Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/741668-d2e5-4ea2-a55a-a7514fc4eb48/1/ALAFCtH4yhJhXQKG-vKmkN0w8rM.roa
File: ALAFCtH4yhJhXQKG-vKmkN0w8rM.roa (raw, json)
Hash identifier: JlQzgGOLl/Xo0aa7gyqs5bId1rvaNdxOlf7yoFKBz3w=
Subject key identifier: 00:B0:05:0A:D1:F8:CA:12:61:5D:02:86:FA:F2:A6:90:DD:30:F2:B3
Certificate issuer: /CN=108e1a53b1eb11d821be966dfa4af17f70cc08bd
Certificate serial: 01826D91B5E06DEF5EE19F4231405DC08D48
Authority key identifier: 10:8E:1A:53:B1:EB:11:D8:21:BE:96:6D:FA:4A:F1:7F:70:CC:08:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EI4aU7HrEdghvpZt-krxf3DMCL0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/741668-d2e5-4ea2-a55a-a7514fc4eb48/1/ALAFCtH4yhJhXQKG-vKmkN0w8rM.roa
Signing time: Fri 05 Aug 2022 10:34:02 +0000
ROA not before: Fri 05 Aug 2022 10:34:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41011
IP address blocks: 193.238.244.0/24 maxlen: 24
193.238.245.0/24 maxlen: 24
193.238.246.0/24 maxlen: 24
185.108.156.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:6d:91:b5:e0:6d:ef:5e:e1:9f:42:31:40:5d:c0:8d:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=108e1a53b1eb11d821be966dfa4af17f70cc08bd
Validity
Not Before: Aug 5 10:34:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=00b0050ad1f8ca12615d0286faf2a690dd30f2b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:1a:52:60:dc:26:31:b1:2a:2b:5f:b7:79:f1:
f2:96:7a:7e:aa:31:36:69:15:13:2e:6c:0f:a1:90:
59:35:de:56:9d:74:2b:50:f9:82:ab:da:09:b6:8c:
0e:76:d3:b1:5d:e3:8f:f3:1e:43:95:dc:15:d6:5b:
7b:37:04:93:31:e6:2c:21:30:bc:35:16:4e:85:97:
f8:9d:12:ee:92:50:34:df:a0:be:45:d2:96:c4:11:
b1:5f:cb:8b:b1:45:1a:4f:5b:82:f6:13:69:5d:1c:
5d:21:32:0d:01:52:35:d5:96:bd:4c:3f:81:1c:19:
41:4f:e4:0a:61:cf:d7:6b:c2:e6:c6:1c:40:0a:52:
3f:39:11:d5:db:0d:cd:ff:78:17:9c:dd:de:53:83:
c0:84:a0:1f:66:c1:e0:b9:8d:0c:d8:d2:f0:86:b9:
dd:ff:70:fd:21:71:19:26:9b:5a:23:07:cf:fd:53:
af:85:a7:b7:ff:2f:e5:8f:57:52:8e:a3:1d:de:10:
33:35:e7:e8:96:2c:ac:8f:bd:a8:2e:73:77:7f:3f:
ad:97:86:88:a1:23:aa:60:ae:9e:1f:d1:ce:15:1b:
00:b6:30:9c:95:e1:21:57:23:ca:21:e0:0f:af:87:
f6:e6:ff:b1:36:e2:e4:5f:75:8c:ab:0a:4a:e2:8b:
92:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:B0:05:0A:D1:F8:CA:12:61:5D:02:86:FA:F2:A6:90:DD:30:F2:B3
X509v3 Authority Key Identifier:
keyid:10:8E:1A:53:B1:EB:11:D8:21:BE:96:6D:FA:4A:F1:7F:70:CC:08:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EI4aU7HrEdghvpZt-krxf3DMCL0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/741668-d2e5-4ea2-a55a-a7514fc4eb48/1/ALAFCtH4yhJhXQKG-vKmkN0w8rM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/741668-d2e5-4ea2-a55a-a7514fc4eb48/1/EI4aU7HrEdghvpZt-krxf3DMCL0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.108.156.0/24
193.238.244.0-193.238.246.255
Signature Algorithm: sha256WithRSAEncryption
53:af:c9:a4:09:4e:fd:29:29:af:48:0e:52:e1:c5:a9:f4:39:
86:b1:f3:33:cc:12:18:d3:22:3d:00:6e:74:02:35:ab:82:66:
b9:71:e0:9b:4d:72:57:a3:09:a7:35:66:71:9d:83:e5:47:94:
3a:78:a2:3d:d4:d9:68:47:50:41:e8:1c:c1:56:36:dc:16:e9:
0f:30:63:27:f6:13:50:99:c8:24:be:a6:ca:1b:74:e0:13:0e:
e2:de:0e:7c:29:99:98:48:28:d9:94:8c:84:f6:f1:91:ff:f2:
9e:cc:77:13:51:d9:c3:e2:74:81:be:a4:6c:e3:7b:8f:96:b9:
77:8f:6e:38:33:5c:06:38:f5:36:0e:c5:5e:34:4e:ac:1e:4f:
f1:fa:7d:ee:92:70:25:95:1e:63:8f:83:61:b6:06:5d:7e:40:
1f:16:e9:90:76:05:8f:40:43:9f:7e:90:bc:f8:21:b5:f5:92:
d2:11:19:f5:3b:ff:85:98:40:f1:e7:08:0c:26:0c:22:76:75:
43:ea:95:d4:87:dc:b4:2e:fe:a5:4f:38:2c:d0:fd:4a:84:a3:
b0:aa:1d:1f:e5:ce:b7:72:42:9a:b5:16:49:ed:bc:0c:05:0e:
4e:de:80:ab:d5:2a:9b:12:9b:8b:49:0b:4f:86:1d:77:85:a9:
e8:b6:ba:3a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:04 2023 by rpki-client on console-ams.rpki-client.org