Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a146c7-81e9-4862-974f-e0ecd5342ed8/1/FKCRsnlEt5x4SUdpiz3tsF_Ow4M.roa
File: FKCRsnlEt5x4SUdpiz3tsF_Ow4M.roa (raw, json)
Hash identifier: 9AaXwL788d0HPOlNrV7EDIT10wukDSXJee/ptzUBWMM=
Subject key identifier: 14:A0:91:B2:79:44:B7:9C:78:49:47:69:8B:3D:ED:B0:5F:CE:C3:83
Certificate issuer: /CN=dfa68d14863a454b89547b59b5cc3415cd2d8f37
Certificate serial: 1B64A07D
Authority key identifier: DF:A6:8D:14:86:3A:45:4B:89:54:7B:59:B5:CC:34:15:CD:2D:8F:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/36aNFIY6RUuJVHtZtcw0Fc0tjzc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a146c7-81e9-4862-974f-e0ecd5342ed8/1/FKCRsnlEt5x4SUdpiz3tsF_Ow4M.roa
Signing time: Sat 01 Jan 2022 12:54:47 +0000
ROA not before: Sat 01 Jan 2022 12:54:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60940
IP address blocks: 185.23.93.0/24 maxlen: 24
185.23.94.0/23 maxlen: 23
185.23.92.0/24 maxlen: 24
84.39.32.0/19 maxlen: 19
2a04:2500::/32 maxlen: 32
2a04:2500::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 459579517 (0x1b64a07d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfa68d14863a454b89547b59b5cc3415cd2d8f37
Validity
Not Before: Jan 1 12:54:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=14a091b27944b79c784947698b3dedb05fcec383
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:07:82:5e:2b:c5:a1:09:85:9d:ee:24:33:9d:
ec:4a:71:f7:a5:e9:5f:7a:2f:ab:b3:c6:45:b3:e3:
82:a1:3f:93:32:ea:a6:59:b4:2b:3a:fa:b0:29:13:
8a:57:55:96:d7:7c:b2:4e:25:2d:17:c2:01:8b:d0:
54:18:33:77:67:bd:9f:a3:c0:df:e1:37:f5:27:35:
ea:b1:34:ca:55:a8:35:29:1b:67:77:2f:75:f8:b4:
f1:38:6f:5a:75:f5:c3:bd:98:1f:66:2d:be:0d:96:
0d:a8:94:1a:6f:68:94:88:86:4f:a4:b3:85:26:97:
aa:a6:99:2e:ca:e7:67:d1:36:ea:06:78:26:ab:c2:
4f:02:66:cb:c5:bd:93:99:4b:1d:4f:61:06:f2:95:
3e:80:3f:f7:ea:6b:83:4e:27:69:87:97:84:21:c4:
53:66:1a:fd:50:a5:6a:45:ae:ab:25:38:3d:c0:8a:
96:62:c3:23:14:5d:39:5d:55:38:30:e2:d4:9a:d8:
fa:10:78:cf:3e:02:6d:06:e9:85:ef:95:4b:c4:b1:
20:89:45:1a:3e:e5:64:93:e3:c7:22:89:b7:4d:69:
c0:68:6c:a8:4c:56:fb:a1:cf:98:c4:59:ba:e3:36:
4c:b1:b3:9d:32:20:a9:99:6b:33:0c:e3:b7:f3:25:
c6:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:A0:91:B2:79:44:B7:9C:78:49:47:69:8B:3D:ED:B0:5F:CE:C3:83
X509v3 Authority Key Identifier:
keyid:DF:A6:8D:14:86:3A:45:4B:89:54:7B:59:B5:CC:34:15:CD:2D:8F:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/36aNFIY6RUuJVHtZtcw0Fc0tjzc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a146c7-81e9-4862-974f-e0ecd5342ed8/1/FKCRsnlEt5x4SUdpiz3tsF_Ow4M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a146c7-81e9-4862-974f-e0ecd5342ed8/1/36aNFIY6RUuJVHtZtcw0Fc0tjzc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.39.32.0/19
185.23.92.0/22
IPv6:
2a04:2500::/32
Signature Algorithm: sha256WithRSAEncryption
62:ff:8d:2b:ef:66:8f:09:bc:c4:2a:c9:e2:e7:19:72:13:ab:
05:ad:47:da:19:f2:4c:56:ff:47:3d:1b:55:4d:ca:0e:35:bb:
0c:6a:c2:7a:a7:54:a8:03:2a:2e:cf:07:09:5f:4e:2a:66:2c:
0c:09:61:30:58:8b:49:5d:cc:68:20:0e:ea:c2:2b:38:6f:fd:
ce:5f:66:05:09:de:35:67:db:c8:7f:ce:9d:16:6d:87:6d:84:
0a:e3:29:53:3b:14:ad:9d:3c:a0:7b:6e:52:02:64:9c:4e:53:
81:2e:4d:19:c0:70:58:b4:43:cf:95:24:c4:08:d4:4c:ca:b4:
89:1f:7b:fe:7a:1b:6b:73:8e:bd:7b:1b:62:2c:2d:91:1c:f8:
92:64:59:41:cd:f3:a3:11:8a:87:e1:c7:f7:e0:b3:e4:1a:60:
8d:68:73:c2:6b:08:7d:75:0b:f6:52:e4:3d:75:b7:e4:a4:74:
5c:80:2c:5b:30:67:4a:fe:71:2a:2f:06:26:ac:7d:0b:7a:c2:
23:c8:22:57:24:a5:9b:9a:31:7a:1d:bc:7d:70:58:0d:e4:8d:
2c:62:82:37:6a:f3:65:9b:f1:ba:f4:f0:b7:f0:97:b5:7b:a9:
a2:1a:8b:14:b4:56:64:a0:82:7a:54:b4:3b:a5:df:92:36:fb:
c1:56:70:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:43 2024 by rpki-client on console-fra.rpki-client.org