Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/pFexXucFU-6STsty37tXjyLzUrU.roa
File: pFexXucFU-6STsty37tXjyLzUrU.roa (raw, json)
Hash identifier: REORDltAWftSni3cJoIbVOO3sXtrBz3Q4WwWQ2CryM8=
Subject key identifier: A4:57:B1:5E:E7:05:53:EE:92:4E:CB:72:DF:BB:57:8F:22:F3:52:B5
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 1812F922
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/pFexXucFU-6STsty37tXjyLzUrU.roa
Signing time: Sat 01 Jan 2022 04:00:42 +0000
ROA not before: Sat 01 Jan 2022 04:00:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207772
IP address blocks: 87.118.146.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 403896610 (0x1812f922)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Jan 1 04:00:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a457b15ee70553ee924ecb72dfbb578f22f352b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:98:1c:1c:d5:50:87:a2:6c:e8:20:4f:c0:3e:
0a:e0:3d:cd:48:1a:e6:ee:60:60:d2:86:51:00:df:
a9:90:9f:f0:fc:fe:63:d5:fe:ff:90:cc:d7:92:41:
eb:e7:54:38:ea:bd:af:cd:c9:c9:36:52:a2:56:49:
57:12:21:85:e5:48:bb:51:54:05:91:7f:eb:a5:42:
74:f2:25:c3:87:78:02:27:87:20:89:4c:06:3f:37:
b7:4d:cc:1e:44:60:d2:ca:4b:0d:ad:e4:48:57:27:
73:d0:a5:ad:c4:d6:00:48:cb:5a:af:73:3d:95:7c:
f8:06:32:f2:a9:a2:f9:c9:6d:c1:d5:f7:88:10:c8:
cd:2b:a2:e4:6e:53:f8:5a:7d:9a:cc:df:5d:cc:15:
8b:a8:38:9f:e3:16:0b:0d:f9:51:36:d0:f3:42:58:
5a:54:8b:e2:d8:ba:80:c0:a7:f7:31:d4:16:51:02:
5b:bb:0c:f1:23:c6:69:6b:b6:ec:72:85:ba:df:03:
45:8c:52:6b:80:ef:51:5c:48:f1:fa:4d:8e:10:57:
36:76:fa:b1:f8:43:2d:b3:3d:6e:6e:9d:c2:3c:39:
2c:23:08:f4:30:14:38:3c:24:21:95:1f:5f:8c:ea:
34:e7:06:44:ea:21:2b:90:68:b2:93:86:07:c9:e9:
ef:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:57:B1:5E:E7:05:53:EE:92:4E:CB:72:DF:BB:57:8F:22:F3:52:B5
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/pFexXucFU-6STsty37tXjyLzUrU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.118.146.0/24
Signature Algorithm: sha256WithRSAEncryption
18:bf:73:de:b7:b5:e0:07:b3:3c:f6:fe:aa:5b:80:39:11:fb:
45:b9:65:60:69:80:4f:e0:07:c0:ca:70:00:8c:28:49:23:61:
34:f3:c0:c2:61:74:c9:6c:88:f1:19:60:0d:19:ac:3b:04:b9:
92:a6:0a:44:40:b8:df:c9:dd:86:df:05:77:ea:ca:4f:d5:e3:
3e:ff:f5:11:f4:7f:f3:af:9e:9d:64:14:a4:03:3a:0e:ca:28:
b3:3a:85:9b:a2:05:e2:32:e1:41:9e:86:a7:97:dc:e6:ed:7e:
5a:46:4c:e4:e6:76:fc:9c:f5:91:84:b7:ab:97:28:08:c7:f6:
72:dc:aa:fa:9b:8e:b5:4f:72:78:6b:c2:20:e8:a1:58:0c:d4:
d6:e7:58:14:9e:a6:47:eb:0d:ac:d4:64:f5:ef:db:4a:aa:98:
c0:cf:1f:ca:28:2c:80:e6:3c:46:a2:71:0b:7a:b0:65:91:7f:
9d:a8:f7:6a:3c:6f:08:a2:20:c9:db:d6:4d:4c:21:80:63:6d:
94:c1:7e:cf:a1:75:1b:37:2b:a0:b4:86:82:ca:1d:5f:2a:80:
4a:30:84:9d:3c:ec:73:ff:04:5f:54:2b:6a:ca:89:14:14:64:
87:f9:de:4d:eb:72:71:17:ff:d2:58:12:2b:be:f9:de:cb:82:
50:55:27:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:05 2024 by rpki-client on console-fra.rpki-client.org