Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/FRgRVFn4mkzvw4W1eq6K1ow41iM.roa
File: FRgRVFn4mkzvw4W1eq6K1ow41iM.roa (raw, json)
Hash identifier: XTe7r6ZnZ5CIa2kQDulDS50uYTz/2aZS1OKrB1ZV6D8=
Subject key identifier: 15:18:11:54:59:F8:9A:4C:EF:C3:85:B5:7A:AE:8A:D6:8C:38:D6:23
Certificate issuer: /CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Certificate serial: 0185EE9B38D5B788AA38F80DBBED4BC3B987
Authority key identifier: 00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/FRgRVFn4mkzvw4W1eq6K1ow41iM.roa
Signing time: Thu 26 Jan 2023 15:03:48 +0000
ROA not before: Thu 26 Jan 2023 15:03:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 93.114.60.0/24 maxlen: 24
93.114.61.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:ee:9b:38:d5:b7:88:aa:38:f8:0d:bb:ed:4b:c3:b9:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Validity
Not Before: Jan 26 15:03:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1518115459f89a4cefc385b57aae8ad68c38d623
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:95:d7:10:99:f2:2f:68:07:bb:d3:5b:be:5b:
90:fb:0c:2c:f0:c6:3f:59:0c:be:9a:08:f5:13:8d:
ef:49:54:5d:dd:77:e9:01:b2:90:3a:38:a0:1b:e2:
46:7a:7c:c6:25:11:58:c5:35:9f:7e:cd:2d:a0:7a:
69:24:88:a2:1d:36:11:8b:84:a4:ff:ba:1b:e4:7b:
59:dc:f4:b3:04:8c:54:2e:64:08:58:15:2a:f3:77:
b2:21:85:c0:7c:7b:aa:02:7a:72:61:ee:7b:5e:4f:
86:fd:f2:ad:f9:8f:d9:5b:83:50:66:6f:1a:67:76:
54:a7:9a:72:9d:81:74:9e:ea:1d:46:13:e0:c2:59:
65:fb:75:3a:a3:db:9a:df:aa:de:2e:1f:cc:e2:89:
70:d0:e4:10:f5:c6:f6:e3:88:2b:c0:f3:7e:92:19:
00:e2:41:3c:8e:2b:e2:f8:a5:5e:73:71:48:08:16:
15:d7:26:a1:ac:9b:64:2e:a2:30:c5:56:47:fa:31:
56:62:c0:7b:f5:ed:1d:99:3c:44:24:5a:79:79:34:
77:88:3d:20:9d:87:6f:b7:ca:d6:8e:f7:18:bd:5b:
1e:b5:4e:af:63:45:16:6f:e1:b9:32:71:62:94:ea:
cc:57:e9:41:93:b4:24:85:1e:35:c7:5a:bb:aa:ff:
91:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:18:11:54:59:F8:9A:4C:EF:C3:85:B5:7A:AE:8A:D6:8C:38:D6:23
X509v3 Authority Key Identifier:
keyid:00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/FRgRVFn4mkzvw4W1eq6K1ow41iM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.114.60.0/23
Signature Algorithm: sha256WithRSAEncryption
08:94:9c:88:f9:ab:3e:bc:5c:ef:01:49:56:b7:2b:44:f1:33:
6f:06:e6:05:82:9b:40:5c:40:c4:a7:35:dc:5f:ce:8d:d7:65:
1b:35:cd:e0:a1:d2:22:3b:0f:13:8d:bb:1c:f8:fb:45:2d:63:
d7:2b:e0:e5:ba:26:7d:7d:1b:15:93:b2:43:b4:f9:c8:ac:85:
28:48:70:1a:8b:5a:e1:53:23:e3:23:06:db:cf:8e:b1:5b:03:
36:2a:56:98:c4:bc:73:69:4d:b4:5b:ab:09:17:e2:6a:41:2c:
00:1d:08:81:fd:9f:4f:51:7a:13:e0:5f:b6:b6:7a:6d:b5:50:
cd:48:48:f5:84:6d:8d:bc:46:c4:bd:2d:6c:a7:31:cb:d1:f5:
00:0a:26:79:e6:a3:72:d7:36:42:71:8b:80:01:cd:54:d7:a9:
dc:c5:0b:0d:c7:67:a6:db:4b:0a:89:65:b0:94:67:b9:25:65:
83:56:49:d2:d7:d6:c7:77:f9:1f:22:59:d4:78:0d:4f:3b:2c:
1b:9c:43:1a:2c:8c:67:20:c5:96:c9:7a:77:d2:c2:e7:fc:ce:
51:a5:18:92:4a:15:98:03:c9:f8:8a:13:5d:81:90:55:5b:73:
0b:28:0b:c0:2e:6c:0a:c0:79:e2:4a:44:4f:32:cd:1e:8d:a5:
eb:3e:17:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:19:55 2025 by rpki-client