Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/2pXd7Fdnvemf25Cs7iMqWxFo5Io.roa
File: 2pXd7Fdnvemf25Cs7iMqWxFo5Io.roa (raw, json)
Hash identifier: heBxUeQ/4OEPBbBezRp9lJRX46o6MLJTmQ9ImXgf9FA=
Subject key identifier: DA:95:DD:EC:57:67:BD:E9:9F:DB:90:AC:EE:23:2A:5B:11:68:E4:8A
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018E7B07FF0A34D6F3DF965BB4E183D58B2A
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/2pXd7Fdnvemf25Cs7iMqWxFo5Io.roa
Signing time: Tue 26 Mar 2024 13:51:45 +0000
ROA not before: Tue 26 Mar 2024 13:51:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39521
IP address blocks: 94.156.125.0/24 maxlen: 24
164.40.188.0/24 maxlen: 24
164.40.189.0/24 maxlen: 24
164.40.190.0/24 maxlen: 24
164.40.191.0/24 maxlen: 24
194.31.223.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:7b:07:ff:0a:34:d6:f3:df:96:5b:b4:e1:83:d5:8b:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Mar 26 13:51:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=da95ddec5767bde99fdb90acee232a5b1168e48a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:31:67:5c:1d:50:99:4a:66:76:bd:6b:b2:1c:
1c:fb:52:97:dc:8a:2f:89:45:ae:38:bf:21:b8:f3:
8d:5e:97:57:7a:f2:1d:fa:8e:71:cb:f0:2f:bb:8a:
b8:1a:b6:12:44:0d:98:bf:3a:b0:d1:b6:73:bf:a0:
8c:a1:93:b9:ea:93:fe:3b:b4:e4:f6:2f:1e:0c:22:
1b:ea:43:d3:d2:97:2f:ae:27:ec:a3:37:6c:17:1f:
d0:9b:89:cf:0c:65:7d:a2:4c:2b:be:3f:d0:82:3b:
a0:8a:8e:cf:f9:32:2a:75:3e:73:14:c6:1a:56:7a:
d6:ef:18:db:71:52:00:f2:65:40:3d:36:9f:b5:7a:
af:67:4c:0d:6b:50:0c:3d:bb:55:21:78:84:9d:51:
ab:ee:b7:6b:e0:c8:8b:1b:f9:ef:8f:31:fe:c6:d8:
ce:73:67:16:5f:6c:24:31:be:19:9e:41:19:88:6d:
63:05:27:22:f8:e7:1a:1f:07:ba:5e:c4:54:f6:54:
ec:e3:36:af:2e:dd:a5:b0:fc:74:99:e4:28:77:7e:
8b:42:36:4f:7f:4b:e0:40:ee:a9:14:30:80:c7:e7:
9c:2d:d9:fc:bc:0a:fc:36:e3:58:0e:fd:84:c3:94:
84:31:0e:11:fe:68:c6:da:b2:16:0c:b6:39:19:e8:
4c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:95:DD:EC:57:67:BD:E9:9F:DB:90:AC:EE:23:2A:5B:11:68:E4:8A
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/2pXd7Fdnvemf25Cs7iMqWxFo5Io.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.156.125.0/24
164.40.188.0/22
194.31.223.0/24
Signature Algorithm: sha256WithRSAEncryption
13:1e:cb:1c:fa:a8:1c:5a:97:44:21:c0:e8:e8:d1:a7:bd:54:
37:3a:99:fd:dc:8b:32:d6:c2:5e:c5:f1:25:29:64:5b:9b:8e:
94:93:b9:96:dc:ab:c1:55:3b:f4:a1:c8:5e:39:dc:8e:d5:30:
b8:21:93:1d:7e:02:ec:58:bf:c6:89:52:18:1f:c8:26:e5:70:
c0:e3:25:c3:f9:1b:99:a2:cd:5d:34:be:61:0c:13:c5:b6:2e:
14:70:96:21:2f:0a:9e:9c:9a:63:09:7e:bd:09:c0:09:8a:8b:
4d:cc:c6:ac:bc:49:f9:17:8a:bc:5f:23:6d:32:05:b5:7f:2d:
eb:fe:9a:fb:76:ba:19:7c:10:66:75:38:22:d5:e4:64:10:bf:
ec:4b:28:9a:72:e3:db:e5:f8:e2:63:1b:94:5e:59:7d:9e:df:
9d:31:51:26:bb:5c:93:45:d8:02:81:87:4e:37:aa:66:25:13:
cc:2b:cb:2f:36:b6:23:6d:02:a4:b9:42:d9:19:63:20:e0:2c:
a4:ae:59:ba:97:1b:65:1d:3d:2f:4a:1e:ef:c1:dc:71:79:f5:
39:5a:f3:53:e8:dd:b1:09:2c:84:11:cd:95:ad:fe:27:6f:92:
3a:fb:c9:83:c5:ae:8a:02:64:b4:f0:03:7a:8e:f0:65:2b:46:
61:4c:24:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 18 08:01:50 2024 by rpki-client on console-ams.rpki-client.org