Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/83e-qNdnWEHJ4GR-so5yR4GII1I.roa
File: 83e-qNdnWEHJ4GR-so5yR4GII1I.roa (raw, json)
Hash identifier: J41wgSaZbNmTGV4Y76qEdfuXi4J1a4v/V6TsXCZefIs=
Subject key identifier: F3:77:BE:A8:D7:67:58:41:C9:E0:64:7E:B2:8E:72:47:81:88:23:52
Certificate issuer: /CN=1224e5eff1abc0e6d8bf029e4f732e0ab71bc16a
Certificate serial: 018A47BB306FFAC0797F38BF3C3A0067EE65
Authority key identifier: 12:24:E5:EF:F1:AB:C0:E6:D8:BF:02:9E:4F:73:2E:0A:B7:1B:C1:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EiTl7_GrwObYvwKeT3MuCrcbwWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/83e-qNdnWEHJ4GR-so5yR4GII1I.roa
Signing time: Wed 30 Aug 2023 18:36:04 +0000
ROA not before: Wed 30 Aug 2023 18:36:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41555
IP address blocks: 170.237.8.0/23 maxlen: 23
170.237.6.0/23 maxlen: 23
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:47:bb:30:6f:fa:c0:79:7f:38:bf:3c:3a:00:67:ee:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1224e5eff1abc0e6d8bf029e4f732e0ab71bc16a
Validity
Not Before: Aug 30 18:36:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f377bea8d7675841c9e0647eb28e724781882352
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:12:e0:d1:10:58:bf:ba:c5:c4:5b:f4:be:7e:
2e:90:56:d5:1c:7f:b6:d7:4d:4d:b6:29:d8:9e:46:
1f:bb:f5:ca:23:bc:44:0a:55:8b:a5:ec:da:a1:2c:
37:0c:81:2b:8b:5c:2b:92:2c:0a:bf:af:e8:55:7e:
1f:f1:ff:5e:fc:68:8f:82:eb:8d:27:ab:6e:32:79:
84:81:4a:7a:e7:35:4c:a7:d9:79:fc:00:57:d5:36:
68:57:5d:0b:b2:8d:68:0a:e6:ab:46:b0:7f:b1:79:
af:95:b6:65:01:b4:7a:c3:8c:2f:26:38:ff:81:fb:
01:c5:9b:97:97:4e:75:1d:07:eb:d2:3c:2e:fe:ed:
6d:b4:89:8a:e7:b9:80:c4:44:e6:db:f9:32:a0:4b:
02:07:9f:d4:71:d9:52:06:12:c9:60:f6:5a:0a:03:
d1:bd:4a:17:e2:00:6b:ea:65:42:96:18:f6:fc:9c:
31:13:62:23:34:88:31:46:4d:c4:d8:3e:25:ed:06:
e1:50:50:dc:f0:67:ad:24:29:61:2f:09:8d:c7:fb:
e9:14:cf:f7:f3:de:bb:2b:b5:89:43:13:89:80:c8:
55:2f:d1:fc:84:1f:47:f9:f1:d0:44:94:90:d3:f6:
bd:a4:f7:69:6b:13:04:b0:08:12:06:8a:f4:a8:ef:
f2:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:77:BE:A8:D7:67:58:41:C9:E0:64:7E:B2:8E:72:47:81:88:23:52
X509v3 Authority Key Identifier:
keyid:12:24:E5:EF:F1:AB:C0:E6:D8:BF:02:9E:4F:73:2E:0A:B7:1B:C1:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EiTl7_GrwObYvwKeT3MuCrcbwWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/83e-qNdnWEHJ4GR-so5yR4GII1I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/EiTl7_GrwObYvwKeT3MuCrcbwWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.237.6.0-170.237.9.255
Signature Algorithm: sha256WithRSAEncryption
53:70:da:94:35:25:38:ef:ad:56:1d:bc:11:ed:8e:b7:0c:5d:
b2:5a:cb:59:57:57:27:77:d6:10:2b:cd:30:7c:00:39:e5:98:
a4:33:0d:f2:cd:bc:cf:5d:36:49:da:5e:66:96:95:3b:e4:14:
d0:40:f6:95:51:fd:1f:19:da:21:cd:26:5c:2a:a1:44:0f:46:
a9:22:01:2e:0c:e1:b1:59:cc:f0:66:57:b5:18:d0:96:dd:fe:
9a:61:c2:98:8e:09:5c:89:c2:e8:b8:39:58:fe:d6:98:70:75:
26:8c:9d:3c:4c:9b:53:92:45:3f:67:db:68:05:ce:6a:6b:fc:
b8:76:15:d5:c3:97:4d:25:05:9a:29:a7:b0:c3:39:9a:63:c9:
33:4b:89:12:20:8e:e6:9f:ad:ef:1b:fa:5f:84:32:d2:91:d8:
0c:d5:83:68:c8:77:37:e5:d0:97:48:ff:fc:56:1a:92:f3:4e:
34:11:6f:ce:48:95:1e:09:42:3b:af:d4:f0:cd:3e:07:21:60:
94:a5:aa:f3:e8:69:ce:f3:66:b4:32:0f:0f:ff:3a:31:d2:d2:
e6:2f:c1:12:8d:2c:b2:77:95:56:b2:12:9d:cf:2f:62:35:2a:
64:a1:18:a5:f9:a9:cb:9d:14:28:c5:06:89:51:40:a1:75:6b:
4c:7f:04:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:28 2024 by rpki-client on console-fra.rpki-client.org