Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/qVkwGMzCK_eJ2ObA9XimXEMZn_4.roa
File: qVkwGMzCK_eJ2ObA9XimXEMZn_4.roa (raw, json)
Hash identifier: HYEGwrittuwHztHXsQXZW7uak+h+tNrHSlw5V/lfBBY=
Subject key identifier: A9:59:30:18:CC:C2:2B:F7:89:D8:E6:C0:F5:78:A6:5C:43:19:9F:FE
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 08107E64
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/qVkwGMzCK_eJ2ObA9XimXEMZn_4.roa
Signing time: Sat 01 Jan 2022 16:03:19 +0000
ROA not before: Sat 01 Jan 2022 16:03:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9009
IP address blocks: 80.64.218.0/23 maxlen: 23
37.221.126.0/23 maxlen: 23
213.185.90.0/23 maxlen: 23
46.161.210.0/23 maxlen: 23
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 135298660 (0x8107e64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Jan 1 16:03:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a9593018ccc22bf789d8e6c0f578a65c43199ffe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:05:59:2f:ec:cd:76:98:d7:b1:8a:aa:0d:bc:
1a:2e:a6:76:af:94:80:fa:f0:91:68:84:7f:8c:e7:
1f:1f:9d:22:1f:a6:7b:6c:52:66:d0:2c:3f:82:e2:
59:6c:20:3f:00:ce:ee:b2:ac:53:0b:c1:0e:87:4d:
93:c6:d0:53:e9:2c:f4:d1:28:d9:34:70:a2:ae:dd:
04:a2:87:c9:f0:a2:f6:db:07:29:d2:a9:6e:8b:5d:
a1:d1:9b:37:51:67:9a:f0:ca:c9:c5:85:4c:90:a8:
92:1d:05:dd:ba:85:f8:80:2b:1f:ad:66:c3:3c:da:
53:04:26:5d:d0:b0:7e:3f:ef:c9:55:3b:98:45:0f:
47:1d:38:57:4b:c4:2b:92:ce:1a:ee:bf:b8:05:2e:
a3:d1:b0:fb:8c:40:ed:50:de:39:31:cd:a8:0a:00:
d0:7c:13:a3:ac:97:c6:bc:0e:fc:29:60:1a:6c:c5:
92:c2:ab:af:d9:74:ab:97:a6:2b:35:d7:33:7e:cf:
ca:43:b3:e1:f7:97:6f:4c:fc:97:8a:10:be:f1:a9:
0b:fc:9c:aa:12:d7:0c:f8:5d:dd:ca:e6:60:bd:ae:
f9:68:21:09:97:3a:f7:7e:44:a4:b4:ea:30:29:4d:
52:06:b9:ae:b5:29:80:66:cd:b6:95:fa:13:16:27:
9a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:59:30:18:CC:C2:2B:F7:89:D8:E6:C0:F5:78:A6:5C:43:19:9F:FE
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/qVkwGMzCK_eJ2ObA9XimXEMZn_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.126.0/23
46.161.210.0/23
80.64.218.0/23
213.185.90.0/23
Signature Algorithm: sha256WithRSAEncryption
6b:b2:de:59:40:58:b0:2a:5d:24:74:ee:11:f3:de:d3:62:c0:
6a:8e:b5:fd:f6:69:fd:fa:dc:5b:a9:21:cb:ad:be:a8:fc:0d:
10:c9:3a:7a:5d:46:2d:80:44:ae:e6:2a:1f:4e:e0:a0:d8:f9:
d9:85:c4:7d:c6:22:af:f5:de:f7:7f:8d:6d:29:53:59:c3:02:
27:0d:d3:b0:5f:2a:ea:aa:03:c3:ca:7b:b8:4b:97:5f:a3:ae:
46:01:d2:06:93:a5:91:74:e5:77:0d:69:74:00:5e:6e:db:7b:
22:58:34:61:8b:75:76:28:ec:6c:45:72:00:3a:8f:1d:ae:a4:
c7:62:ea:4d:e5:9c:59:fe:e3:8b:2a:f8:8c:29:33:e5:11:1d:
94:a2:a6:66:53:b8:70:40:dc:88:33:52:35:47:0c:19:b9:20:
c9:6f:5b:9c:46:8e:0c:54:23:f3:18:84:6d:eb:79:42:a2:f6:
a7:d6:5f:5e:2a:79:88:30:d1:1c:21:da:7e:cf:37:8b:d7:18:
4c:a3:bb:85:61:a9:1c:7c:dd:6f:d2:d4:d4:dd:f4:7d:e2:f8:
42:1f:fe:be:cc:ce:a5:44:e7:cf:eb:54:88:a5:5d:33:79:06:
14:79:18:bd:74:bd:33:d1:59:c8:dd:ea:c3:43:23:01:3f:66:
87:c6:0e:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:25 2024 by rpki-client on console-fra.rpki-client.org