Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/bdbde0-1d97-4126-93e6-8e77173dc4bc/1/XF67muhNRP6IdPHFRTDwyz-E4VQ.roa
File: XF67muhNRP6IdPHFRTDwyz-E4VQ.roa (raw, json)
Hash identifier: rMFFHTWmYhd/BvqldpsjjWIsu7E50Ibzm2NjgKAgPws=
Subject key identifier: 5C:5E:BB:9A:E8:4D:44:FE:88:74:F1:C5:45:30:F0:CB:3F:84:E1:54
Certificate issuer: /CN=fccaed0f81e248daf332b80843d4a29e8d7d51e4
Certificate serial: 03BE8741
Authority key identifier: FC:CA:ED:0F:81:E2:48:DA:F3:32:B8:08:43:D4:A2:9E:8D:7D:51:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_MrtD4HiSNrzMrgIQ9Sino19UeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/bdbde0-1d97-4126-93e6-8e77173dc4bc/1/XF67muhNRP6IdPHFRTDwyz-E4VQ.roa
Signing time: Sat 01 Jan 2022 10:56:33 +0000
ROA not before: Sat 01 Jan 2022 10:56:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35273
IP address blocks: 91.235.196.0/22 maxlen: 22
193.142.114.0/24 maxlen: 24
2001:678:d0c::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62818113 (0x3be8741)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fccaed0f81e248daf332b80843d4a29e8d7d51e4
Validity
Not Before: Jan 1 10:56:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5c5ebb9ae84d44fe8874f1c54530f0cb3f84e154
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:cd:ef:c9:ff:ab:d1:c4:3c:7d:04:e2:b9:ec:
9c:54:a2:f4:68:9c:6c:1e:22:92:cf:ec:fa:56:cd:
fa:8e:a5:c4:fd:67:15:be:08:33:8c:0a:b4:13:81:
e6:f2:0f:3a:26:3a:91:67:24:9a:39:42:cd:5d:8e:
b5:d2:0e:69:ee:38:7a:cb:ce:7d:ea:b1:93:bd:5c:
b3:bb:56:b1:62:3d:0b:f7:a2:29:d6:49:0c:9a:5e:
b6:df:50:0d:d4:63:81:aa:d7:a0:87:8c:61:6d:c5:
3d:43:03:57:3f:5f:c0:51:dc:cc:d8:17:0a:d4:94:
7a:74:d1:a2:8e:82:aa:0d:b2:d9:04:f0:80:4d:f1:
6b:26:d2:0f:c1:c2:3f:22:4f:15:da:70:4a:94:70:
f3:16:f0:25:8f:8e:dd:33:10:9f:a0:14:bb:b1:c9:
90:43:c1:03:9c:f2:29:16:93:2f:80:66:1c:79:2b:
4a:aa:b0:29:0a:ce:1c:ae:b3:ec:ee:0c:f7:fb:03:
1c:a6:01:05:cf:06:e1:c7:16:74:2d:27:11:08:5c:
ab:f9:72:2e:22:0b:5f:f7:d9:7c:c5:4b:bc:06:b7:
a8:87:6c:61:cc:c6:d8:ab:ff:4a:20:79:ae:83:e6:
24:ae:13:b8:66:c2:58:d5:0e:4a:1b:cd:04:ec:34:
f3:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:5E:BB:9A:E8:4D:44:FE:88:74:F1:C5:45:30:F0:CB:3F:84:E1:54
X509v3 Authority Key Identifier:
keyid:FC:CA:ED:0F:81:E2:48:DA:F3:32:B8:08:43:D4:A2:9E:8D:7D:51:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_MrtD4HiSNrzMrgIQ9Sino19UeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/bdbde0-1d97-4126-93e6-8e77173dc4bc/1/XF67muhNRP6IdPHFRTDwyz-E4VQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/bdbde0-1d97-4126-93e6-8e77173dc4bc/1/_MrtD4HiSNrzMrgIQ9Sino19UeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.235.196.0/22
193.142.114.0/24
IPv6:
2001:678:d0c::/48
Signature Algorithm: sha256WithRSAEncryption
64:a8:f2:aa:1f:d6:83:c3:1c:90:53:02:8b:e1:69:52:7d:78:
22:c4:ab:b8:f1:ca:e7:37:90:d2:cb:c6:01:e5:49:e1:94:fe:
cb:b2:c1:b0:df:04:7d:17:61:36:bd:d8:31:0c:7a:b4:93:d1:
3d:80:be:9d:10:ab:55:68:a1:09:bb:dc:04:8d:9f:8a:c1:c8:
b8:b3:c0:d3:28:3a:f2:11:5f:24:96:8a:77:65:33:11:f5:aa:
71:ee:b3:41:bd:d6:76:f7:20:ee:f7:ae:fb:2b:68:6c:4d:e6:
e3:73:9c:df:ce:64:0c:01:b8:d4:80:47:b2:96:82:ab:36:10:
de:c5:79:83:8a:71:84:15:0e:0e:39:7c:ba:b3:a1:99:fa:af:
06:41:c1:49:b2:47:07:6e:2b:d3:fc:09:4e:25:23:23:d3:72:
ab:44:48:49:59:83:23:5f:c1:14:d9:3d:5b:a2:fb:49:00:7a:
4c:29:1f:77:de:ca:7a:ac:c2:28:c3:84:ac:bc:16:62:a5:9a:
18:de:70:d5:fc:62:0d:2c:67:50:dd:8a:07:39:47:b7:3f:2c:
9d:6f:03:82:59:0b:4d:2d:67:0f:93:d4:19:e5:28:72:33:fa:
ef:34:ed:68:a1:cf:f8:06:16:72:12:f8:75:e3:96:c2:0d:d5:
dd:f0:7f:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:56 2024 by rpki-client on console-fra.rpki-client.org