Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/rdq7XFYrG0YhRGqdavQAAMHQteU.roa
File: rdq7XFYrG0YhRGqdavQAAMHQteU.roa (raw, json)
Hash identifier: rFWTQyrjWoGvZRIL3YdeRuFE3+e9VMJ/3eVYjMDnuEU=
Subject key identifier: AD:DA:BB:5C:56:2B:1B:46:21:44:6A:9D:6A:F4:00:00:C1:D0:B5:E5
Certificate issuer: /CN=da00e981953061972c896bd6d27738d083aadb0e
Certificate serial: 03F13AEB
Authority key identifier: DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/rdq7XFYrG0YhRGqdavQAAMHQteU.roa
Signing time: Tue 10 May 2022 06:50:40 +0000
ROA not before: Tue 10 May 2022 06:50:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7029
IP address blocks: 85.204.148.0/22 maxlen: 24
86.105.104.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66140907 (0x3f13aeb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da00e981953061972c896bd6d27738d083aadb0e
Validity
Not Before: May 10 06:50:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=addabb5c562b1b4621446a9d6af40000c1d0b5e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:cc:a2:4e:e6:ab:30:39:d7:e1:57:e4:43:63:
01:1e:da:9b:f5:3b:04:4e:bb:fd:16:01:71:ed:7d:
69:ac:b1:0d:1b:47:87:0c:8b:85:ad:9e:d6:14:bd:
e3:92:06:c6:f9:89:32:1e:c8:7c:eb:32:31:a6:9f:
1c:1a:1c:71:ec:3b:df:c9:fb:35:dd:c2:17:d1:61:
b3:8c:e2:87:5a:fe:1d:ff:96:b1:c6:82:c6:ef:26:
6f:dc:af:10:2e:50:14:c9:cb:ba:c0:32:1d:51:4a:
23:fe:b1:19:0e:59:5a:ec:ff:33:9a:76:4d:0b:a9:
9a:01:20:31:d3:6f:a5:dc:65:ee:de:3f:f0:c2:d1:
3e:24:5b:94:9c:e0:76:1d:5d:2b:93:ae:ea:87:f3:
10:81:ac:80:c0:9d:49:b0:07:3e:ba:30:58:fa:f4:
b2:9b:71:08:50:52:91:35:c4:89:94:e0:3b:10:fc:
a3:19:d8:43:c5:c0:b5:bc:b1:d0:be:23:92:57:0a:
11:2e:4d:e2:cb:7b:d6:38:86:70:0f:8d:15:17:25:
e7:97:5c:21:93:45:90:f5:ef:34:a3:9c:06:34:a2:
84:3d:f6:48:3d:ab:d0:b2:01:9f:87:dd:af:cb:d2:
4e:2a:4a:5f:82:d6:3e:40:93:fb:d4:36:36:06:bb:
32:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:DA:BB:5C:56:2B:1B:46:21:44:6A:9D:6A:F4:00:00:C1:D0:B5:E5
X509v3 Authority Key Identifier:
keyid:DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/rdq7XFYrG0YhRGqdavQAAMHQteU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.148.0/22
86.105.104.0/22
Signature Algorithm: sha256WithRSAEncryption
6a:9a:02:6b:8a:ca:26:50:ed:c0:c4:7c:df:dd:d2:d6:76:3f:
37:17:ac:ec:52:fe:f4:82:db:50:3a:ad:b2:2a:6c:95:0f:42:
d6:7b:f3:6d:81:65:05:28:4a:c6:70:72:fb:2f:3d:f8:52:f6:
2a:55:f5:d3:1b:79:7e:f7:03:3d:63:f1:37:07:02:86:c7:05:
4e:ac:59:7b:98:c9:50:b9:89:d1:d0:8a:ce:70:bf:25:b9:cb:
52:48:8e:c8:57:31:33:72:0e:01:08:31:61:9b:96:f0:31:1d:
db:54:eb:84:e4:2a:0a:c4:ca:f9:92:14:bf:09:90:91:4d:49:
f6:74:0c:ed:1f:9e:bf:61:b5:c2:30:4c:99:1a:0c:b0:e5:b5:
ed:8b:cd:db:15:19:e0:21:8a:1a:f6:84:fa:98:c7:9a:a6:e3:
98:a7:bd:56:7c:bd:02:30:11:a7:bf:e6:c9:23:87:15:53:c2:
22:eb:ea:63:c2:d7:4f:80:68:1b:77:f0:8b:03:6e:e9:17:e4:
cd:8c:df:f3:40:88:d0:93:1b:e3:c1:fd:d8:86:7f:ac:30:31:
c7:b8:44:d6:5d:86:98:fd:7a:c8:f0:45:4f:10:57:f6:8e:02:
6b:1e:0e:37:30:d4:7a:5b:a1:74:e6:7d:6e:9c:06:9d:70:56:
a6:c5:0c:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:49 2024 by rpki-client on console-ams.rpki-client.org