Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/xmBhP9aiGO2TPbyM9rV_v_wfJ6A.roa
File: xmBhP9aiGO2TPbyM9rV_v_wfJ6A.roa (raw, json)
Hash identifier: +fxw10uOkWiYN2EYEUYkrn6yIYqXat1CgjKJLTnGdbM=
Subject key identifier: C6:60:61:3F:D6:A2:18:ED:93:3D:BC:8C:F6:B5:7F:BF:FC:1F:27:A0
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 018CC79542A7DAAEA6D604214DC730BB0CF8
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/xmBhP9aiGO2TPbyM9rV_v_wfJ6A.roa
Signing time: Tue 02 Jan 2024 00:31:37 +0000
ROA not before: Tue 02 Jan 2024 00:31:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16157
IP address blocks: 89.44.76.0/24 maxlen: 24
93.119.195.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:42:a7:da:ae:a6:d6:04:21:4d:c7:30:bb:0c:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 2 00:31:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c660613fd6a218ed933dbc8cf6b57fbffc1f27a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ea:d1:ba:8d:c9:fa:8e:1e:07:18:55:70:0e:
f3:90:25:c7:f1:b5:de:cb:52:69:7f:08:c3:f7:b6:
c4:9a:6f:ad:c4:dc:8d:3b:fc:b2:d5:47:2a:64:dd:
e0:ad:00:9c:17:a1:0f:9c:ec:8f:e7:8a:cb:c6:ad:
2f:a9:82:90:bb:fd:54:eb:8a:a3:67:a9:fb:f2:a9:
36:93:5b:08:e4:87:7b:fc:22:55:01:2c:7a:14:c7:
e1:13:c2:3f:ec:80:26:49:41:71:14:b3:2a:17:96:
b2:0a:7d:61:75:b6:5e:c2:29:67:6b:3b:c9:ba:b1:
37:2a:b7:86:15:f5:17:68:3b:16:d5:6c:90:8c:d1:
6b:5c:a2:08:cc:65:43:b2:b7:3f:0e:70:b4:f7:cb:
7c:16:fe:93:7f:90:4f:e3:27:7a:0c:44:6c:10:10:
bf:c6:9b:35:76:36:4e:a8:cb:f8:e8:c6:67:1d:fc:
b0:9b:98:3c:29:42:be:d5:68:4f:b0:f7:f9:b9:04:
1b:bf:95:9c:bd:11:0a:3a:d1:df:a3:39:2a:0c:e2:
7f:3f:da:e3:37:0c:3b:c1:63:76:f1:a4:80:14:ba:
5b:0a:7d:34:42:b9:0e:4d:77:e0:b8:9d:9c:64:76:
80:96:9f:e6:24:4b:79:5d:eb:4c:af:6e:02:ef:82:
57:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:60:61:3F:D6:A2:18:ED:93:3D:BC:8C:F6:B5:7F:BF:FC:1F:27:A0
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/xmBhP9aiGO2TPbyM9rV_v_wfJ6A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.44.76.0/24
93.119.195.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:8f:87:42:67:f8:79:84:5d:4c:1f:c6:04:b7:78:fe:6d:b6:
35:4f:0f:62:60:d5:45:20:42:50:70:a2:7a:29:5b:30:93:9f:
07:fa:d7:a4:4a:5d:e1:8d:1c:70:39:68:14:d8:22:3b:6c:83:
56:d2:19:18:ac:a9:c9:6d:a8:b6:a9:7d:f5:9c:b3:3a:93:49:
58:2f:4d:06:4c:4d:fe:9b:76:b6:f9:c5:4f:7a:5e:24:14:a5:
8a:bd:cf:8a:8f:d9:fb:db:5c:27:f4:3b:0a:4a:27:6a:67:7d:
f5:5e:a7:a7:58:d2:a3:2b:ed:12:4c:59:6a:ec:93:42:3d:98:
c2:1f:fb:f8:4c:9d:cd:b4:94:b0:d2:16:87:30:63:75:9b:88:
56:ef:73:4f:47:e3:f5:6f:ed:af:50:54:1e:9c:e6:38:8b:61:
cc:0a:01:4a:ab:ad:26:16:b2:52:f9:85:66:ad:ef:89:3e:5f:
2e:66:cd:81:cb:84:a0:87:80:26:12:55:c8:58:0a:ad:bd:ec:
bf:ea:65:08:47:f8:09:5b:f3:d4:a6:ab:88:1f:41:5b:cf:c0:
1e:26:88:2e:20:5b:1c:77:e9:1e:ce:e8:0f:e7:b6:7a:b7:0c:
52:eb:9b:64:64:d6:0d:2c:7a:70:7c:84:3a:cf:f6:b4:34:16:
33:25:e0:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:42 2024 by rpki-client on console-fra.rpki-client.org