Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/bdzAGConhhd8xlUJYFsZ_wpoywo.roa
File: bdzAGConhhd8xlUJYFsZ_wpoywo.roa (raw, json)
Hash identifier: SlJz+Ib+MJbULSErgTK+SBeirSRbC7ca3IBhpW4zWSk=
Subject key identifier: 6D:DC:C0:18:2A:27:86:17:7C:C6:55:09:60:5B:19:FF:0A:68:CB:0A
Certificate issuer: /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Certificate serial: 0189FB0EA48C77CFA9724C3B821AFEC3D56B
Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/bdzAGConhhd8xlUJYFsZ_wpoywo.roa
Signing time: Tue 15 Aug 2023 21:16:28 +0000
ROA not before: Tue 15 Aug 2023 21:16:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5503
IP address blocks: 217.180.0.0/17 maxlen: 24
213.18.192.0/18 maxlen: 24
194.154.0.0/19 maxlen: 24
217.181.0.0/17 maxlen: 24
62.171.192.0/18 maxlen: 24
217.177.64.0/19 maxlen: 24
185.192.228.0/22 maxlen: 24
217.179.0.0/16 maxlen: 24
194.238.0.0/17 maxlen: 24
217.177.0.0/18 maxlen: 24
2a02:fb0::/32 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:fb:0e:a4:8c:77:cf:a9:72:4c:3b:82:1a:fe:c3:d5:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Validity
Not Before: Aug 15 21:16:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6ddcc0182a2786177cc65509605b19ff0a68cb0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:4d:f0:8a:64:fb:96:4b:65:d9:66:87:d0:a8:
ff:f2:29:38:ce:a3:6f:f2:82:00:aa:e1:4a:31:fd:
48:db:e4:a3:c5:4a:83:d3:c7:10:48:13:7c:33:58:
68:05:5e:53:4c:7e:8d:ce:38:08:b2:bd:6f:db:b2:
b7:66:e1:e3:ae:63:27:1f:00:63:b9:bb:d0:e8:ac:
6a:4b:93:85:f0:a4:0d:76:d8:54:30:e6:5c:4a:a0:
85:fd:5c:55:eb:2b:8b:99:fe:66:7b:d5:f0:86:a6:
c7:42:db:5f:9a:bd:33:24:7b:88:dc:2e:30:30:9f:
63:fb:cc:b0:0f:12:ea:9a:53:16:00:17:e1:a6:b3:
8c:22:20:09:2c:92:88:88:cd:56:36:3c:75:71:18:
57:0d:84:d9:2c:61:d1:60:e1:fc:25:9a:68:1e:38:
62:75:f9:ff:ba:e4:f3:af:b1:5f:48:1e:b9:28:a6:
ed:8f:7f:4a:36:e1:bf:d0:43:98:30:48:99:90:87:
d2:2d:e2:db:19:b6:1b:ee:14:d8:82:17:4e:26:b4:
a4:bc:e1:f2:53:78:1e:24:1c:62:06:71:dc:70:18:
a5:45:76:af:a9:3b:89:64:39:9f:0c:5a:bf:8f:c5:
78:5b:87:ce:92:34:ea:93:f2:a7:f1:0f:7f:9e:0f:
0b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:DC:C0:18:2A:27:86:17:7C:C6:55:09:60:5B:19:FF:0A:68:CB:0A
X509v3 Authority Key Identifier:
keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/bdzAGConhhd8xlUJYFsZ_wpoywo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.171.192.0/18
185.192.228.0/22
194.154.0.0/19
194.238.0.0/17
213.18.192.0/18
217.177.0.0-217.177.95.255
217.179.0.0-217.180.127.255
217.181.0.0/17
IPv6:
2a02:fb0::/32
Signature Algorithm: sha256WithRSAEncryption
0a:d3:43:c6:7e:15:5e:1a:3c:3e:fc:85:88:4f:6d:ca:ef:b7:
70:3c:7f:d3:43:37:c0:0f:fd:44:6a:88:31:d5:34:0f:f0:4b:
fd:e5:a9:4a:35:14:0c:02:ba:0f:cf:ca:4d:02:00:95:cc:ed:
a9:a0:c8:20:41:53:b7:85:c4:60:0c:6c:f2:75:e0:c4:23:c2:
50:41:0e:4a:e9:85:fe:a5:1a:9b:8e:23:18:59:7a:af:42:d6:
55:f1:7d:ce:a4:da:20:bf:d7:e5:f0:a3:7d:f5:ee:c4:bd:98:
2b:15:62:7a:cf:a4:a2:df:b2:67:c6:a4:0d:41:f2:6d:7a:3b:
43:cf:f8:df:ac:84:19:00:f8:16:a4:c5:5f:73:59:df:4e:b2:
00:6d:f8:cc:82:32:e1:36:8c:5a:87:28:02:4d:da:93:ee:53:
30:b5:20:9f:29:49:85:82:56:48:ff:a3:8e:20:e1:aa:36:b2:
5d:e6:26:dd:5b:4f:0f:fb:58:60:82:1f:1c:3e:64:e5:9b:6c:
60:9c:65:1e:3c:37:cf:ed:66:ce:ca:01:67:f3:c6:b1:22:ef:
88:cd:26:50:dc:35:2d:7d:59:47:6d:9f:2c:b0:84:f9:2c:d9:
cf:74:f8:ca:b7:a6:d6:64:9d:19:e6:c3:97:d4:23:1d:b4:c0:
7c:6d:ad:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:08 2024 by rpki-client on console-fra.rpki-client.org