Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/KZK-qTTN3T7DTmNdKRIE9Wvwvro.roa
File: KZK-qTTN3T7DTmNdKRIE9Wvwvro.roa (raw, json)
Hash identifier: hdaaaBEvcyX1qNqDf+ogXGK9z/r4TXIKvQt6197Buc0=
Subject key identifier: 29:92:BE:A9:34:CD:DD:3E:C3:4E:63:5D:29:12:04:F5:6B:F0:BE:BA
Certificate issuer: /CN=0a7327805df20fb5c1d6f4e89074743caeb24af7
Certificate serial: 08F6DE67
Authority key identifier: 0A:73:27:80:5D:F2:0F:B5:C1:D6:F4:E8:90:74:74:3C:AE:B2:4A:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/KZK-qTTN3T7DTmNdKRIE9Wvwvro.roa
Signing time: Wed 16 Feb 2022 11:10:57 +0000
ROA not before: Wed 16 Feb 2022 11:10:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205516
IP address blocks: 193.106.99.0/24 maxlen: 24
45.8.116.0/22 maxlen: 24
2a0e:6600::/29 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 150396519 (0x8f6de67)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a7327805df20fb5c1d6f4e89074743caeb24af7
Validity
Not Before: Feb 16 11:10:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2992bea934cddd3ec34e635d291204f56bf0beba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b5:e4:21:72:6d:94:81:3c:3d:30:68:06:60:
ed:38:99:89:0d:d5:24:4e:f3:b6:44:e6:49:80:9b:
1b:66:9f:64:61:30:34:a6:94:a7:6d:79:f5:e3:94:
12:c0:7b:40:7d:78:40:9e:64:86:17:a4:63:ac:90:
90:ee:88:12:77:1e:ea:d7:20:b7:32:98:37:ed:fc:
21:25:ca:f5:5b:25:b2:2e:fa:6f:2a:88:42:37:9e:
e4:b0:ae:82:63:57:c2:5e:35:66:11:f8:1f:31:8b:
77:fb:db:f5:45:d6:79:97:f2:e8:35:fb:98:28:ff:
de:06:17:cc:16:ae:47:fa:b5:ad:e8:ae:76:77:97:
81:ca:4d:47:40:90:c9:b2:27:9a:e6:8a:55:f2:85:
92:36:7a:71:d5:b5:35:9c:1d:62:9d:23:78:ab:57:
46:49:59:bb:47:9c:e5:3d:09:0e:c1:d7:7f:29:5e:
a4:f8:3b:7f:e7:58:7d:85:73:01:c2:f2:f9:3e:c1:
eb:4a:fa:98:50:84:ed:e2:57:d9:2e:37:69:96:1d:
24:fa:4c:a5:41:d4:61:7c:97:0c:6e:b6:49:3a:0e:
8d:e4:03:bc:3f:ff:51:2b:5c:44:01:8e:80:eb:fd:
32:98:84:45:48:8d:2e:67:f7:8b:9a:19:2c:f9:b3:
26:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:92:BE:A9:34:CD:DD:3E:C3:4E:63:5D:29:12:04:F5:6B:F0:BE:BA
X509v3 Authority Key Identifier:
keyid:0A:73:27:80:5D:F2:0F:B5:C1:D6:F4:E8:90:74:74:3C:AE:B2:4A:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/KZK-qTTN3T7DTmNdKRIE9Wvwvro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.116.0/22
193.106.99.0/24
IPv6:
2a0e:6600::/29
Signature Algorithm: sha256WithRSAEncryption
0f:40:6b:26:0e:cc:42:73:80:cb:ca:82:63:58:d1:c6:b9:89:
99:5b:d8:e9:17:4c:c7:86:b7:b1:47:95:d4:19:c2:55:72:1c:
3b:18:d5:ae:fc:9f:f4:f1:9e:09:c0:f3:c7:f1:86:09:85:55:
df:d7:0b:63:91:05:33:60:34:e3:cf:30:69:10:ec:4f:19:ae:
07:74:ac:3c:86:e2:e3:3c:70:4f:2c:5f:87:44:3e:7e:09:6f:
aa:d6:e6:60:b0:97:37:44:1e:d5:f4:3d:36:ee:28:c3:2c:b6:
78:67:df:2e:5f:af:55:a5:d5:f4:8b:ea:09:21:8a:88:47:45:
ff:24:02:35:6e:1b:41:23:7b:6c:db:ea:90:ea:3a:21:3f:84:
84:8d:c1:ac:f2:1e:29:cd:55:13:d2:cf:f2:44:38:aa:8f:02:
f5:8a:d6:64:ee:fe:6c:7c:99:6f:63:b5:99:38:64:b8:13:f3:
64:a7:21:58:b1:f6:3f:54:92:65:ec:2f:8b:a1:e6:63:77:2a:
de:9e:07:e2:77:16:ca:7c:ee:1d:6a:04:f9:34:b1:36:6a:53:
75:5b:ed:50:8d:eb:1a:aa:20:74:a4:75:2b:d8:bc:36:58:52:
91:74:64:33:8b:34:7b:0b:d6:f7:21:11:91:64:20:9f:99:41:
7a:89:fb:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:15 2024 by rpki-client on console-fra.rpki-client.org