Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/4lyvtv0SRS8S7kQ7-Ytd085k6m8.roa
File: 4lyvtv0SRS8S7kQ7-Ytd085k6m8.roa (raw, json)
Hash identifier: T9mKD0h71jKxqzZmcCWvkCY+DrtxgDAADQbBDxKMe1E=
Subject key identifier: E2:5C:AF:B6:FD:12:45:2F:12:EE:44:3B:F9:8B:5D:D3:CE:64:EA:6F
Certificate issuer: /CN=c67e2a46e34f491433c8b62f319b902bddfde831
Certificate serial: 04A46B0C
Authority key identifier: C6:7E:2A:46:E3:4F:49:14:33:C8:B6:2F:31:9B:90:2B:DD:FD:E8:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xn4qRuNPSRQzyLYvMZuQK9396DE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/4lyvtv0SRS8S7kQ7-Ytd085k6m8.roa
Signing time: Mon 11 Apr 2022 07:11:06 +0000
ROA not before: Mon 11 Apr 2022 07:11:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208673
IP address blocks: 37.49.231.0/24 maxlen: 24
185.53.91.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77884172 (0x4a46b0c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c67e2a46e34f491433c8b62f319b902bddfde831
Validity
Not Before: Apr 11 07:11:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e25cafb6fd12452f12ee443bf98b5dd3ce64ea6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:14:f9:c0:c3:9d:c8:de:a2:c5:94:a7:86:9f:
90:a5:6f:f2:a5:69:d0:ac:56:36:fe:96:d9:45:d2:
e1:a3:42:d9:3e:ea:b1:25:34:6f:e5:d1:5e:f0:d2:
d1:55:a9:3e:69:3b:2a:12:4d:15:be:6c:81:f3:4c:
d8:7a:ef:c9:43:51:8e:16:69:7a:4c:c4:9b:88:0c:
24:4c:5d:b4:55:57:92:8c:20:f2:bf:a0:bb:e9:d4:
19:a8:5b:cc:c9:e7:2b:0e:54:ce:44:6a:7f:ee:ed:
b9:8e:96:f6:06:fc:f8:24:67:13:79:bb:6d:e4:96:
20:3c:0b:19:ca:cd:b5:7d:4d:30:3c:d8:73:0b:00:
40:e1:d2:57:b9:9e:0e:4f:29:4d:94:76:b8:1a:29:
f9:71:0f:58:67:51:5e:c9:b7:f0:c3:97:8d:b1:35:
b5:ed:ca:b8:85:52:b5:df:c1:c4:3d:24:29:2b:0d:
f9:7f:05:8d:23:67:99:84:da:07:ee:16:47:91:8d:
16:9c:5b:cc:67:da:8f:60:0d:00:71:d3:7a:06:97:
c6:16:dd:e1:72:78:e5:97:f6:b6:b3:a0:89:c0:0b:
6f:4b:b7:10:4c:25:11:a3:ad:b0:be:9e:8e:e9:9c:
31:6a:f7:7c:59:97:f3:fb:67:2c:e5:04:1b:64:6d:
cf:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:5C:AF:B6:FD:12:45:2F:12:EE:44:3B:F9:8B:5D:D3:CE:64:EA:6F
X509v3 Authority Key Identifier:
keyid:C6:7E:2A:46:E3:4F:49:14:33:C8:B6:2F:31:9B:90:2B:DD:FD:E8:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xn4qRuNPSRQzyLYvMZuQK9396DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/4lyvtv0SRS8S7kQ7-Ytd085k6m8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/xn4qRuNPSRQzyLYvMZuQK9396DE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.49.231.0/24
185.53.91.0/24
Signature Algorithm: sha256WithRSAEncryption
61:b9:a5:28:38:89:2f:55:06:12:d3:65:db:1e:97:6f:83:5b:
17:80:a4:3f:f5:8d:74:45:36:38:17:b1:58:2b:a7:3d:01:8b:
ea:05:b2:71:0a:8f:46:c5:fc:b1:3a:ba:3e:9a:97:58:c4:e2:
8e:3c:fc:bf:5e:d1:e3:4e:a8:9e:44:b2:f1:6e:df:c0:36:45:
b8:7d:23:1b:df:ae:5f:93:80:4e:27:0d:c4:ce:d6:23:e8:a6:
f6:23:0d:0e:15:a0:0f:5f:e0:4f:45:21:99:c2:ba:a6:a1:40:
37:2d:bc:6f:69:8a:35:55:82:1c:89:aa:ea:c9:f8:2a:27:49:
33:f2:42:b7:39:58:f0:29:aa:4c:2d:96:29:42:34:98:6a:55:
26:e7:96:6e:46:87:8a:df:4a:cb:58:a7:0d:23:00:d9:f4:05:
40:c1:8e:2e:f0:42:ae:f3:49:74:db:a1:38:80:8c:f7:fb:45:
19:49:93:1a:17:9f:f3:6b:cf:2e:17:10:82:de:0f:a6:af:9e:
25:bb:00:64:e2:58:37:01:2f:17:0a:2c:d4:87:90:1a:27:b2:
a4:eb:75:c4:d0:52:25:26:eb:72:ad:07:e3:61:aa:73:0f:28:
2e:04:12:68:bf:a4:8b:08:61:0d:51:d6:0b:4c:69:ad:b6:80:
b0:c8:c9:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:50 2024 by rpki-client on console-ams.rpki-client.org