Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/Pffq2vctx-AsNDZxGt4MqfRPy_M.roa
File: Pffq2vctx-AsNDZxGt4MqfRPy_M.roa (raw, json)
Hash identifier: a1mCr5TP08EI/98glR6/JRX6sE1/CL+61pBvcgwcY/4=
Subject key identifier: 3D:F7:EA:DA:F7:2D:C7:E0:2C:34:36:71:1A:DE:0C:A9:F4:4F:CB:F3
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 018C44F3129F9A21D0612B05ABC60C94535E
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/Pffq2vctx-AsNDZxGt4MqfRPy_M.roa
Signing time: Thu 07 Dec 2023 15:43:49 +0000
ROA not before: Thu 07 Dec 2023 15:43:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206005
IP address blocks: 185.15.137.0/24 maxlen: 24
89.40.35.0/24 maxlen: 24
185.243.140.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:44:f3:12:9f:9a:21:d0:61:2b:05:ab:c6:0c:94:53:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Dec 7 15:43:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3df7eadaf72dc7e02c3436711ade0ca9f44fcbf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e7:69:a4:b5:a8:d2:48:95:d0:af:ae:7c:03:
fd:86:d7:8a:c0:2b:31:a8:a2:d5:9e:2e:b1:7b:a0:
86:28:65:b3:91:90:e1:b3:d2:cb:69:cc:26:53:48:
d5:63:36:df:a2:99:da:6f:3c:ef:7d:c4:3c:80:15:
b0:eb:9f:89:ad:ac:e7:d7:11:94:39:61:b3:41:fd:
4b:59:71:78:5c:c3:bd:f9:69:d0:56:bc:81:4d:53:
93:c8:35:05:41:95:df:ae:88:80:5a:e6:23:f9:0c:
17:5d:2f:f2:ab:e6:ff:80:21:6d:09:2d:26:c6:a5:
5d:f6:ac:d9:85:62:55:9e:5c:04:63:81:ea:8d:7c:
6e:0d:a1:ad:4e:aa:99:09:52:27:3b:14:68:23:7f:
89:30:80:70:4f:15:84:5c:73:95:30:7c:7e:b3:0a:
19:aa:7d:5b:f5:64:af:e3:1f:98:42:29:28:f2:7b:
3a:93:be:b9:f3:d6:aa:b4:18:fa:a5:ba:d5:2e:9c:
0d:68:c0:09:1e:02:41:84:c4:3f:14:22:bb:1e:8d:
e3:fe:88:28:c4:fd:75:03:17:34:4f:35:75:f8:b2:
d6:f2:01:84:a2:29:e7:9a:f0:32:f4:96:5a:0f:11:
c8:eb:c6:b0:23:71:e9:82:73:04:cb:d9:b9:4a:c5:
10:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:F7:EA:DA:F7:2D:C7:E0:2C:34:36:71:1A:DE:0C:A9:F4:4F:CB:F3
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/Pffq2vctx-AsNDZxGt4MqfRPy_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.40.35.0/24
185.15.137.0/24
185.243.140.0/22
Signature Algorithm: sha256WithRSAEncryption
38:c8:e8:f5:91:cd:0e:9d:2a:7c:4e:fa:19:33:a6:c5:b7:e0:
01:a3:d7:cc:7a:e8:aa:53:f8:61:fb:1e:d8:4c:16:68:4b:89:
4f:50:9e:2f:31:9b:96:7b:73:ae:d0:21:4b:5b:53:ef:21:ef:
cd:42:2c:72:dd:fb:4c:81:03:a3:7b:8a:23:99:08:0f:25:98:
a2:64:5e:c1:86:cb:a8:d5:9c:b8:86:b8:67:bd:4b:42:73:f7:
ae:8f:61:cf:5b:98:14:da:d8:67:82:60:e0:5a:8d:61:bf:8d:
3e:16:1d:82:e9:74:b1:16:23:5e:c4:6d:31:3c:d4:dd:39:04:
87:b6:1d:16:0f:08:c9:9a:a6:36:57:a3:3c:f8:a0:d0:26:dc:
ae:55:f8:77:d0:95:0d:eb:72:16:18:da:a8:89:35:ce:3f:98:
26:c8:a3:df:b7:cf:79:2c:21:83:a1:ad:65:27:20:e8:53:c7:
14:2d:4d:6a:e0:58:0f:b9:31:48:9a:80:0f:0c:2b:25:02:ee:
f6:ec:cb:d5:60:a7:c3:bc:2b:30:4a:f5:45:f4:01:bf:0c:b4:
c2:0f:bc:a9:54:4e:a4:7a:ac:0b:ed:0b:cb:2e:80:62:b5:80:
8a:12:11:82:1d:c4:2e:ef:b3:75:ca:98:f4:18:d5:3d:0c:10:
2b:2d:cc:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:41 2024 by rpki-client on console-fra.rpki-client.org