Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/GLc3WHUda0aCxMp5_HS5fc_wqlU.roa
File: GLc3WHUda0aCxMp5_HS5fc_wqlU.roa (raw, json)
Hash identifier: eS35sn14ZD4s8ndygVsRkMS/I4eXapH2+cw+qOLTisM=
Subject key identifier: 18:B7:37:58:75:1D:6B:46:82:C4:CA:79:FC:74:B9:7D:CF:F0:AA:55
Certificate issuer: /CN=0620eadb2e1562b4e2e4f480772c36887a777f24
Certificate serial: 315549FE
Authority key identifier: 06:20:EA:DB:2E:15:62:B4:E2:E4:F4:80:77:2C:36:88:7A:77:7F:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/GLc3WHUda0aCxMp5_HS5fc_wqlU.roa
Signing time: Fri 03 Jun 2022 11:54:21 +0000
ROA not before: Fri 03 Jun 2022 11:54:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201364
IP address blocks: 78.111.111.0/24 maxlen: 24
217.195.195.0/24 maxlen: 24
217.195.197.0/24 maxlen: 24
80.93.220.0/24 maxlen: 24
217.195.202.0/24 maxlen: 24
217.195.207.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 827673086 (0x315549fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0620eadb2e1562b4e2e4f480772c36887a777f24
Validity
Not Before: Jun 3 11:54:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=18b73758751d6b4682c4ca79fc74b97dcff0aa55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b3:d9:0c:cd:63:02:e4:4f:08:57:91:ea:6d:
05:f8:09:30:32:61:bf:5e:9e:ca:b8:85:7e:a9:b3:
50:f0:1c:24:fd:96:9c:bc:85:c3:86:c6:53:bf:3b:
d2:8f:13:c7:36:6f:b1:21:4b:e7:3f:d8:fb:d2:6c:
6a:d2:d9:17:31:9a:27:be:6c:71:b3:8e:bf:e7:8b:
08:96:f8:f1:53:3f:83:49:2e:07:4b:18:9b:5b:71:
28:1d:50:7b:fe:99:52:2e:08:b4:7c:9d:b9:6e:80:
42:2d:8d:36:64:1c:05:48:06:64:9b:34:28:c2:9a:
fd:58:65:9f:59:9d:46:a9:6f:54:f5:ac:0b:a2:c1:
f7:9b:53:d1:03:c7:e7:67:c1:49:4e:12:4d:96:9b:
ca:d8:ef:01:06:de:18:28:3e:ab:f4:75:02:92:e5:
cd:47:cb:df:9f:22:aa:51:ba:63:3c:3c:a4:45:99:
44:a0:ae:83:90:e8:c1:10:f0:8e:f3:3f:11:86:1e:
27:4a:42:84:5e:e5:e1:e0:2d:6e:f0:8f:1d:4f:51:
44:60:8f:22:f9:0b:8d:5f:40:28:df:a4:43:e2:81:
86:e0:01:04:ad:ce:8f:6b:86:d5:54:c1:5c:c8:d1:
da:e8:1b:e4:9f:1f:0f:10:6a:d2:c3:09:4e:9a:28:
17:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:B7:37:58:75:1D:6B:46:82:C4:CA:79:FC:74:B9:7D:CF:F0:AA:55
X509v3 Authority Key Identifier:
keyid:06:20:EA:DB:2E:15:62:B4:E2:E4:F4:80:77:2C:36:88:7A:77:7F:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/GLc3WHUda0aCxMp5_HS5fc_wqlU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.111.111.0/24
80.93.220.0/24
217.195.195.0/24
217.195.197.0/24
217.195.202.0/24
217.195.207.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:4a:45:7b:75:50:b7:24:cd:de:8d:17:ab:47:4b:19:4b:78:
58:34:be:a7:37:da:a6:d0:0a:67:f0:99:2f:f3:e5:1e:78:2a:
ea:69:38:cc:0a:43:66:1a:3b:9b:a0:07:aa:72:15:f4:64:92:
a3:09:b8:0b:03:38:41:9f:9d:ae:f8:9b:c5:e0:ee:a2:09:12:
94:78:35:53:b9:56:a0:62:c0:ea:86:79:e6:22:62:c0:f4:6b:
d7:20:e3:02:69:9d:41:eb:7a:90:ad:4c:9e:93:de:00:99:ef:
71:52:c6:f1:c0:9b:ea:87:a7:e7:ca:63:91:93:88:73:eb:f1:
2c:8e:e8:5f:ac:08:cd:6b:0f:88:0d:73:d1:40:0a:19:3f:53:
f9:86:b2:70:e0:54:58:37:ea:fb:21:00:34:48:44:0c:74:1f:
34:2e:bf:ca:eb:09:f7:8f:ba:b2:a8:27:58:61:f2:f2:ed:fd:
7b:8e:9c:4a:7b:78:86:0a:e4:1c:6a:ee:eb:8e:aa:fc:46:e6:
23:93:a6:de:da:7a:45:d2:cc:2c:78:82:ed:36:7d:24:f1:ac:
9e:ef:d5:67:65:fa:c1:c9:56:39:40:05:97:33:05:49:80:39:
e5:3d:dc:18:09:27:14:b3:fd:5c:8d:60:f7:93:2e:90:44:6a:
62:4a:f4:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:33 2024 by rpki-client on console-ams.rpki-client.org