Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/d5c042-5b4d-4b10-bc76-42eaabbfbfd2/1/Ja6rG10n391EuAqiQdxfKBq0rZU.roa
File: Ja6rG10n391EuAqiQdxfKBq0rZU.roa (raw, json)
Hash identifier: FQf4bJVJ9xtrSVwhhfGR4A670TsWaRWwKTUXn67tRKU=
Subject key identifier: 25:AE:AB:1B:5D:27:DF:DD:44:B8:0A:A2:41:DC:5F:28:1A:B4:AD:95
Certificate issuer: /CN=16f9f928b0ac67731991f374b8e194eb6542ac24
Certificate serial: 0183D567DA224B422C3A91232E7BAA5909DC
Authority key identifier: 16:F9:F9:28:B0:AC:67:73:19:91:F3:74:B8:E1:94:EB:65:42:AC:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fvn5KLCsZ3MZkfN0uOGU62VCrCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/d5c042-5b4d-4b10-bc76-42eaabbfbfd2/1/Ja6rG10n391EuAqiQdxfKBq0rZU.roa
Signing time: Fri 14 Oct 2022 07:31:36 +0000
ROA not before: Fri 14 Oct 2022 07:31:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209053
IP address blocks: 45.8.232.0/22 maxlen: 22
45.8.232.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:d5:67:da:22:4b:42:2c:3a:91:23:2e:7b:aa:59:09:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16f9f928b0ac67731991f374b8e194eb6542ac24
Validity
Not Before: Oct 14 07:31:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=25aeab1b5d27dfdd44b80aa241dc5f281ab4ad95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:eb:43:e9:1a:98:6c:1f:46:2a:fa:9d:d7:45:
e8:15:d0:00:68:d9:3c:d3:c2:73:53:39:ce:71:a7:
28:f6:87:f6:27:bc:4d:3a:61:78:a1:1d:00:94:8f:
61:61:08:4c:29:0b:ff:d1:1e:94:b6:0f:70:de:06:
a9:df:5a:6a:6b:f5:4c:c9:fa:ea:f4:8c:15:0e:d0:
01:57:93:fb:ea:2d:92:68:1a:3b:e2:5a:24:65:80:
dd:d0:70:b2:ea:96:23:0c:5c:9d:b9:45:72:05:9e:
a7:35:d5:d0:4a:39:4c:23:a2:bf:71:94:2a:c2:16:
e7:40:6f:43:5e:c6:2a:df:fb:49:e7:19:de:92:41:
63:37:90:b4:0f:38:59:25:47:c1:29:f5:47:4c:fc:
c7:ed:5f:67:d2:6b:1e:63:bb:23:46:f4:08:15:2d:
35:0e:5a:3d:66:4e:6d:11:41:89:da:d5:12:32:24:
dd:b5:21:9b:14:65:03:41:c5:8e:0b:08:46:23:86:
11:8c:4a:8a:9a:75:5c:36:fa:69:48:0f:27:2c:7b:
5b:dd:47:e6:7d:5b:97:11:33:b1:5a:6b:7a:1b:07:
36:cb:68:95:5e:ba:ea:54:4a:5f:9e:9e:48:f3:18:
3b:75:69:ba:01:9a:7f:54:0e:1a:fe:9c:6d:65:fb:
84:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:AE:AB:1B:5D:27:DF:DD:44:B8:0A:A2:41:DC:5F:28:1A:B4:AD:95
X509v3 Authority Key Identifier:
keyid:16:F9:F9:28:B0:AC:67:73:19:91:F3:74:B8:E1:94:EB:65:42:AC:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fvn5KLCsZ3MZkfN0uOGU62VCrCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d5c042-5b4d-4b10-bc76-42eaabbfbfd2/1/Ja6rG10n391EuAqiQdxfKBq0rZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d5c042-5b4d-4b10-bc76-42eaabbfbfd2/1/Fvn5KLCsZ3MZkfN0uOGU62VCrCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.232.0/22
Signature Algorithm: sha256WithRSAEncryption
b8:ce:ea:68:17:77:82:37:2c:d9:ec:28:8a:a1:fb:68:ed:8f:
7f:fe:1d:40:23:5f:7a:48:7e:2c:6b:36:39:50:31:6a:67:cc:
fd:44:88:e5:93:1f:0c:f8:2d:25:fd:b7:56:02:60:74:fe:c0:
d6:24:d8:c0:fa:2e:92:33:66:80:2f:53:b6:7c:58:1b:67:c3:
7a:97:48:56:78:f9:e0:ec:12:ed:4b:44:c6:bf:73:99:1f:ef:
6b:2b:3f:2a:ac:cd:e9:f5:b6:0c:7b:68:4b:31:49:fe:e7:22:
76:e3:dd:87:d4:34:51:0d:3d:53:17:dd:48:9a:ea:90:db:da:
ae:c3:15:49:7f:39:20:3a:56:ae:ff:e8:40:74:c1:2e:be:50:
59:04:cf:60:72:f9:1f:62:72:91:5e:98:85:0b:f5:19:ea:e6:
8e:04:a0:86:85:49:30:8f:c1:ea:1f:88:b8:f8:e7:61:0d:5d:
c9:da:dc:bb:0e:cb:99:a2:92:b1:d9:9a:14:ac:52:24:4c:72:
b8:22:b2:bd:34:ed:bc:ea:d9:6c:ad:cc:51:e8:54:ba:8b:52:
98:20:c5:73:10:cc:2b:6e:de:0c:4b:7b:ee:ea:93:f4:63:75:
2d:76:d0:ed:c2:94:d1:75:79:eb:12:14:bf:12:55:26:40:21:
90:59:38:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:49 2023 by rpki-client on console-ams.rpki-client.org