Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/NyIRx1rbgEsoeVY7Vvpcw9BoU4A.roa
File: NyIRx1rbgEsoeVY7Vvpcw9BoU4A.roa (raw, json)
Hash identifier: OXm+VmFxvxou9pEWdjJd8FEnYbcIOIdH8DT57RYiuyg=
Subject key identifier: 37:22:11:C7:5A:DB:80:4B:28:79:56:3B:56:FA:5C:C3:D0:68:53:80
Certificate issuer: /CN=0620eadb2e1562b4e2e4f480772c36887a777f24
Certificate serial: 018243F14C49EAEACA3D05E0D4640E38FE4A
Authority key identifier: 06:20:EA:DB:2E:15:62:B4:E2:E4:F4:80:77:2C:36:88:7A:77:7F:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/NyIRx1rbgEsoeVY7Vvpcw9BoU4A.roa
Signing time: Thu 28 Jul 2022 08:34:23 +0000
ROA not before: Thu 28 Jul 2022 08:34:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201364
IP address blocks: 78.111.111.0/24 maxlen: 24
217.195.195.0/24 maxlen: 24
217.195.197.0/24 maxlen: 24
80.93.220.0/24 maxlen: 24
217.195.202.0/24 maxlen: 24
217.195.207.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:43:f1:4c:49:ea:ea:ca:3d:05:e0:d4:64:0e:38:fe:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0620eadb2e1562b4e2e4f480772c36887a777f24
Validity
Not Before: Jul 28 08:34:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=372211c75adb804b2879563b56fa5cc3d0685380
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c7:30:95:27:1f:95:93:31:e3:02:96:d6:96:
de:06:36:c9:ea:2b:e8:0d:1f:69:ca:b8:e5:ab:9a:
51:21:63:e6:2b:f5:90:f9:cc:92:e4:6c:23:5e:ce:
f1:fb:f3:99:9f:5a:ba:ab:e1:94:8f:47:83:f5:77:
78:df:bc:5f:50:a6:89:12:74:e2:83:3f:c3:57:7b:
30:11:b0:92:e0:d3:8b:4e:39:36:21:a5:f1:60:99:
50:18:2a:32:04:31:1b:c5:28:fb:85:7c:34:60:8d:
f1:62:b0:da:a6:2b:d2:ed:51:26:7e:0b:3d:4a:b4:
74:4f:43:94:af:a0:81:1a:8a:96:11:3b:74:89:5e:
10:c9:e7:21:4e:3d:49:d1:1f:9a:20:bf:e3:4a:ad:
ba:f1:5a:46:00:9f:4e:40:fd:42:45:4f:8f:89:65:
68:41:6a:7e:c6:48:cc:e6:6d:ab:36:5e:47:4f:cf:
41:4f:70:b4:35:b8:28:19:f6:75:da:24:36:74:b8:
3c:56:7a:97:29:85:f2:57:d5:2e:f8:e3:d1:67:3a:
5e:eb:41:76:db:0b:ae:e1:b1:be:51:8d:34:5e:6e:
64:e6:50:d5:b6:3f:89:2d:f8:91:51:1b:fa:df:f2:
ec:54:e4:24:a8:95:ff:d2:aa:45:15:64:47:81:4b:
5e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:22:11:C7:5A:DB:80:4B:28:79:56:3B:56:FA:5C:C3:D0:68:53:80
X509v3 Authority Key Identifier:
keyid:06:20:EA:DB:2E:15:62:B4:E2:E4:F4:80:77:2C:36:88:7A:77:7F:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/NyIRx1rbgEsoeVY7Vvpcw9BoU4A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.111.111.0/24
80.93.220.0/24
217.195.195.0/24
217.195.197.0/24
217.195.202.0/24
217.195.207.0/24
Signature Algorithm: sha256WithRSAEncryption
83:ef:32:40:18:c3:5f:25:ae:fc:6b:94:8a:44:e9:17:28:1e:
b9:87:9b:63:f5:15:d8:38:11:ae:f8:54:15:07:98:e9:85:02:
5d:76:9f:03:0d:04:03:40:ad:0c:91:58:00:68:17:63:21:35:
03:5f:fb:c2:51:dd:97:ea:f4:d4:44:13:9d:0f:cd:86:96:0f:
d6:d7:f0:06:2b:e9:71:54:94:69:ee:f5:91:03:3a:cb:88:b1:
9c:3c:fa:69:f2:cb:2f:8b:8b:bb:05:55:52:48:d5:e5:60:01:
81:84:20:e9:ba:08:ba:d6:35:9b:25:c6:30:54:c6:5d:11:a5:
a7:c5:eb:a7:e9:75:6a:ba:5c:7d:ae:0c:8d:1b:69:f2:3f:9d:
37:66:14:4d:f4:3b:a5:f4:e4:bc:6d:6e:d9:3c:e5:54:8a:35:
e1:28:3d:d1:62:e3:60:53:90:d2:87:c5:1a:c9:66:84:fb:17:
19:d2:c8:23:29:8b:36:51:07:18:1e:ed:65:6c:d1:dc:a5:3a:
0f:25:dc:4b:22:22:35:6a:b1:5a:f4:cf:34:9f:82:b0:f3:b5:
f4:a0:df:32:82:60:22:f9:a6:22:7a:ef:fc:1d:cb:be:ef:76:
bd:44:3b:5a:be:ec:b7:23:fe:70:ae:6c:ae:d1:bc:06:11:89:
2e:63:98:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:29 2024 by rpki-client on console-fra.rpki-client.org