c:6c:b0:6e:66:f2:23:e9:
66:3e:95:58:b4:1b:5f:70:e6:ce:d8:b9:8d:be:98:
b1:d0:ab:04:d5:d5:c5:e9:5b:10:7a:fd:a2:9a:09:
fa:85:8f:9b:e4:96:44:8b:7b:f7:7a:5c:c1:de:04:
13:ae:72:f6:ce:0c:5f:fd:9e:92:a4:ae:c1:ae:35:
8c:ec:d1:2c:c3:33:91:1b:e7:26:71:9a:01:4d:af:
66:0f:27:45:b1:ba:d1:36:c1:0a:fc:96:39:6b:41:
dd:c9:56:49:e7:f7:bf:3b:5c:84:bc:1f:c6:74:39:
b6:05:71:bb:35:15:d0:e0:9d:0f:e6:ae:96:5b:be:
cc:80:93:1a:4b:37:fc:30:6c:03:97:57:3d:f0:47:
58:40:8c:2c:22:08:94:2b:89:16:c8:2f:ee:1e:0d:
72:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:F0:98:CD:A2:52:ED:E8:28:FE:BF:FC:B5:18:8B:9A:2D:7D:A6:40
X509v3 Authority Key Identifier:
keyid:E1:80:EB:BB:CA:0F:89:0D:E3:53:89:14:21:A8:3D:D5:B6:53:D9:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4YDru8oPiQ3jU4kUIag91bZT2UA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/u_CYzaJS7ego_r_8tRiLmi19pkA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.182.108.0/24
194.67.69.0-194.67.70.255
194.67.80.0/22
194.67.95.0/24
Signature Algorithm: sha256WithRSAEncryption
94:9b:cb:7d:97:ff:47:b2:fe:2b:3d:5c:a7:48:d6:6a:33:55:
e9:a3:53:c7:25:bf:45:b7:8a:f6:81:18:5a:fa:cd:4e:2d:80:
51:c5:ba:e6:c1:9d:20:27:a3:c5:bf:a9:99:5c:92:9d:da:3b:
5d:d8:cc:63:21:d6:0a:72:b3:25:e4:ef:cf:fa:7e:50:ac:3a:
e9:70:c5:7d:7a:33:d2:13:0c:81:7a:82:f3:f6:69:6a:f5:99:
cc:17:bc:c1:72:c1:a1:12:31:e8:85:e7:27:7b:c7:b8:fd:27:
91:e2:d4:e9:4c:74:ab:2d:16:af:26:bf:11:83:ff:8a:b4:56:
e6:87:e2:02:d8:6a:47:82:7d:ae:b5:4e:36:77:c7:72:79:44:
0f:73:42:4c:b9:83:99:9f:5b:d4:e4:65:d0:3d:0d:e1:b9:2d:
aa:4f:bd:28:ff:a1:6d:6f:39:40:f0:61:28:56:b7:ea:a4:42:
6e:53:dd:41:8f:9c:40:a0:28:c0:27:3c:43:47:64:04:fb:a6:
70:c4:47:9a:60:a6:0b:71:35:c5:44:4b:56:d1:ff:a7:b5:89:
77:ae:bb:7d:a2:c0:9c:be:58:2e:88:c2:a2:e2:95:5e:9a:35:
2f:5c:f6:a3:e0:a7:86:ab:91:9b:58:c6:87:18:ce:c9:c1:57:
5a:10:9e:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:32 2023 by rpki-client on console-ams.rpki-client.org