Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/joqdw6EJf690vyw7aSoBwjx9E0I.roa
File: joqdw6EJf690vyw7aSoBwjx9E0I.roa (raw, json)
Hash identifier: FFdKXNmJOMO/Nf5bNJfaq02N+MJRAPy/jdCYdj/vbms=
Subject key identifier: 8E:8A:9D:C3:A1:09:7F:AF:74:BF:2C:3B:69:2A:01:C2:3C:7D:13:42
Certificate issuer: /CN=67955b1aa1c0284d2843b96f26c5fe751e66946f
Certificate serial: 0186B87945C1C8F2C1D6658C49E9267D7AB5
Authority key identifier: 67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/joqdw6EJf690vyw7aSoBwjx9E0I.roa
Signing time: Mon 06 Mar 2023 19:50:00 +0000
ROA not before: Mon 06 Mar 2023 19:50:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34665
IP address blocks: 91.238.96.0/24 maxlen: 24
91.193.110.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:b8:79:45:c1:c8:f2:c1:d6:65:8c:49:e9:26:7d:7a:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67955b1aa1c0284d2843b96f26c5fe751e66946f
Validity
Not Before: Mar 6 19:50:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8e8a9dc3a1097faf74bf2c3b692a01c23c7d1342
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:cc:65:ed:8e:06:4a:b4:0e:50:10:24:69:d2:
64:e3:e6:bd:80:f8:79:76:13:20:4e:c2:d9:c1:eb:
e0:df:46:76:4c:6b:66:2e:9c:68:12:65:1f:f3:87:
84:be:6c:e2:ab:f5:18:74:fa:26:3a:6a:5f:72:89:
76:95:32:36:8c:d0:28:fb:4c:37:fe:33:93:86:c2:
3a:3b:a5:47:f3:c0:c8:42:ce:16:f6:0c:cc:82:f7:
c9:0a:6f:8b:db:16:19:64:b0:14:7e:cc:5c:40:a6:
72:0f:59:fa:8b:fe:d0:e1:87:b9:60:00:70:a6:e2:
e8:67:00:f9:19:69:6c:21:93:f4:bd:aa:2e:c3:52:
15:dc:24:d0:78:a5:e5:9d:ad:98:76:5d:1f:e3:70:
ff:2a:57:df:35:f4:83:73:9c:09:04:23:da:07:ea:
8b:c8:94:ff:26:f1:58:a1:37:5e:72:15:ed:3e:c2:
86:cf:80:eb:ca:68:d8:58:3a:fe:38:72:29:53:1f:
8c:1a:18:15:67:1b:55:79:5f:05:ae:e5:e9:52:6b:
a5:c7:6c:20:86:c8:8b:96:73:d0:dc:80:46:9b:6d:
3e:83:ef:7e:37:f5:50:f4:12:48:3a:3a:8d:00:93:
31:66:1e:07:2a:75:44:4c:56:ff:03:4e:d0:9d:a7:
e5:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:8A:9D:C3:A1:09:7F:AF:74:BF:2C:3B:69:2A:01:C2:3C:7D:13:42
X509v3 Authority Key Identifier:
keyid:67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/joqdw6EJf690vyw7aSoBwjx9E0I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.193.110.0/24
91.238.96.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:8e:f8:04:24:b1:97:e6:03:12:94:b8:c8:3a:ab:8a:b2:b9:
c4:e2:9a:0a:8c:6c:b0:9e:30:a7:e7:b8:7b:c4:12:e2:c4:46:
01:14:a3:83:6d:fc:43:5d:63:9c:d5:48:8c:e8:62:2f:92:07:
91:be:c1:d3:c1:ae:90:f4:bd:c9:aa:32:39:ad:47:db:4e:44:
62:ce:72:74:a2:6e:74:18:dc:6d:03:a4:2f:f2:03:25:ca:c6:
64:2e:e0:9d:5d:c4:bf:1e:bb:dd:b4:84:cf:8d:83:d5:2c:76:
4c:4e:dc:52:d3:95:33:0b:d3:d8:7e:d7:46:b6:c3:09:3a:6f:
bd:ce:fc:29:72:5f:a9:0c:2a:32:ab:7d:f7:c6:7b:14:ac:98:
0a:a0:3f:e0:5c:ce:ba:ef:f9:1a:b1:de:aa:7c:e0:fe:0b:04:
96:7a:69:5a:cb:b7:74:c2:2d:a9:a2:7e:f0:d7:f0:6f:d0:52:
34:78:7d:ab:45:0d:a3:fc:58:1c:db:14:d7:4d:5d:52:58:d5:
74:a1:25:c1:03:fd:aa:cc:72:5d:b6:01:b3:7a:38:c1:b8:cd:
2a:f1:90:32:ee:5c:93:2f:89:4b:70:ca:1e:bc:84:23:c2:65:
cd:2f:23:b7:2c:35:6f:09:6f:71:ca:c7:9a:3f:98:6e:0d:5e:
04:c4:3a:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:45 2023 by rpki-client on console-ams.rpki-client.org