Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/9wiPjW6BaWxFNNDWgPCzY1DSsVU.roa
File: 9wiPjW6BaWxFNNDWgPCzY1DSsVU.roa (raw, json)
Hash identifier: 0E6ujhbs0659yUcInBlFy9RsI+ODtKvaj92JPVGAUJk=
Subject key identifier: F7:08:8F:8D:6E:81:69:6C:45:34:D0:D6:80:F0:B3:63:50:D2:B1:55
Certificate issuer: /CN=962ae3463938b26f83b76f0c4df81dfabb15a4eb
Certificate serial: 17D26348
Authority key identifier: 96:2A:E3:46:39:38:B2:6F:83:B7:6F:0C:4D:F8:1D:FA:BB:15:A4:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lirjRjk4sm-Dt28MTfgd-rsVpOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/9wiPjW6BaWxFNNDWgPCzY1DSsVU.roa
Signing time: Mon 30 May 2022 10:56:14 +0000
ROA not before: Mon 30 May 2022 10:56:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 40975
IP address blocks: 89.40.168.0/23 maxlen: 24
89.40.170.0/24 maxlen: 24
86.107.192.0/24 maxlen: 24
185.84.64.0/23 maxlen: 23
185.84.66.0/24 maxlen: 24
89.35.6.0/23 maxlen: 23
217.19.14.0/23 maxlen: 23
86.104.254.0/23 maxlen: 23
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 399663944 (0x17d26348)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=962ae3463938b26f83b76f0c4df81dfabb15a4eb
Validity
Not Before: May 30 10:56:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f7088f8d6e81696c4534d0d680f0b36350d2b155
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1a:ae:f7:7f:ac:58:a1:64:1a:da:b2:8d:25:
33:9b:3b:38:25:09:48:db:57:da:76:4e:9d:0c:af:
02:a3:ae:bb:08:74:eb:c0:17:29:fe:aa:1a:ca:f9:
b1:c7:f6:b2:3e:7f:7b:17:34:82:19:ce:56:04:25:
eb:f3:e6:09:e5:19:2c:b1:e8:65:ff:49:4d:77:e6:
c9:31:c5:79:a2:a7:a5:fd:fc:17:63:a6:fd:62:60:
f8:6d:a5:34:d1:93:63:94:9b:be:c7:d2:44:c3:f7:
73:16:e4:81:ff:4d:df:76:cd:fc:40:f3:e1:b6:33:
c5:95:c0:61:7b:36:f2:38:24:a3:cb:18:72:14:22:
4c:c9:ec:0f:63:8c:a8:ba:d2:f2:6b:5e:b8:fd:95:
96:76:ce:b9:4a:3e:6b:03:70:f7:63:82:21:8c:36:
d7:b9:19:fe:89:00:35:6b:55:5f:d2:38:ef:9a:9b:
ac:2e:7a:d0:64:84:f0:43:59:61:62:14:91:48:13:
73:a7:76:d9:fa:24:ad:6f:bb:fd:87:97:85:58:2b:
c5:bb:4a:cc:ab:84:fb:a1:39:25:d0:09:9a:ad:67:
e5:c9:ed:19:37:ef:a3:4c:0c:8a:45:20:24:f0:ee:
fa:73:0b:e3:22:86:b2:0a:6a:49:fb:89:fa:ea:9b:
2b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:08:8F:8D:6E:81:69:6C:45:34:D0:D6:80:F0:B3:63:50:D2:B1:55
X509v3 Authority Key Identifier:
keyid:96:2A:E3:46:39:38:B2:6F:83:B7:6F:0C:4D:F8:1D:FA:BB:15:A4:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lirjRjk4sm-Dt28MTfgd-rsVpOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/9wiPjW6BaWxFNNDWgPCzY1DSsVU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.104.254.0/23
86.107.192.0/24
89.35.6.0/23
89.40.168.0-89.40.170.255
185.84.64.0-185.84.66.255
217.19.14.0/23
Signature Algorithm: sha256WithRSAEncryption
45:15:4f:5a:b2:75:e5:6a:94:2b:aa:0a:e1:7b:75:f4:11:53:
05:e4:0c:1e:a7:6f:54:e5:90:5b:7b:b2:5d:7b:88:28:e0:d3:
e7:e6:f2:e5:27:2b:8e:bf:58:0c:75:e0:37:80:b4:a5:76:47:
b8:56:c5:88:12:75:ff:99:29:4d:c3:ea:d2:de:ff:40:0e:ce:
b1:b4:6c:c2:bb:f0:fa:13:f6:43:e7:88:11:d1:93:27:8b:27:
28:08:a3:a7:c7:d6:2a:6c:4d:0a:2f:14:f2:cf:64:16:6d:4d:
e7:fe:8c:41:5f:ee:fe:fc:70:45:ce:44:35:aa:6e:be:fe:b6:
7a:88:8d:1b:f8:9f:ef:1e:37:68:b2:f6:16:01:80:31:3a:69:
65:31:85:fc:97:b3:b4:92:2e:58:99:3b:df:d6:05:49:64:e2:
04:04:04:47:48:2c:f6:c0:4a:a4:9d:1e:a5:a6:29:13:58:43:
22:2d:e5:ef:f7:33:02:79:0d:a0:05:1f:c1:2e:fa:b2:42:d5:
5d:e8:c2:61:ea:24:df:b4:77:53:48:04:29:bb:b4:c9:2e:72:
5a:99:f7:e5:fb:c7:24:ac:dc:a6:81:2b:f0:60:74:ee:53:f2:
ba:3a:37:7d:19:ae:c3:3a:66:cd:43:a3:29:25:ef:38:f6:73:
68:11:09:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:06 2024 by rpki-client on console-ams.rpki-client.org