Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/6fuvZ4qXYFTxvqKkquCB27SfHl0.roa
File: 6fuvZ4qXYFTxvqKkquCB27SfHl0.roa (raw, json)
Hash identifier: OZLIk07MFEoSHEGEw09JeSfF79za/w+ZbTjCPcy0acE=
Subject key identifier: E9:FB:AF:67:8A:97:60:54:F1:BE:A2:A4:AA:E0:81:DB:B4:9F:1E:5D
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018A73B19D2B3A03DF2F7BFC162970469B5F
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/6fuvZ4qXYFTxvqKkquCB27SfHl0.roa
Signing time: Fri 08 Sep 2023 07:28:54 +0000
ROA not before: Fri 08 Sep 2023 07:28:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201021
IP address blocks: 194.49.86.0/24 maxlen: 24
45.151.91.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:73:b1:9d:2b:3a:03:df:2f:7b:fc:16:29:70:46:9b:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 8 07:28:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e9fbaf678a976054f1bea2a4aae081dbb49f1e5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:b8:25:a3:f2:80:3a:4a:75:3b:58:59:16:10:
eb:ba:57:13:0b:90:cd:98:31:0b:f0:31:03:8f:8b:
a3:ee:c6:ce:a8:07:9e:bb:25:d0:db:3a:56:10:20:
20:c1:6d:d3:eb:7f:2a:d7:08:05:4f:14:70:c3:a1:
c9:b5:10:87:47:bf:f7:8b:0c:7a:82:dc:f4:e4:d0:
ac:42:6c:64:31:c0:69:e6:1a:4a:42:e7:26:5d:f5:
f6:08:85:3c:ca:0a:74:24:ff:26:21:a1:c8:72:fa:
f6:2d:86:fe:b5:7d:93:4a:56:05:46:f7:ce:3a:09:
40:74:e7:3f:4e:7f:6f:e1:ec:83:99:5e:56:46:9c:
89:68:89:57:e5:7a:31:ef:c6:99:d2:6e:87:3e:f8:
e2:35:0a:58:69:ab:5a:b3:21:f6:d5:35:83:6a:c8:
ba:c2:f5:fa:26:43:90:da:94:7a:1b:bb:8e:b2:20:
f3:15:33:e2:77:d2:91:c0:86:aa:04:95:a8:5c:78:
f3:0d:79:27:40:4a:e1:7c:5f:f2:e2:87:14:93:03:
e9:5d:cf:7a:fe:c9:17:4e:bb:61:3b:d3:27:8d:95:
77:04:f2:64:3f:22:28:16:83:af:38:a1:1b:fe:a3:
9f:64:20:f8:5b:84:58:f9:f7:d2:99:a2:ee:37:80:
02:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:FB:AF:67:8A:97:60:54:F1:BE:A2:A4:AA:E0:81:DB:B4:9F:1E:5D
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/6fuvZ4qXYFTxvqKkquCB27SfHl0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.91.0/24
194.49.86.0/24
Signature Algorithm: sha256WithRSAEncryption
08:16:26:59:3a:0e:20:d7:16:21:77:ea:56:b0:4d:ae:a8:77:
06:e8:6f:61:dc:7c:d5:9b:89:07:90:3a:e2:83:7d:cb:d7:6c:
5f:f7:de:a5:7a:a5:be:6f:8c:e9:6d:20:31:9e:91:46:ea:76:
77:15:4e:bb:04:c3:44:da:b2:38:7e:31:b1:96:bb:ca:fb:df:
69:3d:22:3a:51:aa:3d:6d:6c:62:a0:a3:49:c8:e1:f2:2d:79:
96:79:aa:30:d8:b8:10:98:7b:48:ea:ca:6b:d3:19:37:e0:cd:
ed:77:ff:7f:37:c9:27:fb:c2:ae:24:88:03:fd:ed:5d:55:74:
55:4d:b7:3c:1e:86:9c:77:3e:55:63:db:f8:08:13:ff:b3:65:
53:0f:60:5d:f3:6d:ec:68:20:7e:98:ba:59:c7:9f:d1:b3:2d:
14:9b:07:16:3e:c4:0b:cd:64:15:e1:0a:85:16:5f:81:d0:46:
f2:e7:b2:7d:73:71:4e:cf:a5:9a:6b:e0:49:95:d9:f3:23:1c:
5a:83:24:28:6c:38:13:7f:48:1e:af:c3:3f:79:59:4d:31:12:
6e:5d:4f:ce:9a:cc:5a:7a:68:b6:dd:64:cb:16:71:24:1f:ad:
e5:45:92:b2:47:ee:92:fe:79:b7:e0:26:99:c1:ef:9b:e2:c2:
13:c6:23:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:59 2024 by rpki-client on console-fra.rpki-client.org