Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/0ee78b-815c-4995-82e1-c80c288ebeea/1/RqEoKxKCYrKDca-P5N8gnKF_1dk.roa
File: RqEoKxKCYrKDca-P5N8gnKF_1dk.roa (raw, json)
Hash identifier: 5xt4nNCy1T44Urk1bfuaKmNl8sgLal946LJzJKVqEO8=
Subject key identifier: 46:A1:28:2B:12:82:62:B2:83:71:AF:8F:E4:DF:20:9C:A1:7F:D5:D9
Certificate issuer: /CN=7cd6c0236ff4d6050906957ffd380b3879e6ed6e
Certificate serial: 0191374F5ECF6FD8E0C866F1D963DF081F82
Authority key identifier: 7C:D6:C0:23:6F:F4:D6:05:09:06:95:7F:FD:38:0B:38:79:E6:ED:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fNbAI2_01gUJBpV__TgLOHnm7W4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/0ee78b-815c-4995-82e1-c80c288ebeea/1/RqEoKxKCYrKDca-P5N8gnKF_1dk.roa
Signing time: Fri 09 Aug 2024 13:23:54 +0000
ROA not before: Fri 09 Aug 2024 13:23:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205131
IP address blocks: 194.54.158.0/24 maxlen: 24
194.54.159.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:37:4f:5e:cf:6f:d8:e0:c8:66:f1:d9:63:df:08:1f:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cd6c0236ff4d6050906957ffd380b3879e6ed6e
Validity
Not Before: Aug 9 13:23:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=46a1282b128262b28371af8fe4df209ca17fd5d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:fb:3f:ef:94:2e:25:4f:d8:29:bc:22:03:bd:
3f:7d:f5:2f:a0:8d:fe:dc:1b:fe:26:0d:ab:72:dd:
30:92:5d:61:50:4a:94:0c:0a:5d:49:b0:12:a1:a9:
7e:11:cd:9f:7b:27:91:8e:30:4e:3b:c8:b6:ee:0c:
c9:2a:59:31:65:32:eb:3f:87:a2:8c:82:b9:4d:65:
b6:a1:45:bc:80:78:92:b3:fd:f2:9e:4f:3e:75:e1:
74:8c:b4:72:f9:33:60:b0:fc:34:36:24:43:e4:46:
d8:02:a6:85:91:66:38:9a:86:54:f7:bd:bd:db:38:
fb:a6:c0:b2:71:d0:0c:bb:4b:04:0f:44:d2:35:0f:
70:bf:af:8d:ac:a0:ac:28:4a:07:e5:32:8c:aa:95:
62:72:96:07:63:ce:2c:e5:ff:3c:74:5b:f0:5a:d4:
a1:2b:49:6d:aa:a0:5c:28:7c:41:3b:9f:22:d4:c9:
93:a9:5b:11:26:c4:af:9a:a0:04:bc:a8:04:2a:e9:
58:de:6c:4f:ed:b4:ea:48:e3:06:25:fa:d3:08:2a:
b3:42:83:12:0a:2b:89:1d:7e:da:12:94:08:03:7f:
6d:be:30:3f:12:c7:a2:d4:69:33:73:10:65:e0:bd:
c2:80:f9:06:20:2b:03:49:02:d8:a1:cf:4a:18:0b:
60:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:A1:28:2B:12:82:62:B2:83:71:AF:8F:E4:DF:20:9C:A1:7F:D5:D9
X509v3 Authority Key Identifier:
keyid:7C:D6:C0:23:6F:F4:D6:05:09:06:95:7F:FD:38:0B:38:79:E6:ED:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fNbAI2_01gUJBpV__TgLOHnm7W4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0ee78b-815c-4995-82e1-c80c288ebeea/1/RqEoKxKCYrKDca-P5N8gnKF_1dk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0ee78b-815c-4995-82e1-c80c288ebeea/1/fNbAI2_01gUJBpV__TgLOHnm7W4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.54.158.0/23
Signature Algorithm: sha256WithRSAEncryption
47:b9:f1:6f:1f:2c:16:eb:35:83:7d:51:df:a1:79:7e:50:03:
10:e3:e8:17:76:55:61:e6:60:23:a1:83:2e:44:54:a2:28:22:
f7:b6:42:36:b5:f7:d8:bb:c4:25:bc:1c:52:26:87:d7:69:cd:
ee:85:a6:7e:ce:16:f9:c9:ff:24:97:61:3a:f7:5b:04:09:ab:
db:fa:c9:8f:be:80:e2:af:13:aa:e3:8a:89:84:37:a2:c9:68:
fc:4f:a4:9e:c9:72:9c:68:75:81:5e:19:38:dc:8e:51:16:ed:
38:d1:12:3b:b8:94:4a:43:f6:12:98:d2:d7:4e:01:d9:55:f7:
c5:04:5a:a2:cf:f5:83:7d:01:e1:58:d0:da:0b:85:37:a5:f1:
00:f6:91:e4:d6:5d:59:85:cd:3e:5b:3c:bc:9c:a3:a5:8e:b9:
ca:87:a3:cf:d8:ae:c0:4e:89:50:3d:ef:05:78:28:36:41:e1:
98:58:b3:52:6a:9f:cf:6a:4d:07:71:04:76:34:ac:c3:6b:ce:
c9:d0:11:4a:35:2a:06:23:49:cf:c9:54:87:3d:95:67:f0:05:
a7:b3:d1:06:13:20:34:b9:6a:6b:5c:5c:82:a8:69:ae:5c:9a:
c8:57:d3:32:1a:e6:d8:0b:d8:51:dc:f2:9b:01:44:b1:21:b4:
37:fb:59:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 12 16:29:13 2024 by rpki-client on console-fra.rpki-client.org