Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/TgpUeE6O4PS-UJfXf03R2KIlUIg.roa
File: TgpUeE6O4PS-UJfXf03R2KIlUIg.roa (raw, json)
Hash identifier: O3FfubsesZ4xpuztT+lJVQGkL0gq3f6nRZVJ1qpUFjc=
Subject key identifier: 4E:0A:54:78:4E:8E:E0:F4:BE:50:97:D7:7F:4D:D1:D8:A2:25:50:88
Certificate issuer: /CN=f05c6af3d022620f72c53b770e82e5c73ae5506d
Certificate serial: 018CC4930FD4DFC8B689515F5E182A2699AF
Authority key identifier: F0:5C:6A:F3:D0:22:62:0F:72:C5:3B:77:0E:82:E5:C7:3A:E5:50:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Fxq89AiYg9yxTt3DoLlxzrlUG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/TgpUeE6O4PS-UJfXf03R2KIlUIg.roa
Signing time: Mon 01 Jan 2024 10:30:21 +0000
ROA not before: Mon 01 Jan 2024 10:30:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207355
IP address blocks: 193.187.160.0/22 maxlen: 22
91.196.172.0/22 maxlen: 22
193.239.48.0/22 maxlen: 22
66.97.192.0/19 maxlen: 19
193.239.168.0/23 maxlen: 23
2a06:f240::/29 maxlen: 29
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:0f:d4:df:c8:b6:89:51:5f:5e:18:2a:26:99:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f05c6af3d022620f72c53b770e82e5c73ae5506d
Validity
Not Before: Jan 1 10:30:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4e0a54784e8ee0f4be5097d77f4dd1d8a2255088
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c7:c7:00:b7:1f:25:94:73:09:fd:43:5e:c6:
c1:4f:8f:7c:4d:53:c9:14:0e:00:c7:da:4d:bb:78:
df:ae:ae:1e:d4:27:a0:46:77:7d:00:c6:7b:13:3a:
84:d3:fa:6d:41:d5:58:ea:5d:7e:8b:80:9c:9e:af:
f2:57:da:b0:5c:2e:d9:1b:7c:d6:d2:39:31:b0:8e:
5a:7f:74:05:c1:2b:f8:7a:da:86:9c:0e:8f:b6:d9:
15:8c:06:d1:34:74:48:3f:34:ae:dc:f1:97:96:3f:
eb:8f:60:90:eb:f1:1e:78:f4:05:13:b7:be:28:41:
81:dd:b0:32:2c:87:a7:df:b2:6e:f0:34:91:18:e9:
4a:dc:b5:82:f6:59:e3:41:11:7f:be:23:7f:70:38:
b4:37:8e:9b:3d:ec:ea:6a:84:4a:39:79:13:b6:3b:
4b:3c:c6:85:f2:cf:bf:c4:56:3e:67:46:29:43:3e:
5a:be:98:ba:23:cc:97:5f:3d:66:cc:9d:a3:04:36:
c9:de:2f:cb:d5:79:ad:db:4d:d8:60:10:70:77:7e:
a3:1c:f1:ef:63:44:c8:ae:dd:69:44:90:e7:96:7c:
b6:b7:2d:ca:40:45:34:9d:56:f5:62:bd:b0:61:48:
9b:52:0e:b6:8a:e3:38:2d:c6:63:2c:5d:c9:54:66:
96:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:0A:54:78:4E:8E:E0:F4:BE:50:97:D7:7F:4D:D1:D8:A2:25:50:88
X509v3 Authority Key Identifier:
keyid:F0:5C:6A:F3:D0:22:62:0F:72:C5:3B:77:0E:82:E5:C7:3A:E5:50:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Fxq89AiYg9yxTt3DoLlxzrlUG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/TgpUeE6O4PS-UJfXf03R2KIlUIg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
66.97.192.0/19
91.196.172.0/22
193.187.160.0/22
193.239.48.0/22
193.239.168.0/23
IPv6:
2a06:f240::/29
Signature Algorithm: sha256WithRSAEncryption
7f:8e:e5:43:7c:2f:aa:e5:3c:16:3c:2c:62:68:fe:a6:19:60:
57:69:27:e3:1e:7b:af:3c:7c:89:ea:d3:ca:f3:24:e5:ec:e4:
78:99:bd:55:f2:08:27:1b:38:8c:4a:9a:50:78:a7:d6:0b:c8:
86:bf:72:91:aa:03:fe:a8:6a:b5:3a:3d:08:f3:3a:e9:05:b7:
ff:ba:8a:f3:a5:eb:97:ee:1c:b4:66:59:5a:f9:f1:26:f9:dd:
da:b7:cd:7a:b2:98:3b:45:00:f1:4d:00:8d:5f:b6:15:2e:bc:
00:d4:b1:06:75:c7:61:1c:0a:8c:e6:00:11:65:42:3d:f3:1c:
b2:23:21:51:69:cb:93:20:29:39:da:4d:6f:83:f3:cc:82:9f:
7d:8e:d7:9e:e7:2c:e4:d2:5f:e1:19:36:27:7e:d4:d8:db:a9:
28:68:d8:6d:92:7a:fd:42:4d:1a:f9:86:a7:52:32:7b:9e:69:
be:29:f0:9c:16:ca:78:90:32:c6:28:4a:92:c2:e3:8c:a7:6c:
98:4d:af:77:df:79:d3:37:96:6c:c9:c0:a8:60:db:32:f9:95:
1d:db:86:76:ea:f5:cf:81:ff:fd:76:0e:0c:9f:69:63:ba:ba:
b4:8f:d9:a2:dd:ae:de:d8:bc:30:11:a7:42:ee:27:fa:62:88:
b1:30:c9:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 15 13:09:21 2024 by rpki-client on console-fra.rpki-client.org