Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/UB9Vikl_GhqSlKLH1ZF1znAQRKw.roa
File: UB9Vikl_GhqSlKLH1ZF1znAQRKw.roa (raw, json)
Hash identifier: 5DECbb8sbm8cdYoxjX+r28i/3BBuiB3Zew8CdPb/cZA=
Subject key identifier: 50:1F:55:8A:49:7F:1A:1A:92:94:A2:C7:D5:91:75:CE:70:10:44:AC
Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Certificate serial: 0181E4B87796E5FFF69846FC459AB6BF9F23
Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/UB9Vikl_GhqSlKLH1ZF1znAQRKw.roa
Signing time: Sat 09 Jul 2022 20:48:23 +0000
ROA not before: Sat 09 Jul 2022 20:48:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3257
IP address blocks: 94.131.48.0/20 maxlen: 24
94.131.64.0/20 maxlen: 24
95.164.128.0/20 maxlen: 24
94.131.24.0/22 maxlen: 24
149.154.176.0/20 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:e4:b8:77:96:e5:ff:f6:98:46:fc:45:9a:b6:bf:9f:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Validity
Not Before: Jul 9 20:48:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=501f558a497f1a1a9294a2c7d59175ce701044ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:5e:4c:42:5f:a4:cf:53:e3:2e:9c:9e:76:ab:
04:01:7a:38:92:3a:12:17:15:5f:f7:7b:12:47:0b:
cf:f1:f6:c3:10:20:8d:b2:3b:ce:21:42:91:65:db:
77:85:a8:a8:76:4e:ab:cb:28:af:2f:87:2c:c6:8a:
96:6e:ec:d2:07:c2:6b:23:c3:33:d6:ae:a4:2f:0a:
33:76:aa:15:87:28:ef:12:fd:26:b8:4c:8d:85:79:
f0:13:e8:c3:4a:93:98:7f:b8:6e:0a:84:01:45:81:
c6:bb:42:fd:b0:e4:71:bc:47:2e:3c:ee:32:5a:07:
3a:c5:58:20:b3:e7:49:3a:1a:a0:8a:d3:75:4a:7d:
87:97:23:42:4a:e0:7c:4d:57:7e:ab:99:0e:5c:3a:
60:0f:d3:a7:3f:62:a3:56:96:fc:1d:01:0a:05:97:
64:00:5b:ad:a9:d0:61:ed:3d:5d:35:cb:fb:b4:76:
34:a2:bb:9a:14:96:38:79:2c:47:4b:dd:19:a0:13:
a3:e7:54:93:74:96:44:5e:23:3e:b3:ed:8d:d4:d2:
b9:0e:56:3e:42:50:67:a9:15:ef:17:c5:49:cd:69:
74:13:2d:d7:fe:83:e4:b3:c2:f1:cf:ff:85:92:7f:
1e:88:a2:ac:2d:92:67:f8:8c:20:84:00:87:6c:d1:
a8:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:1F:55:8A:49:7F:1A:1A:92:94:A2:C7:D5:91:75:CE:70:10:44:AC
X509v3 Authority Key Identifier:
keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/UB9Vikl_GhqSlKLH1ZF1znAQRKw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.131.24.0/22
94.131.48.0-94.131.79.255
95.164.128.0/20
149.154.176.0/20
Signature Algorithm: sha256WithRSAEncryption
a4:57:98:1c:7c:82:63:da:c9:bc:ca:03:96:f6:96:66:f1:28:
ef:85:59:36:cb:02:f2:d0:dd:ab:d1:a1:22:88:8e:76:b4:31:
2e:42:e0:2f:19:71:1f:6c:91:cd:d1:42:73:58:4c:fa:c9:9f:
a1:3f:b9:a3:b0:4b:46:3d:b5:43:71:98:a5:7e:f0:f3:95:7d:
58:07:82:94:36:10:83:a6:68:5b:a5:e8:39:5e:d1:bd:c0:98:
d7:f8:79:cd:29:d2:6b:c5:05:f3:06:ab:f4:aa:24:7c:8b:75:
b2:21:88:0d:d0:17:25:92:d6:77:0d:08:d1:f9:43:df:24:28:
bd:d3:f9:d9:70:80:62:84:a7:34:9f:33:f3:46:9f:30:ce:f2:
f0:cd:51:53:fd:f1:b2:e6:a6:07:0c:f2:54:e8:2f:89:ca:f9:
4b:04:c4:38:1d:64:aa:f6:19:30:e1:66:20:af:fc:29:38:22:
bf:48:38:3f:d6:3c:b8:0f:74:1f:1b:3e:88:85:27:56:84:28:
c8:de:f4:23:26:84:cd:f9:83:0f:2b:82:38:04:7d:63:9d:a7:
cc:fd:ea:29:59:c7:6d:34:ed:2f:54:30:af:b6:4c:44:d8:48:
dc:51:b4:db:61:2c:df:97:b0:92:2a:dd:47:c0:a3:22:f0:a6:
2b:83:7c:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:58 2024 by rpki-client on console-fra.rpki-client.org