Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/cXJLuaYiCAL4zW2r9oHPcApR7bg.roa
File: cXJLuaYiCAL4zW2r9oHPcApR7bg.roa (raw, json)
Hash identifier: 15HoM53aHQOXpHrJH/Qa5plqMbhgpwJY4RUQHhKkahw=
Subject key identifier: 71:72:4B:B9:A6:22:08:02:F8:CD:6D:AB:F6:81:CF:70:0A:51:ED:B8
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 0185727A39A6D6C6095E406B31A2DD299AE6
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/cXJLuaYiCAL4zW2r9oHPcApR7bg.roa
Signing time: Mon 02 Jan 2023 12:34:50 +0000
ROA not before: Mon 02 Jan 2023 12:34:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 185.220.236.0/22 maxlen: 24
91.132.59.0/24 maxlen: 24
185.129.108.0/23 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:7a:39:a6:d6:c6:09:5e:40:6b:31:a2:dd:29:9a:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Jan 2 12:34:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=71724bb9a6220802f8cd6dabf681cf700a51edb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:50:aa:01:d4:b7:f7:b1:92:1d:79:f2:26:34:
e1:6a:48:a1:6e:69:22:bb:7b:0f:be:2a:98:14:77:
ed:72:90:92:5d:5d:d5:70:0c:24:5c:4c:47:6b:9e:
7e:b2:c7:c7:9b:89:c9:ae:4f:0a:ef:2b:df:ac:99:
17:3f:89:ed:27:57:60:6f:de:b1:aa:c1:04:ec:9f:
2e:c2:53:df:dd:29:58:6b:f5:83:0b:42:d5:e1:93:
39:65:8a:c9:46:11:13:c6:83:66:4f:66:7c:47:3b:
5e:09:7a:89:e6:31:74:c6:fc:03:17:a8:af:49:f1:
6a:6c:86:71:3b:72:ef:53:b4:53:9a:f1:e9:57:dc:
3a:fd:44:62:6b:ed:dd:82:ed:17:86:09:6d:f9:cb:
df:c0:6e:71:1a:8c:e3:42:52:54:82:58:1f:19:4f:
70:48:f3:09:57:ce:19:a4:ae:16:ad:68:81:bd:ef:
07:c4:e0:a2:d6:09:4d:37:da:da:34:59:4e:8a:ab:
f0:64:a9:84:17:b1:bd:22:f3:ad:62:c8:77:fc:90:
de:0a:c1:d4:f8:9a:e1:93:09:e2:08:7a:5d:0d:bc:
73:3a:85:c6:6b:8d:ee:8e:1e:2c:2f:9f:50:f3:c2:
4d:d3:c6:1a:c7:02:18:58:26:9d:51:5e:11:d0:b4:
49:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:72:4B:B9:A6:22:08:02:F8:CD:6D:AB:F6:81:CF:70:0A:51:ED:B8
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/cXJLuaYiCAL4zW2r9oHPcApR7bg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.132.59.0/24
185.129.108.0/23
185.220.236.0/22
Signature Algorithm: sha256WithRSAEncryption
26:07:79:e9:2e:d3:b7:cb:70:80:17:2c:27:3f:ff:44:77:79:
48:e7:69:81:26:a5:b3:0a:72:32:08:a6:7d:26:60:17:c2:63:
af:91:9a:8a:f7:9e:96:7f:a8:29:01:3a:e9:82:92:d8:ee:01:
ff:18:55:3c:45:67:54:c2:16:c7:cd:21:64:48:f6:c2:53:ea:
dc:35:97:b3:1d:65:09:61:05:0a:7f:b5:b2:58:97:d7:45:a9:
c6:a7:fe:a2:fb:0d:67:f1:9f:43:de:d6:f9:97:39:3e:6d:2d:
26:e4:32:39:a0:6d:37:bb:48:00:55:7a:83:fa:13:34:b3:d5:
e4:70:d7:ed:01:86:8d:4e:c0:44:43:a0:e1:99:7f:e8:f6:54:
7e:ae:f6:59:78:b4:9c:80:67:8a:eb:86:5f:a6:91:d9:2b:f3:
97:a7:7e:43:72:30:9a:eb:1e:a5:ff:e5:71:3f:f2:12:23:c0:
89:5c:67:c6:44:7c:f7:af:5e:f2:e2:55:7a:45:dd:46:32:8c:
5b:97:22:dd:4d:89:24:ed:f9:1f:ff:c0:c4:a4:89:94:8b:f4:
a2:90:53:92:7e:15:21:9a:1a:37:7e:a6:b9:56:87:40:0b:53:
03:8a:c7:6d:59:fb:db:31:a7:96:de:bc:29:b1:f1:d6:63:75:
60:a6:ee:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:16 2024 by rpki-client on console-ams.rpki-client.org