Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/d46e2b-de4d-4b6f-8dd7-69629c501943/1/aexV_rIo-dm4r48XyiJc2BfySiQ.roa
File: aexV_rIo-dm4r48XyiJc2BfySiQ.roa (raw, json)
Hash identifier: IGyaGTL0wNzBC2VGcQv8eiZeCpGLehC+Nof/fsLUssY=
Subject key identifier: 69:EC:55:FE:B2:28:F9:D9:B8:AF:8F:17:CA:22:5C:D8:17:F2:4A:24
Certificate issuer: /CN=d0e31a149c2e6ae9acc729cf7ac1706de3de739b
Certificate serial: 9003D9
Authority key identifier: D0:E3:1A:14:9C:2E:6A:E9:AC:C7:29:CF:7A:C1:70:6D:E3:DE:73:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0OMaFJwuaumsxynPesFwbePec5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/d46e2b-de4d-4b6f-8dd7-69629c501943/1/aexV_rIo-dm4r48XyiJc2BfySiQ.roa
Signing time: Fri 20 May 2022 07:29:29 +0000
ROA not before: Fri 20 May 2022 07:29:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207330
IP address blocks: 185.49.27.0/24 maxlen: 24
2a12:a3c6::/31 maxlen: 31
2a12:a3c2::/31 maxlen: 31
2a12:a3c0::/31 maxlen: 31
2a12:a3c4::/31 maxlen: 31
2a12:a3c0::/29 maxlen: 29
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9438169 (0x9003d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0e31a149c2e6ae9acc729cf7ac1706de3de739b
Validity
Not Before: May 20 07:29:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=69ec55feb228f9d9b8af8f17ca225cd817f24a24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:bd:2e:17:f1:77:a0:ce:ea:d6:4b:48:b9:16:
7e:7b:d4:a8:b0:2a:f9:95:f5:09:5b:96:8b:f5:2e:
d9:ec:a3:2f:b4:b1:ef:b0:4d:ef:85:69:a8:0f:7c:
29:21:b4:0b:54:e3:88:49:a4:32:7e:2c:e6:8c:05:
09:46:49:fc:56:c5:48:bb:0b:ea:2f:ef:76:07:25:
d2:04:ea:42:86:5c:6b:1a:d4:3c:68:48:eb:15:cd:
b9:f7:d8:c2:2b:93:03:4f:1b:12:45:cc:83:17:af:
58:b3:ac:92:ac:5a:c1:57:83:6b:63:14:c0:d3:f7:
34:51:4f:92:72:4e:a5:de:08:6b:6e:a0:7b:66:89:
16:98:37:d8:9c:33:a9:55:bb:17:01:38:68:92:a0:
6f:63:77:f4:cc:47:df:bd:2b:32:99:73:8a:87:75:
07:fe:73:1d:83:09:f0:f4:e2:e7:64:7b:e8:08:38:
2f:32:7d:32:93:ff:72:5d:75:db:23:92:a8:5c:94:
a3:e8:8c:8e:fb:90:38:f3:fe:1d:c8:e7:7f:ff:79:
1c:7f:16:6c:e2:06:59:a7:25:ac:3e:2b:d2:e0:66:
11:c5:77:ef:ec:f1:90:e0:16:9a:87:63:3f:12:92:
14:30:3d:b5:de:03:16:0f:18:04:ac:51:a2:01:a6:
f0:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:EC:55:FE:B2:28:F9:D9:B8:AF:8F:17:CA:22:5C:D8:17:F2:4A:24
X509v3 Authority Key Identifier:
keyid:D0:E3:1A:14:9C:2E:6A:E9:AC:C7:29:CF:7A:C1:70:6D:E3:DE:73:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0OMaFJwuaumsxynPesFwbePec5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/d46e2b-de4d-4b6f-8dd7-69629c501943/1/aexV_rIo-dm4r48XyiJc2BfySiQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/d46e2b-de4d-4b6f-8dd7-69629c501943/1/0OMaFJwuaumsxynPesFwbePec5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.49.27.0/24
IPv6:
2a12:a3c0::/29
Signature Algorithm: sha256WithRSAEncryption
d0:10:61:c9:06:44:e2:a2:62:46:b9:03:64:04:cb:55:13:72:
a8:99:e5:0d:ff:5e:a8:6b:c6:c3:64:ba:8f:d3:87:5e:8d:02:
80:f2:63:fa:6f:63:7b:b4:bf:29:ed:fc:e6:e3:41:2a:7b:80:
42:77:a1:36:2b:c7:c4:28:bb:46:a6:4b:a5:c8:69:30:b1:2c:
a9:86:3c:b2:7d:62:2b:e5:01:6d:69:cc:6e:69:2d:14:76:ec:
ab:da:34:2c:8d:58:b6:17:58:36:24:d7:42:e7:52:b1:bb:45:
5e:9f:f0:f1:e4:10:74:db:6e:4a:18:38:30:06:5a:d7:9d:da:
6d:6e:8f:bf:13:4b:d1:c6:6e:a0:ee:da:62:8c:da:fd:86:36:
ed:9a:cd:03:6c:46:fd:38:6e:de:08:ea:b9:3a:67:16:83:b0:
c6:8c:3b:95:e1:2b:1c:c1:92:c9:10:26:06:87:64:83:42:ba:
de:3b:bd:fa:d8:a3:ad:9b:ee:61:cd:d6:9f:81:58:19:af:ff:
0b:b2:b2:3e:70:a2:a6:4a:28:96:80:c6:e7:ce:81:18:8e:ab:
3c:99:04:3b:2f:bb:b0:c1:fa:c1:2b:3d:fd:d4:0c:33:f1:fc:
65:1f:fe:83:70:55:2c:67:94:58:4a:1a:56:b6:a2:4b:10:61:
94:41:04:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:46 2024 by rpki-client on console-ams.rpki-client.org