Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/89ec25-72dc-4f0f-8b2f-ad7890c2e752/1/aXb8Bu0_n5FtipZpZEG0wPMEBO0.roa
File: aXb8Bu0_n5FtipZpZEG0wPMEBO0.roa (raw, json)
Hash identifier: fYC1K1u9hOfGQvAGpmtTeSUMvjYxHh1BuXVexWoonZI=
Subject key identifier: 69:76:FC:06:ED:3F:9F:91:6D:8A:96:69:64:41:B4:C0:F3:04:04:ED
Certificate issuer: /CN=5bd74e39dda400d136126e6c3efb1cf9344277ef
Certificate serial: 018D13D7EC9A7B16DDAC125122684AD40674
Authority key identifier: 5B:D7:4E:39:DD:A4:00:D1:36:12:6E:6C:3E:FB:1C:F9:34:42:77:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W9dOOd2kANE2Em5sPvsc-TRCd-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/89ec25-72dc-4f0f-8b2f-ad7890c2e752/1/aXb8Bu0_n5FtipZpZEG0wPMEBO0.roa
Signing time: Tue 16 Jan 2024 19:55:34 +0000
ROA not before: Tue 16 Jan 2024 19:55:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58061
IP address blocks: 91.242.227.0/24 maxlen: 24
185.253.4.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:13:d7:ec:9a:7b:16:dd:ac:12:51:22:68:4a:d4:06:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bd74e39dda400d136126e6c3efb1cf9344277ef
Validity
Not Before: Jan 16 19:55:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6976fc06ed3f9f916d8a96696441b4c0f30404ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:07:35:08:ac:85:9c:43:16:f9:55:36:f5:6d:
33:2f:9a:f2:c0:eb:6f:7f:5d:19:f9:7b:3c:cb:e4:
f5:56:10:ab:2f:fc:39:72:67:a9:5c:f9:8c:bc:37:
c2:93:ee:cc:c6:cb:b5:7d:a9:5d:ba:cd:d3:d3:d5:
52:aa:e2:c1:a2:0d:4b:10:1b:b0:87:6c:86:b9:14:
97:86:f1:b8:03:3d:84:d8:23:2e:6d:4a:d2:fb:09:
c1:33:cb:13:67:95:9a:54:6f:3b:2b:d3:34:bd:0a:
fd:6d:5b:cf:51:f0:fd:fb:3f:0c:02:53:51:66:5c:
93:7c:67:42:c0:01:5a:c6:c6:31:5c:5b:53:8b:d9:
99:36:24:18:12:f1:f4:ff:e7:3c:c7:0f:fd:96:46:
c5:7b:e1:c2:f5:28:7d:3b:94:14:5d:83:d6:1e:cb:
10:bb:c5:35:9a:ae:02:d0:0f:30:b4:d4:7e:84:5f:
00:8d:7d:4d:92:4b:b0:2f:e0:ab:67:65:3c:19:f9:
72:e2:9f:ce:24:6b:e7:18:ed:98:ab:fa:d5:7a:82:
99:a5:2f:4c:ec:7d:f7:b3:c0:1c:5b:7f:43:a5:8f:
22:9a:1d:78:ce:d8:e2:d8:e6:c7:1f:14:12:79:d6:
98:14:98:b5:32:1e:27:4b:28:45:e5:03:02:d7:b7:
5c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:76:FC:06:ED:3F:9F:91:6D:8A:96:69:64:41:B4:C0:F3:04:04:ED
X509v3 Authority Key Identifier:
keyid:5B:D7:4E:39:DD:A4:00:D1:36:12:6E:6C:3E:FB:1C:F9:34:42:77:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W9dOOd2kANE2Em5sPvsc-TRCd-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/89ec25-72dc-4f0f-8b2f-ad7890c2e752/1/aXb8Bu0_n5FtipZpZEG0wPMEBO0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/89ec25-72dc-4f0f-8b2f-ad7890c2e752/1/W9dOOd2kANE2Em5sPvsc-TRCd-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.242.227.0/24
185.253.4.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:81:57:6c:b7:d5:77:ac:01:b4:25:22:1c:17:8e:b7:72:d9:
f2:13:39:90:c7:22:b3:50:b4:e9:f2:5a:90:c5:3e:38:db:a4:
bd:ab:34:f1:cf:d9:f3:eb:41:a2:44:4f:4a:44:3a:95:00:06:
96:3d:cc:4e:61:ae:f6:0f:85:20:4f:d1:cb:ba:f4:7f:ce:64:
4e:a9:37:ce:af:4b:d8:83:1e:38:b6:b0:8e:da:67:b1:09:05:
dc:31:97:1a:95:85:ca:bc:98:ad:f2:7d:4b:54:95:a0:91:36:
88:c0:3b:d0:59:d0:98:a0:24:82:db:54:5b:21:5d:01:6e:6e:
c5:e8:a1:31:e7:15:91:9f:c6:f5:bc:2e:5f:d7:a3:90:11:b0:
46:d5:a4:c6:44:4e:89:ff:cd:69:0b:d2:6f:4c:59:1f:3e:ae:
e8:bd:82:a0:a2:0f:c9:1d:ab:be:d7:d2:a7:c0:e8:d3:0b:39:
d5:c8:31:a2:2b:6a:4d:46:cb:97:e3:ad:24:18:37:5b:8a:e6:
dd:5d:b2:fb:a7:57:0d:63:74:11:91:bf:af:8a:25:06:04:42:
ad:43:80:c5:e2:c3:a6:fa:ad:7a:71:9c:f3:83:d8:49:02:f4:
e5:5e:7f:36:79:23:10:22:c7:5f:7c:55:1a:cb:40:d7:c3:f8:
5c:67:3a:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:14 2024 by rpki-client on console-ams.rpki-client.org