Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/3atl4Jh2aunXJEcDT06jsoG9xgo.roa
File: 3atl4Jh2aunXJEcDT06jsoG9xgo.roa (raw, json)
Hash identifier: fTPi9HkUaZmY/218QJ8FrcDhgrqSXkrCVx/K5BYU9Dc=
Subject key identifier: DD:AB:65:E0:98:76:6A:E9:D7:24:47:03:4F:4E:A3:B2:81:BD:C6:0A
Certificate issuer: /CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Certificate serial: 018BEBFDD05EF54404BEE061BCC0F10ACC2E
Authority key identifier: 00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/3atl4Jh2aunXJEcDT06jsoG9xgo.roa
Signing time: Mon 20 Nov 2023 09:09:21 +0000
ROA not before: Mon 20 Nov 2023 09:09:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 91.243.176.0/24 maxlen: 24
185.81.180.0/23 maxlen: 23
93.114.61.0/24 maxlen: 24
89.46.8.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:eb:fd:d0:5e:f5:44:04:be:e0:61:bc:c0:f1:0a:cc:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Validity
Not Before: Nov 20 09:09:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ddab65e098766ae9d72447034f4ea3b281bdc60a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:81:55:1d:ef:e3:87:0f:6a:64:35:a5:8c:d1:
1d:71:9d:b7:0b:ce:98:73:fd:33:b3:d2:a3:50:9a:
aa:6b:50:6d:68:9c:8d:9a:98:07:04:3f:43:34:f1:
93:dd:9f:66:9b:71:a4:22:d3:7e:60:70:9f:b5:27:
51:82:a1:04:de:7b:76:ea:db:8f:46:b9:41:f6:c7:
e4:82:39:95:74:9a:67:38:96:4b:13:8a:cd:ab:7a:
7c:8c:57:01:9a:19:55:e4:e0:ec:a8:52:cb:2e:59:
98:9a:c2:60:66:42:eb:1b:15:d4:d3:0a:58:f4:d1:
b4:6f:fd:99:a9:f6:fe:a2:23:05:54:b2:e8:98:26:
3a:f1:2b:4c:c0:e6:8b:d9:58:8c:70:dd:3a:37:de:
41:ec:4a:af:11:66:fb:ca:42:0b:0c:a9:75:a4:6b:
e4:88:47:b2:74:2a:ed:15:c0:3d:25:4f:08:bd:32:
22:b1:75:4a:31:4b:61:85:91:ea:a6:cc:0d:54:c2:
b9:1d:53:7c:97:8c:e7:1e:d8:32:79:03:03:06:86:
1a:5d:6a:79:9d:ad:ad:8e:0d:26:af:aa:ed:e8:ab:
76:16:18:ec:31:be:ac:27:25:75:5e:ac:e7:03:43:
d1:58:2a:bd:7f:f3:b0:5a:5b:b6:5f:44:9c:7a:fc:
7b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:AB:65:E0:98:76:6A:E9:D7:24:47:03:4F:4E:A3:B2:81:BD:C6:0A
X509v3 Authority Key Identifier:
keyid:00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/3atl4Jh2aunXJEcDT06jsoG9xgo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.46.8.0/24
91.243.176.0/24
93.114.61.0/24
185.81.180.0/23
Signature Algorithm: sha256WithRSAEncryption
65:56:54:4e:26:3c:e3:b1:02:a6:e9:46:bd:ab:7e:c1:0a:10:
1b:73:f9:76:66:0d:f7:0d:4d:a7:5e:1b:9f:bc:1d:6c:ae:28:
9f:6d:10:3f:a2:ee:29:86:f1:5b:4c:9a:f8:da:ed:75:c7:8e:
14:7c:c2:82:88:a4:12:6d:78:9e:2f:9f:14:97:50:89:87:ac:
f3:51:5f:5c:33:62:12:2c:2a:f5:21:32:a0:59:80:2f:95:cb:
ea:22:87:92:9c:09:17:3c:4f:77:2e:a7:71:f7:0d:9a:96:7d:
d5:8a:e1:8a:de:d0:a9:5c:7d:83:7a:48:c2:21:cf:84:01:e4:
26:4e:23:0b:29:ed:48:51:2b:13:3a:9a:59:e3:17:0a:da:a9:
11:38:24:c0:d9:ea:12:3a:ed:72:f9:76:89:66:45:33:19:79:
6c:2e:22:70:85:26:65:b2:05:02:76:d8:a1:e8:5f:81:05:b8:
ca:73:a5:05:3d:ab:c2:b0:e7:24:3c:6b:6d:9d:5f:e9:2f:22:
a5:44:f2:13:d2:64:45:8b:f2:1d:64:3f:8b:e8:75:9e:81:83:
04:5a:73:1b:57:eb:5b:1d:50:49:57:55:10:38:f3:8a:bc:9f:
e4:10:88:43:3e:ac:85:3e:2a:68:38:1e:d5:e3:82:f4:d0:bc:
75:bd:c9:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:33:17 2025 by rpki-client