Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IZgB1sPUcO0IfHms3eLRUViBLXs.roa
File: IZgB1sPUcO0IfHms3eLRUViBLXs.roa (raw, json)
Hash identifier: o5UWIHStVPQe7/zsVC1oP5oJF2DK5Y/SqppnbuVWBlU=
Subject key identifier: 21:98:01:D6:C3:D4:70:ED:08:7C:79:AC:DD:E2:D1:51:58:81:2D:7B
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0187FFE8EE1D923D61F7DF71768728D41066
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IZgB1sPUcO0IfHms3eLRUViBLXs.roa
Signing time: Tue 09 May 2023 09:47:48 +0000
ROA not before: Tue 09 May 2023 09:47:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213200
IP address blocks: 171.22.31.0/24 maxlen: 24
84.21.173.0/24 maxlen: 24
87.121.59.0/24 maxlen: 24
176.125.255.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:ff:e8:ee:1d:92:3d:61:f7:df:71:76:87:28:d4:10:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: May 9 09:47:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=219801d6c3d470ed087c79acdde2d15158812d7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:4d:35:c4:84:2a:a7:93:a8:dd:6f:88:ba:dc:
08:8b:2f:dd:e2:af:9f:24:5c:33:4b:23:7e:66:f4:
51:5d:20:fb:2b:1b:97:63:7f:8f:08:6c:04:5d:49:
c8:e8:07:e2:56:30:f3:73:cd:ed:5e:d4:e1:5b:c5:
57:1e:1a:29:40:44:40:66:60:50:de:60:cc:ed:a0:
ec:3a:69:fd:b9:cf:6f:94:f3:d7:61:1c:c2:5d:6e:
36:6b:cb:be:9e:dd:d7:f5:3b:9f:66:34:74:02:fe:
1d:5f:4d:2c:36:13:52:6e:6c:be:a9:92:bf:f7:4f:
23:ee:65:d0:5a:2b:c4:0e:04:4d:d9:90:2b:2d:54:
d6:1d:e3:89:64:14:12:c2:8b:86:b4:7b:d0:69:2b:
04:47:12:f1:66:ae:12:27:f6:28:f7:b0:44:64:c4:
e1:b0:2b:17:bd:46:d1:0f:00:00:41:c4:aa:5e:be:
d5:92:00:aa:61:f1:0b:24:bd:dd:f0:8e:89:b8:1f:
15:c7:a8:a4:7c:27:d3:ea:3a:84:66:cd:15:b7:8b:
5e:fd:a6:69:b7:88:02:49:65:fa:e0:39:93:aa:be:
d3:a5:ef:3b:17:a3:d1:91:cc:d9:1f:ee:1c:ea:ea:
08:dc:bc:b1:55:d3:07:d2:13:6d:b5:f4:28:92:8a:
19:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:98:01:D6:C3:D4:70:ED:08:7C:79:AC:DD:E2:D1:51:58:81:2D:7B
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IZgB1sPUcO0IfHms3eLRUViBLXs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.21.173.0/24
87.121.59.0/24
171.22.31.0/24
176.125.255.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:45:3c:71:bf:63:9f:08:ec:f9:37:73:38:e7:18:3f:f6:a0:
a8:64:34:96:b6:9d:c0:99:05:7d:4f:0e:47:98:77:62:b6:09:
fe:33:7f:89:06:03:fb:f3:2b:31:83:72:94:61:48:28:5e:33:
22:cf:5a:fb:eb:ce:82:56:06:62:80:3e:d8:8f:31:d8:47:06:
cb:bc:6c:11:f3:04:50:20:85:a6:c9:8b:3e:51:d8:b7:6a:69:
b1:e3:7e:7a:0c:be:9a:65:96:91:23:e7:fc:76:7f:d2:7d:18:
ae:7a:2a:61:10:e2:cb:89:5f:fa:3f:21:07:63:cd:10:be:db:
2f:99:cd:0e:ec:b9:ac:ab:dc:64:2d:35:68:7f:bf:14:76:17:
04:f4:63:c9:0b:b7:ab:f6:9e:ed:d2:5c:ec:82:c6:c8:0d:96:
1a:51:f5:90:0c:76:7d:25:87:b1:8c:06:75:0e:4a:7d:12:97:
f9:dc:49:9a:d5:da:49:8b:8c:67:28:a9:65:7d:35:1d:6a:06:
e0:48:12:cc:31:fa:6c:5f:6f:76:ad:cd:27:f6:de:5f:54:32:
26:c9:2a:17:f2:34:46:02:87:59:ea:dd:d1:43:47:85:be:25:
3e:94:fd:ac:00:6a:a2:15:c3:de:2e:fa:41:0d:ee:f2:54:c6:
75:f5:4a:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:04 2024 by rpki-client on console-fra.rpki-client.org