Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/hkSZAmY7KwCrobeHrltW45GWom0.roa
File: hkSZAmY7KwCrobeHrltW45GWom0.roa (raw, json)
Hash identifier: uSlpZ281cYn8a5d2cjDhaEq3mDamB1cX5okXmCfI15s=
Subject key identifier: 86:44:99:02:66:3B:2B:00:AB:A1:B7:87:AE:5B:56:E3:91:96:A2:6D
Certificate issuer: /CN=4fb2bb7bad50f1921810a028e78edd65f81f6a7d
Certificate serial: 079D7825
Authority key identifier: 4F:B2:BB:7B:AD:50:F1:92:18:10:A0:28:E7:8E:DD:65:F8:1F:6A:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/hkSZAmY7KwCrobeHrltW45GWom0.roa
Signing time: Sat 01 Jan 2022 09:03:05 +0000
ROA not before: Sat 01 Jan 2022 09:03:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9009
IP address blocks: 185.141.119.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 127760421 (0x79d7825)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fb2bb7bad50f1921810a028e78edd65f81f6a7d
Validity
Not Before: Jan 1 09:03:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=86449902663b2b00aba1b787ae5b56e39196a26d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c3:87:be:33:25:48:ee:3c:64:f1:d6:7e:f5:
7d:b7:b9:81:20:ad:cf:62:ef:29:6d:17:49:6e:69:
ef:5a:5c:e1:14:f7:b0:9a:be:8e:78:66:bf:9d:b9:
5a:6d:50:02:e0:d9:0d:62:46:13:a5:7e:17:cf:86:
fa:4b:e3:ec:aa:71:07:0e:0b:d1:bc:fa:5a:8c:08:
81:e5:d7:b5:4a:e6:3b:a5:34:20:e5:cf:c8:4e:cf:
18:b1:fe:3a:31:06:91:9a:58:fd:9f:76:8a:c7:09:
63:27:58:d5:78:92:2e:bc:64:69:26:d2:b0:72:87:
9c:0a:7d:a6:83:1f:df:74:8c:d8:cb:f5:f5:29:54:
eb:ae:51:14:48:1f:01:c2:94:9f:c8:f4:72:c3:5a:
9f:6a:ce:e0:34:e6:ae:b9:b2:f8:ce:55:6b:4f:c8:
2c:02:45:24:3c:58:af:55:fb:1e:84:7a:d9:0c:c1:
12:a3:ab:d9:d5:62:7d:75:32:08:09:cc:e9:83:35:
ab:c5:91:33:34:5a:ac:28:77:ca:32:74:96:65:d8:
04:2b:9e:52:fb:86:7e:05:d3:ad:0d:81:d0:01:9a:
55:c1:5e:8e:1d:1a:99:89:4c:9c:e1:23:18:da:cd:
af:83:be:17:16:cb:ac:d8:01:0b:e7:fb:64:77:65:
74:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:44:99:02:66:3B:2B:00:AB:A1:B7:87:AE:5B:56:E3:91:96:A2:6D
X509v3 Authority Key Identifier:
keyid:4F:B2:BB:7B:AD:50:F1:92:18:10:A0:28:E7:8E:DD:65:F8:1F:6A:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/hkSZAmY7KwCrobeHrltW45GWom0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.141.119.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:cf:fe:a1:61:7f:9a:5a:bf:fd:d1:de:f0:bf:0d:95:19:88:
4a:57:fd:b8:ab:5c:6e:c8:77:13:eb:1e:64:e8:df:c2:fa:10:
f5:9b:36:85:8e:ad:56:12:d8:60:1b:7e:f5:4a:55:67:35:b2:
07:cc:45:d8:66:16:88:02:02:6d:6e:15:4c:43:3b:05:1a:4f:
05:5b:cd:48:0e:94:12:24:10:05:46:44:dc:68:95:fd:66:7c:
1f:af:85:6a:26:99:97:ee:5b:b5:4d:e0:9b:cc:19:04:be:0c:
03:1d:64:2c:93:33:41:7b:57:f6:4e:ab:da:e0:56:07:9d:97:
e8:f9:c4:9e:b2:98:13:90:93:4d:e6:39:8e:63:32:89:e7:46:
37:18:87:49:e7:6c:5f:39:59:33:5e:b7:d5:a5:6d:4e:6c:5b:
be:cd:63:09:1e:fa:0c:73:b9:2a:d3:3c:ce:77:1f:11:f8:f4:
ea:04:4e:0c:62:e3:8f:5c:cc:86:fc:41:a7:59:95:a6:3d:37:
fa:8f:bb:5e:24:4b:6c:15:c0:cd:65:d2:04:02:66:ef:d7:21:
9c:23:0b:d2:71:c6:02:e2:91:c6:99:0a:7b:3c:cd:62:97:05:
3b:47:21:e0:ec:7f:59:0b:28:5b:66:4b:92:e2:65:ef:1b:25:
96:39:79:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:31 2024 by rpki-client on console-ams.rpki-client.org