Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/4QvF-9DtSGSWhGoqQOWsJHLJKLM.roa
File: 4QvF-9DtSGSWhGoqQOWsJHLJKLM.roa (raw, json)
Hash identifier: L+G4oQfAyqKX7mOt+CgxMjL3CUmldIBMYA1cNn0OCPc=
Subject key identifier: E1:0B:C5:FB:D0:ED:48:64:96:84:6A:2A:40:E5:AC:24:72:C9:28:B3
Certificate issuer: /CN=f4e018fddfd422517c3069e75658657b40e73601
Certificate serial: 018CC7272CD539A053F9E247ACA32B7AA0E5
Authority key identifier: F4:E0:18:FD:DF:D4:22:51:7C:30:69:E7:56:58:65:7B:40:E7:36:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OAY_d_UIlF8MGnnVlhle0DnNgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/4QvF-9DtSGSWhGoqQOWsJHLJKLM.roa
Signing time: Mon 01 Jan 2024 22:31:22 +0000
ROA not before: Mon 01 Jan 2024 22:31:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207291
IP address blocks: 195.191.140.0/24 maxlen: 24
195.191.176.0/24 maxlen: 24
141.136.38.0/24 maxlen: 24
141.136.40.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:2c:d5:39:a0:53:f9:e2:47:ac:a3:2b:7a:a0:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e018fddfd422517c3069e75658657b40e73601
Validity
Not Before: Jan 1 22:31:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e10bc5fbd0ed486496846a2a40e5ac2472c928b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4c:84:07:db:17:7f:02:df:ee:0a:e3:e5:02:
a5:ef:57:2c:24:d0:15:93:15:3c:55:65:68:7d:4c:
33:cb:91:76:4f:fe:cf:b2:74:64:9c:ed:1c:ee:55:
29:02:cd:6a:f4:76:eb:2b:8c:b7:e8:01:9b:7f:5f:
31:ae:eb:b4:1a:b3:f1:17:f4:ed:69:b2:6f:c4:c6:
10:6b:35:57:b8:ad:b0:35:51:62:fa:5f:1d:a4:36:
a6:51:11:f5:0d:f2:5e:f7:49:b5:75:05:b7:d8:56:
60:71:60:41:51:42:c2:5f:75:80:b5:c2:9d:59:69:
d2:b7:38:3d:63:68:c8:8f:14:91:17:1d:10:30:92:
da:1a:d8:0b:5f:22:2c:b3:3a:65:11:db:d2:b1:29:
f1:8c:de:0a:fa:d8:75:0d:9a:10:7c:41:d2:40:35:
8d:ba:50:10:cd:7b:1f:87:5f:a6:af:a8:05:73:fb:
bf:09:34:18:58:7b:66:8b:53:92:4a:95:6c:ca:5e:
22:a1:a0:c6:81:e4:81:47:ae:ac:56:26:5c:c8:80:
f9:2c:47:18:e7:2f:e5:25:a2:fb:90:e6:09:10:59:
44:64:d6:51:f7:0f:76:4b:8b:ea:07:cc:87:8d:1c:
a6:33:47:c1:e0:fc:6b:67:31:37:8f:af:6d:58:be:
fd:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:0B:C5:FB:D0:ED:48:64:96:84:6A:2A:40:E5:AC:24:72:C9:28:B3
X509v3 Authority Key Identifier:
keyid:F4:E0:18:FD:DF:D4:22:51:7C:30:69:E7:56:58:65:7B:40:E7:36:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OAY_d_UIlF8MGnnVlhle0DnNgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/4QvF-9DtSGSWhGoqQOWsJHLJKLM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/9OAY_d_UIlF8MGnnVlhle0DnNgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.136.38.0/24
141.136.40.0/24
195.191.140.0/24
195.191.176.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:9d:6b:a7:27:0e:fd:b4:d9:7b:6e:05:c9:b6:a5:f7:8a:44:
f9:39:55:07:59:52:ab:df:f5:80:96:b9:9d:58:8a:2a:1c:d4:
cd:36:14:8e:57:87:86:6c:a4:79:43:ce:ef:e4:d3:b7:66:f3:
df:60:ae:02:6b:e0:f2:f3:2f:bb:01:e2:51:b2:28:3d:ee:3f:
4a:46:e6:80:f3:35:58:06:f9:a5:ba:38:e3:c6:ea:0c:1d:35:
e1:86:24:6d:12:7e:49:9c:33:68:ac:e0:75:6f:9d:78:8f:15:
45:5a:54:fc:aa:5d:ed:5b:0d:87:8c:09:72:79:c2:e8:26:2f:
f0:00:ec:71:ca:d8:fd:78:ed:7e:4b:32:cc:d9:28:36:d1:4f:
a9:d7:d7:f1:53:ce:88:3c:42:a3:85:2c:d7:0d:c0:c8:91:ba:
b2:b8:cd:81:92:a8:b1:2a:46:09:88:f8:7a:57:19:ed:c1:32:
37:69:18:b4:13:ef:d2:5a:19:9e:01:3f:a2:cf:31:3c:4d:8d:
23:7e:2e:76:40:62:68:9a:96:dd:b6:01:01:3b:96:71:97:9a:
a6:ef:7d:55:ad:95:79:42:ff:d0:a4:a5:e9:bd:69:3b:de:08:
a3:ab:a6:bf:20:66:81:89:7d:00:57:8f:12:ad:a2:42:ca:bf:
1a:fd:ae:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 18:51:29 2024 by rpki-client on console-ams.rpki-client.org