Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/ryGn79-pHKZw6p9eAHJMJ1z8rXA.roa
File: ryGn79-pHKZw6p9eAHJMJ1z8rXA.roa (raw, json)
Hash identifier: iQ1O17PymEqJne0kYygsSScdEbJgXpMVtcx0h49MbRU=
Subject key identifier: AF:21:A7:EF:DF:A9:1C:A6:70:EA:9F:5E:00:72:4C:27:5C:FC:AD:70
Certificate issuer: /CN=84470af0d89d785ba18ba617dc09e3f72c5996f3
Certificate serial: 0189EF6EB88CEFAE62AC9ADDB04844169CD3
Authority key identifier: 84:47:0A:F0:D8:9D:78:5B:A1:8B:A6:17:DC:09:E3:F7:2C:59:96:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hEcK8NideFuhi6YX3Anj9yxZlvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/ryGn79-pHKZw6p9eAHJMJ1z8rXA.roa
Signing time: Sun 13 Aug 2023 15:05:58 +0000
ROA not before: Sun 13 Aug 2023 15:05:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20640
IP address blocks: 217.140.64.0/19 maxlen: 22
217.173.128.0/19 maxlen: 23
217.140.72.0/21 maxlen: 21
82.206.0.0/18 maxlen: 19
217.140.80.0/21 maxlen: 21
2001:4b88::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ef:6e:b8:8c:ef:ae:62:ac:9a:dd:b0:48:44:16:9c:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84470af0d89d785ba18ba617dc09e3f72c5996f3
Validity
Not Before: Aug 13 15:05:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=af21a7efdfa91ca670ea9f5e00724c275cfcad70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:62:d0:c2:86:f6:11:32:50:a2:fe:7e:c8:db:
47:ea:5a:87:a6:25:0e:d4:bb:89:38:b7:75:70:ff:
ec:c6:5f:df:3b:77:f5:ef:07:4b:e0:71:20:70:f5:
55:fa:b8:dd:d8:5f:a4:0c:44:36:c1:04:8c:38:04:
ea:0d:8d:c6:50:fc:d1:f4:bc:0e:7f:6c:02:ce:3b:
8b:93:b5:13:6c:21:23:6e:e2:2c:b5:4c:82:84:27:
71:74:3d:a3:29:1c:31:12:03:f3:fd:a2:ac:93:3c:
6b:55:a5:c2:4f:a4:61:06:be:7b:ed:d4:44:55:e7:
d7:86:fe:f8:e6:26:5e:43:9e:11:eb:cf:60:64:48:
af:c2:dd:3b:af:50:5d:b7:85:51:53:7b:93:ec:eb:
0b:2c:e1:e8:61:61:22:96:54:52:28:51:73:7c:95:
24:a3:ac:56:69:a0:ab:b8:f6:6b:fe:bd:c8:ae:5b:
31:a0:db:3a:34:6e:67:10:ab:66:07:07:6c:46:49:
2e:78:a0:39:dd:a5:60:df:a4:0f:b8:da:2c:09:e7:
1e:d2:fc:cf:77:fe:36:7d:37:f3:7c:26:fd:9c:33:
47:69:0b:2f:2d:05:62:59:7c:e4:34:69:7f:65:19:
65:ed:64:56:78:0f:dd:81:41:2d:f8:c5:1e:36:4e:
d7:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:21:A7:EF:DF:A9:1C:A6:70:EA:9F:5E:00:72:4C:27:5C:FC:AD:70
X509v3 Authority Key Identifier:
keyid:84:47:0A:F0:D8:9D:78:5B:A1:8B:A6:17:DC:09:E3:F7:2C:59:96:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hEcK8NideFuhi6YX3Anj9yxZlvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/ryGn79-pHKZw6p9eAHJMJ1z8rXA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/hEcK8NideFuhi6YX3Anj9yxZlvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.206.0.0/18
217.140.64.0/19
217.173.128.0/19
IPv6:
2001:4b88::/32
Signature Algorithm: sha256WithRSAEncryption
9a:00:c1:1e:a6:24:10:39:bf:f8:da:3b:44:8d:26:64:9f:0a:
8a:cf:96:d8:df:7f:60:cb:db:26:93:2c:ad:4e:1c:55:1d:4a:
5c:14:dd:0c:f2:2d:5c:4d:fe:6b:76:fb:68:68:86:d6:93:9a:
5b:87:a3:5a:0e:08:9e:3c:9d:1e:e9:ad:b8:54:51:02:98:17:
81:29:a3:5a:cd:1f:65:5a:2e:6e:32:eb:b6:ba:f0:e1:6a:ec:
58:3c:37:06:30:29:f4:14:2c:2d:64:75:a8:d1:43:21:11:01:
0a:52:be:c8:18:b7:1e:c4:28:7d:74:cb:94:7d:d8:5d:68:7d:
6c:26:76:77:e2:f7:6f:50:38:f7:d5:ca:4f:2f:37:4b:d5:a3:
4c:06:c0:e8:14:c5:03:fe:cd:5f:79:29:d1:8d:a3:f4:0a:35:
b8:88:e4:a9:cc:0d:25:eb:29:b2:d3:fd:aa:c6:34:5a:e5:ac:
dc:e2:37:99:f3:b6:78:19:f2:40:77:c6:2f:a3:ca:9b:ec:66:
18:41:3b:84:f6:29:29:09:75:45:9b:b7:98:3b:55:9d:0e:91:
cf:f7:5b:c0:2b:99:1c:5c:84:74:48:56:c1:cd:65:62:ca:d6:
0f:11:cd:13:88:16:9b:01:f5:9d:d0:cd:87:32:c9:9e:af:72:
b8:69:49:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:03 2024 by rpki-client on console-ams.rpki-client.org