Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/672883-feb4-414f-9d00-4d9127fba3ad/1/HROlt8GNPgEg5JNty0hi6WcGdjE.roa
File: HROlt8GNPgEg5JNty0hi6WcGdjE.roa (raw, json)
Hash identifier: B1HdYyEd4+lSQneaZBtfvOqTU54Ubkr53xq2H9q9iXU=
Subject key identifier: 1D:13:A5:B7:C1:8D:3E:01:20:E4:93:6D:CB:48:62:E9:67:06:76:31
Certificate issuer: /CN=c3abdcc49f7d9033b52904679f3c9b783d8c1358
Certificate serial: 018E3243C2FBA111253916A487ECA4D721A9
Authority key identifier: C3:AB:DC:C4:9F:7D:90:33:B5:29:04:67:9F:3C:9B:78:3D:8C:13:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w6vcxJ99kDO1KQRnnzybeD2ME1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/672883-feb4-414f-9d00-4d9127fba3ad/1/HROlt8GNPgEg5JNty0hi6WcGdjE.roa
Signing time: Tue 12 Mar 2024 10:44:45 +0000
ROA not before: Tue 12 Mar 2024 10:44:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49505
IP address blocks: 84.246.110.0/24 maxlen: 24
91.190.158.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:32:43:c2:fb:a1:11:25:39:16:a4:87:ec:a4:d7:21:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3abdcc49f7d9033b52904679f3c9b783d8c1358
Validity
Not Before: Mar 12 10:44:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1d13a5b7c18d3e0120e4936dcb4862e967067631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:48:e3:68:8e:db:69:27:96:b4:de:01:fe:a1:
1b:8b:f3:5d:5d:8c:9c:43:ba:9b:c3:03:72:fa:92:
24:e7:47:48:8e:a4:cc:11:bc:f2:35:0b:62:b0:24:
11:3d:4e:56:6a:24:3b:c8:d0:1f:f7:e7:31:00:09:
64:af:e6:39:53:de:1f:c0:44:59:10:96:04:b3:65:
f4:36:fa:1f:e3:40:1e:a4:39:cc:50:d1:fe:22:1b:
37:6e:31:a7:a1:e0:bf:6a:a1:ea:c8:56:7d:bb:ac:
cc:36:92:9c:db:35:69:a6:94:95:77:56:e5:ba:cd:
84:d9:28:3f:7a:ac:48:b5:07:5f:66:5d:5e:60:4d:
58:07:0b:66:bf:78:60:f0:3c:bc:94:c0:49:2c:8a:
34:b7:11:7c:b9:85:6f:bc:85:8d:20:23:0e:56:61:
3f:2d:c0:30:16:1c:d0:d5:5d:3d:d8:cc:4f:c8:e8:
19:8f:dc:13:ea:e6:85:3b:0b:4f:98:64:24:f0:ac:
e6:ef:6b:1a:40:0c:21:49:6c:88:16:12:b6:46:42:
91:d4:32:ad:a6:84:66:cc:2b:96:a5:31:d0:d0:1a:
06:da:19:1b:e7:90:cc:2f:99:89:50:8c:6d:47:2f:
51:7d:ec:30:ea:6f:6d:c0:f7:58:6f:40:81:26:8d:
76:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:13:A5:B7:C1:8D:3E:01:20:E4:93:6D:CB:48:62:E9:67:06:76:31
X509v3 Authority Key Identifier:
keyid:C3:AB:DC:C4:9F:7D:90:33:B5:29:04:67:9F:3C:9B:78:3D:8C:13:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w6vcxJ99kDO1KQRnnzybeD2ME1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/672883-feb4-414f-9d00-4d9127fba3ad/1/HROlt8GNPgEg5JNty0hi6WcGdjE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/672883-feb4-414f-9d00-4d9127fba3ad/1/w6vcxJ99kDO1KQRnnzybeD2ME1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.246.110.0/24
91.190.158.0/24
Signature Algorithm: sha256WithRSAEncryption
50:82:8f:2d:09:64:7b:56:ba:b4:0b:45:b0:9f:32:7d:d8:5c:
50:d5:db:3a:92:07:7d:4f:ed:66:e7:23:4b:df:29:ee:d7:29:
e6:5d:c0:7b:2f:34:79:a0:53:bf:38:1a:e3:cc:05:fe:de:a8:
76:19:65:0c:c9:db:44:8f:69:0d:01:ae:4d:1f:3d:59:37:31:
6b:fa:30:0b:46:5f:bc:c7:1b:25:c7:27:fd:28:67:86:d8:7f:
9e:ae:c2:bc:37:9e:42:b0:b4:d3:08:33:28:0b:a3:a8:f5:2b:
59:fe:99:aa:bb:21:c9:9a:fd:ee:27:c8:04:66:ab:51:09:3a:
a6:25:4f:05:bf:23:f8:d7:ac:67:bc:da:e8:d9:dc:a9:5f:ea:
1b:69:03:0c:9d:2c:57:87:c1:8c:d1:9d:55:e5:aa:20:88:57:
65:fa:7b:6a:eb:f4:86:db:2b:5a:b7:4f:8e:09:b4:a8:ba:1d:
aa:18:54:c8:f0:55:b8:d5:ec:d9:b0:1f:e6:70:92:41:0f:32:
df:71:01:86:26:26:a3:d2:ba:07:69:77:ed:10:cf:e5:c8:ad:
86:95:8a:56:e1:fb:8c:eb:43:c4:0e:8f:49:de:62:5e:96:90:
49:46:a7:41:e8:4d:c4:6d:07:79:59:2f:d9:17:27:bb:1d:5a:
00:75:5f:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:35 2024 by rpki-client on console-ams.rpki-client.org