Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/3383f1-0428-464b-bd1e-27998bf17465/1/GVfzZkrowZRfiXZ9yKh6wH-uzxs.roa
File: GVfzZkrowZRfiXZ9yKh6wH-uzxs.roa (raw, json)
Hash identifier: eQidPQyRFcrSdgRmXF5xE1K1n3uxEDf4gnrpGHZPH5A=
Subject key identifier: 19:57:F3:66:4A:E8:C1:94:5F:89:76:7D:C8:A8:7A:C0:7F:AE:CF:1B
Certificate issuer: /CN=0d3eba6873c5b5075b3c439f7feeb54af1f10da9
Certificate serial: 082B6D92
Authority key identifier: 0D:3E:BA:68:73:C5:B5:07:5B:3C:43:9F:7F:EE:B5:4A:F1:F1:0D:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DT66aHPFtQdbPEOff-61SvHxDak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/3383f1-0428-464b-bd1e-27998bf17465/1/GVfzZkrowZRfiXZ9yKh6wH-uzxs.roa
Signing time: Sat 01 Jan 2022 06:58:36 +0000
ROA not before: Sat 01 Jan 2022 06:58:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51520
IP address blocks: 91.236.196.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 137063826 (0x82b6d92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d3eba6873c5b5075b3c439f7feeb54af1f10da9
Validity
Not Before: Jan 1 06:58:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1957f3664ae8c1945f89767dc8a87ac07faecf1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:3f:83:37:56:d3:77:23:09:c9:42:60:fa:28:
ec:90:3b:2c:87:8c:b8:77:44:93:4c:bb:07:c0:8e:
c5:97:a6:a0:b4:84:93:e0:f6:31:bd:a0:3d:1e:7b:
56:b2:bc:bb:3e:11:a0:e8:68:bb:38:a0:3a:2e:16:
92:56:00:5d:be:5d:ac:71:54:92:5c:9d:a4:cf:95:
94:44:ba:45:6b:0e:bc:3f:1f:3c:ce:e5:eb:cd:c1:
d1:30:37:fa:2e:dd:ca:d5:b4:f3:73:6a:33:cd:09:
1f:21:67:cb:97:1c:5b:40:8d:ea:90:23:0c:3c:bc:
ea:0d:76:d1:3f:21:f2:87:78:3a:30:26:a1:2a:49:
67:f8:f5:a7:b7:21:24:b7:16:91:74:65:8b:1c:41:
45:0a:a2:38:9f:6a:ba:f9:e1:c9:7a:f6:49:b2:6d:
64:56:58:02:b7:cb:0a:b1:b2:99:8f:8a:06:c7:bf:
4a:24:3d:ba:39:39:c1:ca:34:ab:45:ff:86:be:b7:
1f:3e:b3:77:49:22:f5:73:62:04:1b:bc:7d:9e:1f:
be:71:47:30:fd:15:c2:5f:c2:84:af:5e:af:44:4d:
dd:8a:14:7f:69:4b:83:c8:8a:43:54:89:94:63:fe:
b5:54:81:1a:22:5b:e9:07:8d:b2:2d:50:a1:78:66:
5b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:57:F3:66:4A:E8:C1:94:5F:89:76:7D:C8:A8:7A:C0:7F:AE:CF:1B
X509v3 Authority Key Identifier:
keyid:0D:3E:BA:68:73:C5:B5:07:5B:3C:43:9F:7F:EE:B5:4A:F1:F1:0D:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DT66aHPFtQdbPEOff-61SvHxDak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/3383f1-0428-464b-bd1e-27998bf17465/1/GVfzZkrowZRfiXZ9yKh6wH-uzxs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/3383f1-0428-464b-bd1e-27998bf17465/1/DT66aHPFtQdbPEOff-61SvHxDak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.236.196.0/24
Signature Algorithm: sha256WithRSAEncryption
06:4b:4b:54:28:b8:36:ca:b9:22:89:74:29:db:79:3b:c4:a2:
bb:f4:ad:ed:b9:f1:25:6c:c7:cc:dd:7c:45:49:2a:59:61:50:
64:47:5a:db:ad:c1:dd:e7:c3:e7:c9:08:d5:0d:e9:f8:5f:2a:
1c:c0:da:c3:8b:d0:3f:65:72:00:99:53:3f:77:d2:c5:b9:c2:
c5:65:98:e7:30:91:e4:5c:66:33:46:70:47:48:e6:58:ff:5f:
b1:a8:e8:db:1d:46:9a:33:3a:12:21:ff:75:ee:7b:4d:98:d7:
21:de:5a:69:16:2a:cc:e1:1b:21:d9:ba:c9:22:9f:1f:cd:64:
fa:63:cd:22:77:3f:a7:7e:8b:f7:36:6e:23:db:d5:6a:69:2d:
c7:0e:8d:50:42:1a:ba:50:28:6f:d2:90:24:08:64:e0:c5:6f:
1a:bc:dc:49:56:62:af:b7:66:ad:23:2c:91:c0:9b:b6:51:67:
4c:b3:ed:9d:0f:81:8d:f9:f4:73:b8:74:ab:4b:f7:cd:9b:b4:
91:49:c1:6b:19:25:1e:00:b4:9c:dc:60:d1:82:a8:58:51:63:
c6:a0:2b:37:3e:80:2e:93:00:72:98:17:4a:32:2a:2a:73:aa:
72:79:f7:60:fd:de:e9:cf:54:c6:2a:50:a7:cf:ac:65:50:76:
43:9c:a2:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:10 2024 by rpki-client on console-fra.rpki-client.org