Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/VAcAZYyAUkW1lq69i_QRWe5364w.roa
File: VAcAZYyAUkW1lq69i_QRWe5364w.roa (raw, json)
Hash identifier: uu5TUB7O7xvEZP8aEue4xgEQ7Mm8wxLuFhHoEtBz+wI=
Subject key identifier: 54:07:00:65:8C:80:52:45:B5:96:AE:BD:8B:F4:11:59:EE:77:EB:8C
Certificate issuer: /CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Certificate serial: 018877298FD5155F4AF3030C473597E05217
Authority key identifier: 6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/VAcAZYyAUkW1lq69i_QRWe5364w.roa
Signing time: Thu 01 Jun 2023 13:33:12 +0000
ROA not before: Thu 01 Jun 2023 13:33:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207713
IP address blocks: 194.113.34.0/24 maxlen: 24
45.150.109.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:77:29:8f:d5:15:5f:4a:f3:03:0c:47:35:97:e0:52:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Validity
Not Before: Jun 1 13:33:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=540700658c805245b596aebd8bf41159ee77eb8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e6:1c:81:a2:de:a5:b9:e4:e8:6f:01:61:ca:
99:4c:40:3a:74:8f:d8:7a:f1:e3:b8:d8:5f:05:9c:
3b:37:1d:17:04:ce:f1:e8:70:35:2a:9b:5c:92:fc:
bf:8f:e2:72:9c:86:31:71:16:9a:b6:31:51:bf:37:
4d:0c:82:22:ba:08:1a:2b:ad:ea:55:be:98:25:fd:
07:a5:67:38:18:4c:6a:09:08:a6:86:7a:1e:2e:11:
bf:49:95:a8:8d:87:ef:b6:66:2f:c1:4e:81:74:15:
7f:29:ba:1b:7a:b9:44:fb:13:86:0e:48:b4:63:33:
b6:81:bc:b7:07:ed:4d:0a:50:58:1b:10:d2:43:e1:
65:d9:9a:d5:d7:b7:e6:cb:cd:b7:a1:92:71:6f:95:
33:0a:03:c7:77:37:14:cc:24:1f:47:f5:f7:9e:cc:
94:88:63:c8:5e:59:4f:77:92:61:2f:14:d1:b3:b3:
e9:19:68:9f:ac:c5:64:71:2f:e3:ca:80:b0:5a:58:
ad:e5:5f:1b:81:be:24:7e:ad:b7:b3:65:7f:9c:a2:
78:46:3d:64:a3:b5:00:f1:70:75:e1:74:fd:cd:4f:
f0:99:23:a8:70:bd:19:ef:70:0f:7a:dd:76:ad:7b:
48:53:e6:60:6e:5a:6f:04:40:79:27:e9:4d:9d:2b:
29:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:07:00:65:8C:80:52:45:B5:96:AE:BD:8B:F4:11:59:EE:77:EB:8C
X509v3 Authority Key Identifier:
keyid:6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/VAcAZYyAUkW1lq69i_QRWe5364w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.109.0/24
194.113.34.0/24
Signature Algorithm: sha256WithRSAEncryption
25:4f:22:70:db:a7:56:6e:9c:5b:71:00:86:8b:53:2f:53:af:
75:6e:e1:1e:96:0f:48:fc:e6:2d:7a:bb:b6:85:e0:6f:92:98:
b7:84:96:1c:aa:8a:a9:9e:df:aa:02:aa:32:67:3e:ed:47:5e:
5d:01:2d:96:6e:db:a9:6d:18:6c:07:b6:e9:c8:64:35:27:d9:
1c:b6:46:c3:44:fa:52:60:1b:26:e8:1b:a3:36:cf:5f:33:f4:
9e:99:2b:3c:20:13:77:b5:2a:4a:d4:40:5a:a4:ea:31:ee:83:
e8:5c:1c:c9:5c:c0:4e:e0:e0:2c:cc:cc:82:7e:44:4c:ac:99:
74:08:2b:28:c5:ec:ad:3f:d7:fb:4a:7f:79:05:bb:1e:39:e6:
d6:cf:3b:50:5d:e0:a9:8a:6f:08:c7:1f:63:da:9c:6b:1d:f6:
ae:0b:0e:b7:49:38:f0:1d:e4:5a:aa:c3:fc:7d:7d:69:3a:ad:
eb:10:0a:a8:c1:ac:1b:5b:bc:b8:09:a5:37:69:c9:59:88:07:
47:46:15:ab:06:1a:63:dc:57:9b:41:84:6b:7e:be:35:96:6f:
29:94:b3:87:a0:d2:16:28:02:f9:7e:bd:c9:2f:a1:13:ce:86:
58:c6:28:fe:bc:c6:af:3e:49:d4:08:2a:4c:50:0f:c5:e3:89:
ad:d6:82:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:37 2024 by rpki-client on console-fra.rpki-client.org