Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/b0675b-e3bc-4dfc-bcca-23cd347d9719/1/xKHSuNpOFECsJ9oD7q-6TVIxq8E.roa
File: xKHSuNpOFECsJ9oD7q-6TVIxq8E.roa (raw, json)
Hash identifier: 61+Mg4rUbvHcbhgNvOEbqTNspMYF2Lx+G4k0xbFF/xc=
Subject key identifier: C4:A1:D2:B8:DA:4E:14:40:AC:27:DA:03:EE:AF:BA:4D:52:31:AB:C1
Certificate issuer: /CN=6137b5dbaaba28ae28c8e9a9780fb70c24fc9190
Certificate serial: 018C5EE5DD8377FE0A0787F59D6D55298FCF
Authority key identifier: 61:37:B5:DB:AA:BA:28:AE:28:C8:E9:A9:78:0F:B7:0C:24:FC:91:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YTe126q6KK4oyOmpeA-3DCT8kZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/b0675b-e3bc-4dfc-bcca-23cd347d9719/1/xKHSuNpOFECsJ9oD7q-6TVIxq8E.roa
Signing time: Tue 12 Dec 2023 16:39:31 +0000
ROA not before: Tue 12 Dec 2023 16:39:31 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41161
IP address blocks: 95.215.112.0/21 maxlen: 21
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:5e:e5:dd:83:77:fe:0a:07:87:f5:9d:6d:55:29:8f:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6137b5dbaaba28ae28c8e9a9780fb70c24fc9190
Validity
Not Before: Dec 12 16:39:31 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c4a1d2b8da4e1440ac27da03eeafba4d5231abc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b8:4d:b4:c8:72:e3:3e:c6:03:55:26:a3:f8:
3e:3e:2f:f6:22:84:6d:34:9d:93:dd:05:e1:a4:2c:
ca:d8:85:0f:e4:c4:35:1a:04:9e:c1:48:b4:77:68:
fe:b0:0a:96:4e:d5:bc:c3:ff:c8:a7:e8:2d:06:c5:
8f:bf:f4:c1:5e:12:45:6f:49:3f:24:f3:40:22:fd:
71:12:92:67:4f:78:62:72:73:36:38:bb:8d:65:9b:
ff:97:cc:e9:de:62:89:40:09:a9:5e:13:53:3d:70:
3c:80:02:e9:31:97:d8:c5:83:e7:41:9d:99:a3:bc:
ca:79:de:ec:08:82:aa:4d:8b:23:ec:a6:0b:f1:19:
a8:f2:f9:88:2e:59:4f:e2:04:03:fc:b2:0d:eb:78:
a4:d1:aa:be:bb:63:bd:ae:2e:e4:31:a7:86:4f:92:
fd:b6:8f:bc:b6:36:01:fc:2a:6b:7d:46:3a:49:70:
7a:c0:2c:44:36:3d:d4:b6:d6:77:0a:62:dc:dd:04:
36:e8:83:3a:27:3f:64:d0:21:cd:19:31:9b:5b:19:
32:55:0b:12:87:b4:45:77:8a:46:5b:6c:ef:cf:19:
d6:fa:1b:b1:64:fd:67:32:5d:ca:3b:9b:48:b0:6b:
8f:df:60:ce:93:f3:ef:83:7f:84:94:54:ff:e8:f4:
b9:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:A1:D2:B8:DA:4E:14:40:AC:27:DA:03:EE:AF:BA:4D:52:31:AB:C1
X509v3 Authority Key Identifier:
keyid:61:37:B5:DB:AA:BA:28:AE:28:C8:E9:A9:78:0F:B7:0C:24:FC:91:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTe126q6KK4oyOmpeA-3DCT8kZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b0675b-e3bc-4dfc-bcca-23cd347d9719/1/xKHSuNpOFECsJ9oD7q-6TVIxq8E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b0675b-e3bc-4dfc-bcca-23cd347d9719/1/YTe126q6KK4oyOmpeA-3DCT8kZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.215.112.0/21
Signature Algorithm: sha256WithRSAEncryption
7e:3d:af:4d:f9:c4:ff:81:d8:a1:14:ba:49:ce:1b:70:8a:c7:
35:ad:87:42:84:c5:01:77:9d:45:17:2d:fe:57:79:49:09:29:
cd:54:8c:3f:fe:26:27:14:19:c4:ab:60:9d:6f:be:84:72:8d:
ae:35:57:be:56:73:62:37:37:7b:35:7e:13:55:0a:48:3a:e0:
5a:77:10:f0:ec:91:ac:e1:41:da:ff:64:3f:05:7e:73:4a:38:
9e:57:a9:eb:8a:77:da:99:3c:8a:60:14:84:9d:13:55:be:41:
2f:cb:81:6d:1c:0f:20:20:51:36:ed:87:6f:15:25:80:b6:05:
9c:68:7d:99:64:44:0c:9f:a8:63:5d:61:2a:f6:68:d2:c1:5e:
49:6e:a2:14:19:80:01:58:ba:86:1e:69:ae:0d:95:19:3d:cf:
87:8a:4b:86:63:51:e8:ea:6c:7d:cb:03:c6:79:66:33:26:57:
ff:d1:3e:41:e7:e8:e7:83:76:9f:0e:0e:c8:52:59:ae:21:27:
bb:bd:75:d3:1a:c0:18:90:46:dd:ea:d2:1f:2f:49:47:08:df:
11:8b:d9:46:e8:2e:71:88:18:44:d3:6c:cf:90:bf:9b:31:7f:
6b:ca:a8:0e:17:d8:c3:f3:5f:4d:4e:80:a6:6f:14:8c:f9:45:
1a:04:ea:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:58 2024 by rpki-client on console-ams.rpki-client.org