Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/72435b-7e7e-447b-ac24-982c429d4156/1/SfebbWxmK4JNgnQJlRnzKRcHzMc.roa
File: SfebbWxmK4JNgnQJlRnzKRcHzMc.roa (raw, json)
Hash identifier: kFmzbBRilTSeX42QQuTeBMKJaBdmn8oAMg0V0EhfVik=
Subject key identifier: 49:F7:9B:6D:6C:66:2B:82:4D:82:74:09:95:19:F3:29:17:07:CC:C7
Certificate issuer: /CN=04d9bc828a566b06af4d765dfb5da5bc1d76c725
Certificate serial: 018CC56EC231744A78904829EBC9AF81618A
Authority key identifier: 04:D9:BC:82:8A:56:6B:06:AF:4D:76:5D:FB:5D:A5:BC:1D:76:C7:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BNm8gopWawavTXZd-12lvB12xyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/72435b-7e7e-447b-ac24-982c429d4156/1/SfebbWxmK4JNgnQJlRnzKRcHzMc.roa
Signing time: Mon 01 Jan 2024 14:30:19 +0000
ROA not before: Mon 01 Jan 2024 14:30:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59450
IP address blocks: 91.197.32.0/22 maxlen: 22
193.108.80.0/21 maxlen: 21
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:c2:31:74:4a:78:90:48:29:eb:c9:af:81:61:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04d9bc828a566b06af4d765dfb5da5bc1d76c725
Validity
Not Before: Jan 1 14:30:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=49f79b6d6c662b824d8274099519f3291707ccc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:d2:a2:de:12:af:83:9b:50:5c:c5:5c:f5:89:
62:29:6b:84:e0:bb:68:50:30:6c:9a:f1:cb:17:32:
57:ce:1b:71:c8:f0:dd:5e:a0:ad:ab:3f:5c:1a:6a:
4e:cf:83:e2:3a:b5:2e:40:97:db:d6:34:61:47:5f:
68:61:27:6e:87:93:9e:14:5e:7a:36:cb:51:2b:d5:
4f:18:73:3e:32:40:bf:5f:fb:3f:94:cf:b9:9c:12:
b7:8f:08:d8:71:f8:8d:e1:9c:17:79:f8:89:ce:42:
22:94:09:6e:2c:f4:1d:7c:fa:5a:a9:f6:66:82:de:
07:41:05:69:fc:8f:73:d5:a0:7c:60:8e:3b:3f:8f:
6a:04:90:c7:be:cb:a0:28:f1:e5:58:22:04:3e:5a:
77:74:4b:6d:9b:ca:12:e7:a7:6a:63:7c:20:67:1f:
21:44:2a:5a:fc:3c:6c:c8:7e:c0:80:01:54:85:b3:
5b:fe:e6:05:aa:bd:4c:5c:ca:8f:93:23:da:99:d0:
16:7e:10:03:1f:03:5b:17:37:d3:68:b3:ce:92:a7:
f8:3b:1c:d3:ae:72:79:30:79:8e:60:1d:50:06:81:
3c:b0:ec:d4:69:96:e9:ee:6e:57:66:20:98:b5:8b:
eb:92:02:76:59:a9:09:94:bc:66:f4:31:6f:8c:ea:
da:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:F7:9B:6D:6C:66:2B:82:4D:82:74:09:95:19:F3:29:17:07:CC:C7
X509v3 Authority Key Identifier:
keyid:04:D9:BC:82:8A:56:6B:06:AF:4D:76:5D:FB:5D:A5:BC:1D:76:C7:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BNm8gopWawavTXZd-12lvB12xyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/72435b-7e7e-447b-ac24-982c429d4156/1/SfebbWxmK4JNgnQJlRnzKRcHzMc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/72435b-7e7e-447b-ac24-982c429d4156/1/BNm8gopWawavTXZd-12lvB12xyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.197.32.0/22
193.108.80.0/21
Signature Algorithm: sha256WithRSAEncryption
18:e6:b6:b0:b4:6e:61:97:6d:65:73:b8:5a:a6:6b:17:22:14:
0a:41:ae:92:43:cf:b1:fb:a5:75:c1:db:74:97:25:49:90:60:
ef:a7:cf:79:27:b8:c8:ce:09:3d:27:57:6a:e9:40:f7:9a:d7:
b5:23:8b:e8:74:50:b0:bd:07:62:f6:38:7f:68:47:d6:8c:5a:
6f:64:d6:1f:a1:d1:71:a8:6c:62:4a:48:6d:a9:4c:7c:a8:a0:
19:eb:a8:e6:08:07:e8:90:6c:b7:48:e0:e3:69:88:cc:04:27:
71:57:d2:9f:1e:00:38:9c:48:0a:31:67:17:ba:44:19:e6:8a:
7e:38:33:ed:4b:f8:1d:71:84:c3:e8:67:54:79:48:e4:99:21:
4e:c5:ca:3c:27:ef:92:9b:ec:92:d1:66:ff:7a:27:a8:4c:8d:
d2:bf:5f:ae:07:be:3c:9f:8f:bc:97:96:dc:a0:22:68:3f:ac:
9c:f1:09:10:56:d1:ef:e2:a0:ba:89:d8:49:d0:b5:0b:c3:a5:
54:85:92:f6:6e:32:c4:7c:4d:b8:f1:94:7a:24:73:25:cb:ef:
83:a0:8a:03:f6:01:10:b6:f8:a3:05:c5:5c:7a:2f:bd:12:c8:
20:17:82:5f:7f:2f:4c:3a:b6:2c:17:8f:e7:18:fe:b6:95:a1:
a0:ae:9d:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:20 2024 by rpki-client on console-ams.rpki-client.org