Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/pUcQZqQNeI6-KCsDXvOl00abA6A.roa
File: pUcQZqQNeI6-KCsDXvOl00abA6A.roa (raw, json)
Hash identifier: UWuy+sHNekByJPo1FbED3J+8iSZDJ9wscTub5Dt7CK8=
Subject key identifier: A5:47:10:66:A4:0D:78:8E:BE:28:2B:03:5E:F3:A5:D3:46:9B:03:A0
Certificate issuer: /CN=c38280c5300b74888ac7eb4bfa6417d9a2e7b0be
Certificate serial: 018F6245B2A1C2B64E32573C9E32DB3BC7C9
Authority key identifier: C3:82:80:C5:30:0B:74:88:8A:C7:EB:4B:FA:64:17:D9:A2:E7:B0:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w4KAxTALdIiKx-tL-mQX2aLnsL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/pUcQZqQNeI6-KCsDXvOl00abA6A.roa
Signing time: Fri 10 May 2024 11:31:25 +0000
ROA not before: Fri 10 May 2024 11:31:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62240
IP address blocks: 185.128.43.0/24 maxlen: 24
193.163.17.0/24 maxlen: 24
194.104.143.0/24 maxlen: 24
2a11:b687::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:62:45:b2:a1:c2:b6:4e:32:57:3c:9e:32:db:3b:c7:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c38280c5300b74888ac7eb4bfa6417d9a2e7b0be
Validity
Not Before: May 10 11:31:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a5471066a40d788ebe282b035ef3a5d3469b03a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:17:85:89:3c:03:d5:50:ff:23:d7:2d:54:10:
3c:a4:49:ab:b6:e1:b7:41:ef:3a:39:bc:b1:5d:b3:
41:36:92:d9:a5:44:40:70:f2:73:5b:73:d0:d4:35:
f7:b2:d0:1e:8a:47:55:09:9b:db:49:6a:a7:56:f9:
f8:ab:06:a5:a7:d6:c3:b0:74:28:36:f3:de:d5:3f:
c9:a8:7e:45:18:ed:e7:6c:a0:d6:9f:04:4f:d3:29:
30:ce:0f:e2:0c:af:0e:ba:9a:3a:7e:f0:02:f0:90:
76:a0:fe:7d:0d:b3:89:66:01:30:e5:c2:5a:f9:c7:
bb:78:74:6d:4b:00:ca:05:56:29:e2:1d:db:eb:1f:
aa:9d:18:6a:0e:95:de:36:c9:39:4e:85:d3:cc:ce:
09:ed:de:c7:e2:47:61:79:87:03:03:e4:86:fc:f1:
a1:78:6a:d9:7d:7c:87:0e:68:53:62:7a:15:34:3d:
74:86:09:52:1f:d1:2d:f6:45:13:ca:b1:6b:0f:0d:
fc:08:1e:ea:6a:93:99:84:37:95:49:58:af:64:55:
ce:7e:41:8b:18:c8:8b:d2:0e:23:e5:3f:27:04:06:
31:19:e0:3d:48:38:50:ed:61:51:c7:d3:3e:a6:e4:
63:bf:e6:24:40:39:56:08:f1:b1:94:0c:12:b9:1e:
fb:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:47:10:66:A4:0D:78:8E:BE:28:2B:03:5E:F3:A5:D3:46:9B:03:A0
X509v3 Authority Key Identifier:
keyid:C3:82:80:C5:30:0B:74:88:8A:C7:EB:4B:FA:64:17:D9:A2:E7:B0:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w4KAxTALdIiKx-tL-mQX2aLnsL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/pUcQZqQNeI6-KCsDXvOl00abA6A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/w4KAxTALdIiKx-tL-mQX2aLnsL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.128.43.0/24
193.163.17.0/24
194.104.143.0/24
IPv6:
2a11:b687::/32
Signature Algorithm: sha256WithRSAEncryption
7e:5f:60:3f:4b:93:b9:79:d1:2f:d8:5b:4f:fc:4d:92:53:43:
f3:c4:22:86:20:41:06:ce:85:29:3e:eb:02:7f:4f:40:f8:f1:
6b:b4:98:02:a5:9f:e5:b8:1c:92:78:3a:ce:eb:f0:85:de:fe:
72:7c:f4:8e:61:64:f8:b2:14:ca:1f:01:04:d7:af:67:fc:a8:
da:57:76:18:07:c7:9a:0b:c4:2f:61:73:cd:b5:18:20:8b:38:
17:c6:a7:9f:80:a5:ee:34:4f:eb:27:e6:fb:61:a4:9b:3b:61:
e1:69:13:7f:c3:bc:c9:d7:d6:3a:e5:5e:d6:00:a5:be:93:61:
45:8a:81:e9:59:a4:d3:78:18:aa:1d:3b:fd:d5:da:fd:17:c5:
f7:58:1e:1b:1f:1f:cc:42:bc:7a:30:e7:88:51:9c:9b:a8:3c:
3a:26:36:32:26:c7:df:0e:71:81:aa:c1:81:46:63:3b:2f:38:
96:96:c2:29:a5:5a:6a:91:d8:1b:2b:13:47:28:ce:34:48:5e:
67:0c:e8:9c:46:9d:39:20:51:af:f1:20:bc:70:04:07:f4:31:
34:9e:9a:aa:ad:b2:02:ce:2d:39:15:d8:48:bb:d2:43:65:60:
4e:4b:c6:eb:5c:bb:f6:42:96:f2:83:4e:03:02:33:bd:86:93:
d7:fb:dc:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:31 2024 by rpki-client on console-fra.rpki-client.org