Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/DHgyow5DIqAo6yfzcEfRm7ybSio.roa
File: DHgyow5DIqAo6yfzcEfRm7ybSio.roa (raw, json)
Hash identifier: JIs7rUkMD4Oms8mDYKP8gD4H9NIAeaNoUBW40rp1WC0=
Subject key identifier: 0C:78:32:A3:0E:43:22:A0:28:EB:27:F3:70:47:D1:9B:BC:9B:4A:2A
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 018CF2D5B4C03BE49869C9FEEE7A4281EE69
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/DHgyow5DIqAo6yfzcEfRm7ybSio.roa
Signing time: Wed 10 Jan 2024 10:05:40 +0000
ROA not before: Wed 10 Jan 2024 10:05:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12325
IP address blocks: 185.18.224.0/23 maxlen: 24
89.47.252.0/24 maxlen: 24
188.215.40.0/22 maxlen: 24
89.47.52.0/24 maxlen: 24
89.46.232.0/21 maxlen: 24
89.46.128.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f2:d5:b4:c0:3b:e4:98:69:c9:fe:ee:7a:42:81:ee:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 10 10:05:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0c7832a30e4322a028eb27f37047d19bbc9b4a2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:88:97:9c:45:8c:85:02:43:cc:0b:3a:77:88:
bc:e1:1c:cd:29:1a:9f:df:a9:53:ff:82:36:f0:7a:
6b:de:78:19:bb:be:bc:84:ee:e4:8c:71:d1:85:8f:
c0:43:11:82:c1:13:df:91:8a:ff:73:05:91:87:3b:
f0:2c:8e:0f:8f:31:11:7f:69:32:04:c5:eb:09:db:
87:8d:58:64:7e:f1:2d:a5:f2:73:22:b2:c5:21:56:
4e:65:99:bf:99:c4:b1:a4:75:18:4d:12:d7:4e:2a:
90:18:b9:bf:fa:a9:fc:82:5f:6f:c8:a4:e3:67:0f:
40:30:b3:ce:44:70:21:c8:55:75:1f:7d:cc:1b:89:
a6:54:84:86:9e:95:e3:9a:db:a9:46:26:a9:ea:9d:
4f:b0:21:31:37:92:9a:e9:ed:78:13:82:7c:ff:8f:
7a:1e:51:aa:68:22:94:07:2e:70:c8:4c:b7:a1:d2:
42:6a:8f:23:0c:58:57:4a:38:73:f3:19:f7:eb:ec:
96:77:cb:d8:33:c7:75:2c:37:52:80:73:0d:f2:4d:
d7:f3:43:ab:fb:62:8c:7b:a1:fe:ee:37:3c:0c:dc:
34:a9:01:c6:90:34:88:a8:68:00:cb:3c:79:dd:ad:
91:33:ae:3f:a7:f9:b5:c0:19:12:6e:ca:3f:67:98:
66:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:78:32:A3:0E:43:22:A0:28:EB:27:F3:70:47:D1:9B:BC:9B:4A:2A
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/DHgyow5DIqAo6yfzcEfRm7ybSio.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.46.128.0/22
89.46.232.0/21
89.47.52.0/24
89.47.252.0/24
185.18.224.0/23
188.215.40.0/22
Signature Algorithm: sha256WithRSAEncryption
57:20:e8:85:e1:6f:52:11:58:1e:06:8a:26:2f:ab:82:d7:fd:
21:2c:76:34:43:13:35:1a:36:3d:43:d5:8b:c9:c5:46:a1:21:
e8:f3:b2:43:72:c6:02:f3:18:99:6e:82:4e:ea:d1:b3:ce:75:
5b:a3:5b:6c:eb:25:5b:d2:10:19:e0:fa:dc:4b:e7:f9:c4:6a:
2b:2c:f6:52:49:e2:57:e0:44:69:c0:34:a6:3c:08:51:6e:b7:
44:77:fb:c5:15:33:a3:89:0a:80:d4:66:e8:93:19:08:4e:27:
f4:a2:86:67:44:9e:e3:96:2f:83:50:59:de:49:ec:19:43:09:
51:9a:41:a7:7c:6c:56:de:ff:35:90:0f:1d:1b:78:2b:8d:5a:
f9:4a:d7:f1:d9:5f:f7:cb:a4:df:ee:61:cc:7a:4e:62:46:91:
9c:81:ac:b2:ac:6f:95:53:c7:06:43:68:1d:6e:3b:1d:24:c3:
2c:4b:7c:55:ce:87:54:a2:ab:5b:5d:13:ec:e0:e3:82:be:0a:
07:3b:2d:0c:57:75:34:03:ae:9c:fc:e3:bb:b4:78:5d:32:b5:
41:e9:dc:7b:6b:b0:19:c1:ff:1c:c5:c6:d1:45:3e:83:3d:8b:
5c:97:f5:d1:4d:f5:c2:7c:75:23:cb:e8:4e:a7:1c:a2:04:2e:
17:b5:bd:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:52 2024 by rpki-client on console-ams.rpki-client.org