Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/VXtgoWhzuiYtm-QfO1zAyK1Asy4.roa
File: VXtgoWhzuiYtm-QfO1zAyK1Asy4.roa (raw, json)
Hash identifier: dt6vLg4kOpHrNGjZDh4XtONdTDvj8WNML9qqTCR7I1I=
Subject key identifier: 55:7B:60:A1:68:73:BA:26:2D:9B:E4:1F:3B:5C:C0:C8:AD:40:B3:2E
Certificate issuer: /CN=860d9f01a98b514ebd3c2723d7f7eb448326f5e2
Certificate serial: 018CC492F30E4CBA1CF35B88E54183C77C7C
Authority key identifier: 86:0D:9F:01:A9:8B:51:4E:BD:3C:27:23:D7:F7:EB:44:83:26:F5:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hg2fAamLUU69PCcj1_frRIMm9eI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/VXtgoWhzuiYtm-QfO1zAyK1Asy4.roa
Signing time: Mon 01 Jan 2024 10:30:13 +0000
ROA not before: Mon 01 Jan 2024 10:30:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13020
IP address blocks: 151.217.0.0/17 maxlen: 17
2001:67c:20a1::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:f3:0e:4c:ba:1c:f3:5b:88:e5:41:83:c7:7c:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=860d9f01a98b514ebd3c2723d7f7eb448326f5e2
Validity
Not Before: Jan 1 10:30:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=557b60a16873ba262d9be41f3b5cc0c8ad40b32e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:06:71:00:a3:7f:60:91:a8:c0:90:1a:15:9c:
c3:5c:4a:02:43:5e:3a:9a:93:7d:f5:3f:d9:81:90:
62:72:8f:30:a6:c7:02:6b:e7:6f:a6:4a:5d:12:19:
0d:38:64:cc:da:d7:06:64:05:1e:55:4d:1a:69:65:
59:be:74:88:8f:54:ed:4c:61:7f:ec:05:6a:ec:52:
7b:14:3c:3d:bf:64:97:c5:cd:c4:9b:73:4b:d8:f2:
f9:16:4e:32:a3:30:02:58:4c:3c:62:f4:74:66:c4:
05:d2:04:31:48:24:f1:8e:ec:8f:55:af:38:ca:34:
5a:74:96:1f:3d:2a:fc:00:41:37:b0:73:3b:88:5b:
c1:13:52:6f:db:0a:b4:3d:5c:9e:03:70:25:e9:4a:
79:a5:e6:c5:f6:02:a2:a7:81:5d:67:d7:cf:ae:4f:
81:75:71:25:49:31:94:77:10:79:a6:18:f3:78:e8:
2b:7c:59:06:b8:53:eb:30:b2:cd:6b:aa:f8:26:85:
f2:b7:89:35:0e:ba:d4:3e:80:9e:82:1b:ed:fe:a0:
8a:37:ba:aa:20:be:fe:b0:49:3b:ca:9c:58:1a:c2:
2e:67:b4:4d:b1:22:29:6c:5b:16:0b:9b:69:01:0e:
cb:67:8b:80:d0:dd:88:cd:ff:d3:2d:10:6d:d9:e6:
fb:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:7B:60:A1:68:73:BA:26:2D:9B:E4:1F:3B:5C:C0:C8:AD:40:B3:2E
X509v3 Authority Key Identifier:
keyid:86:0D:9F:01:A9:8B:51:4E:BD:3C:27:23:D7:F7:EB:44:83:26:F5:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hg2fAamLUU69PCcj1_frRIMm9eI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/VXtgoWhzuiYtm-QfO1zAyK1Asy4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.217.0.0/17
IPv6:
2001:67c:20a1::/48
Signature Algorithm: sha256WithRSAEncryption
59:cb:de:bc:30:d8:59:2d:04:26:5f:bb:3a:6d:ae:8f:fa:85:
73:ed:1c:1f:d9:41:9c:fa:5c:dc:7c:34:32:6a:f5:c7:1d:e8:
d0:f5:59:36:4a:c0:9d:1d:72:40:0e:fe:b3:1a:20:d7:b1:62:
86:45:42:ca:9c:9f:d7:14:7b:cd:3b:64:4a:ce:c9:a2:4c:a3:
cc:e7:13:d1:74:77:a5:15:bd:d4:d8:40:7c:24:00:6e:a2:68:
19:b1:05:45:3b:4e:cd:2a:4b:8e:2b:f9:e5:e8:85:11:d6:fb:
34:93:df:88:42:53:db:63:6b:d7:25:1c:29:19:90:36:72:5f:
85:0d:e6:79:e6:03:5a:3c:bc:1d:c6:b2:57:b8:6c:b0:c3:13:
0b:54:c4:a6:44:90:22:50:54:21:a8:be:85:98:43:1d:20:08:
78:0a:a9:1e:cd:39:24:08:3e:5a:2a:14:22:19:78:b8:62:09:
1e:35:18:7d:aa:29:0d:b9:05:d1:66:51:3b:8f:2d:8a:1b:12:
2f:4f:1a:b0:0e:63:f5:2c:07:09:7e:4d:ae:d7:f8:26:9f:66:
f9:4c:62:87:58:b6:c8:32:b2:82:cf:4c:82:65:7c:db:5c:6b:
ac:cf:98:e1:4b:06:a7:0a:a6:61:ee:f3:42:c0:4e:da:92:13:
58:36:0d:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:33:30 2024 by rpki-client on console-fra.rpki-client.org