Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/rG7xc7IPJ-vqxhICpo-UiVEtjZ8.roa
File: rG7xc7IPJ-vqxhICpo-UiVEtjZ8.roa (raw, json)
Hash identifier: 7e8EXiTr8CWJlcCdqBMuZPWqMJk2Enfiz7WSDTkCWuE=
Subject key identifier: AC:6E:F1:73:B2:0F:27:EB:EA:C6:12:02:A6:8F:94:89:51:2D:8D:9F
Certificate issuer: /CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4
Certificate serial: 0185714C10BD9A6CB4B5A3802AF79CA21C18
Authority key identifier: 35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/rG7xc7IPJ-vqxhICpo-UiVEtjZ8.roa
Signing time: Mon 02 Jan 2023 07:04:48 +0000
ROA not before: Mon 02 Jan 2023 07:04:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202228
IP address blocks: 94.240.52.0/22 maxlen: 22
94.240.52.0/24 maxlen: 24
94.240.53.0/24 maxlen: 24
94.240.54.0/24 maxlen: 24
94.240.55.0/24 maxlen: 24
94.240.60.0/24 maxlen: 24
94.240.60.0/23 maxlen: 23
94.240.61.0/24 maxlen: 24
91.106.26.0/23 maxlen: 23
91.106.26.0/24 maxlen: 24
91.106.27.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:4c:10:bd:9a:6c:b4:b5:a3:80:2a:f7:9c:a2:1c:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4
Validity
Not Before: Jan 2 07:04:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ac6ef173b20f27ebeac61202a68f9489512d8d9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:0e:42:9d:11:27:d5:ad:51:20:16:23:4b:ae:
bc:42:8b:49:03:b2:0b:3f:20:2b:96:00:48:fa:b2:
9f:3f:a0:21:d5:bc:ff:9b:0d:69:56:9f:94:14:b3:
2f:1a:12:95:82:54:d4:2c:5c:e6:f2:cb:80:a6:63:
e3:3e:7d:f3:87:3a:00:18:14:09:de:c3:88:6f:64:
cb:44:c0:0d:d5:d4:92:0b:84:e6:7f:00:20:d1:4e:
08:4e:2e:2a:7e:c5:46:ea:59:98:80:14:82:e2:79:
98:35:13:70:47:ae:4c:b5:7d:c3:30:bb:5f:f0:08:
fd:b4:ef:4f:04:c8:66:6a:dd:66:82:4c:cd:a9:f1:
9e:e6:09:36:e9:c0:c2:58:65:7c:27:74:98:b9:00:
ee:8b:c5:33:eb:df:98:22:f9:cf:eb:6a:bd:d3:9a:
2e:f0:43:df:bc:95:6d:e2:22:71:aa:6f:74:47:78:
15:84:09:44:37:3a:29:df:c0:04:c1:03:42:49:c0:
c8:f7:55:61:97:9c:99:b8:dd:b2:74:e8:f7:e2:93:
f4:a6:93:e6:0c:d1:8c:0a:9b:5d:5d:c8:9b:3c:d6:
de:b9:14:c8:cc:e4:a3:d3:10:08:fd:60:3b:46:ee:
4f:79:13:c3:90:38:b1:b0:b9:75:a2:a1:68:29:8f:
0f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:6E:F1:73:B2:0F:27:EB:EA:C6:12:02:A6:8F:94:89:51:2D:8D:9F
X509v3 Authority Key Identifier:
keyid:35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/rG7xc7IPJ-vqxhICpo-UiVEtjZ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.106.26.0/23
94.240.52.0/22
94.240.60.0/23
Signature Algorithm: sha256WithRSAEncryption
53:59:5a:bb:81:2f:94:a7:e5:0d:e9:9d:7b:01:dc:01:8c:d2:
cf:a2:cc:0b:b2:96:a8:f5:94:f2:76:16:31:c3:20:f7:0f:92:
a7:3b:0e:c6:e8:95:d5:cd:3e:36:22:65:21:11:ff:8a:6f:cd:
ca:b4:06:a9:64:04:2d:cc:5e:3f:a3:07:4d:48:46:84:18:db:
0c:c6:f5:96:47:16:58:26:59:04:bc:36:f3:a8:0a:44:69:2f:
f9:9c:66:fc:53:c1:e1:ff:71:63:17:5f:bc:84:c4:7f:ff:58:
87:af:68:7a:1a:bc:e6:7d:ea:4d:fe:34:c5:5b:e1:33:93:da:
07:f0:d7:a0:4c:70:14:c3:28:8e:c8:77:68:f6:bc:28:61:1f:
12:97:ca:20:db:b0:68:58:40:a9:51:78:69:26:0b:92:d1:49:
68:e0:b7:1d:a3:31:de:71:db:47:f0:53:39:62:fa:35:39:0e:
33:a2:4e:81:27:c9:12:72:c4:e2:52:da:fd:3d:ba:8b:42:f0:
b7:97:8d:df:d8:1f:d9:55:c1:b1:fe:74:e7:de:fc:70:09:d6:
6b:fe:6f:c4:3f:77:47:c2:bf:24:1c:4c:92:fb:62:2f:07:85:
29:7b:0f:2e:f6:71:60:96:0f:d2:83:1a:9f:28:a4:85:27:ae:
f0:37:37:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:18 2024 by rpki-client on console-fra.rpki-client.org