Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/pLeYDjZ2WjIF5bY4wnF3GjAN43g.roa
File: pLeYDjZ2WjIF5bY4wnF3GjAN43g.roa (raw, json)
Hash identifier: 3N/nYKjkLAs4wlzXdbx1DDaycbS+UcFi+5xNT21EVq4=
Subject key identifier: A4:B7:98:0E:36:76:5A:32:05:E5:B6:38:C2:71:77:1A:30:0D:E3:78
Certificate issuer: /CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Certificate serial: 018AD85A4B46BDB9751CC2CA448AE0942A8C
Authority key identifier: 00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/pLeYDjZ2WjIF5bY4wnF3GjAN43g.roa
Signing time: Wed 27 Sep 2023 20:35:10 +0000
ROA not before: Wed 27 Sep 2023 20:35:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49981
IP address blocks: 185.81.183.0/24 maxlen: 24
93.114.62.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d8:5a:4b:46:bd:b9:75:1c:c2:ca:44:8a:e0:94:2a:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Validity
Not Before: Sep 27 20:35:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a4b7980e36765a3205e5b638c271771a300de378
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b3:0a:37:9c:9c:fe:4c:ca:e5:95:0e:87:14:
87:db:db:b3:5d:26:b5:c1:89:bb:ae:d8:03:9d:09:
39:b6:14:a6:63:23:a9:88:4e:45:99:74:52:0b:be:
a6:21:24:58:81:fe:fb:2f:6b:74:f2:00:18:14:b7:
4f:32:c2:07:e7:26:27:7b:93:49:13:d4:d0:e1:c8:
be:85:4c:5b:b1:70:c4:f4:92:06:e8:14:b8:60:21:
67:ac:db:f0:be:6a:4e:aa:c2:32:26:4d:04:63:a8:
19:ab:fa:c2:f2:ef:33:12:1c:6e:57:6d:3f:2d:76:
d9:d3:27:08:8a:20:99:87:8e:70:1e:ef:b8:6c:27:
27:0f:23:30:90:93:20:29:c9:c9:e8:74:20:3f:3a:
2d:43:cd:7c:17:86:12:9f:3e:77:cb:95:ae:b4:93:
6f:08:da:fc:36:67:f2:af:84:d6:c8:90:5b:57:8d:
ce:8c:bc:c6:72:be:6f:b7:93:06:d6:78:c6:b9:fa:
05:97:2e:97:6a:de:0f:a3:6f:c8:1d:56:b0:5e:fe:
ae:84:9e:57:1c:c6:b7:27:d2:ee:ff:ac:81:2d:e3:
cd:6d:40:c9:0c:b3:1c:da:ab:e1:77:2d:9b:3a:2f:
47:43:4d:6c:56:88:c9:c4:cc:1c:b1:42:bd:45:b8:
d8:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:B7:98:0E:36:76:5A:32:05:E5:B6:38:C2:71:77:1A:30:0D:E3:78
X509v3 Authority Key Identifier:
keyid:00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/pLeYDjZ2WjIF5bY4wnF3GjAN43g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.114.62.0/24
185.81.183.0/24
Signature Algorithm: sha256WithRSAEncryption
29:cf:59:b1:32:7f:b8:fa:ba:8d:92:6e:7e:df:20:b9:f0:f5:
66:71:8f:c9:0d:0b:8c:a5:6f:22:da:28:b8:35:c8:bf:35:1e:
68:d9:32:3d:cc:61:2e:dc:c5:08:e1:42:a9:73:9e:41:27:48:
db:af:45:e8:25:93:c2:10:ab:f0:b2:72:10:e8:af:01:d8:40:
50:3d:65:8d:85:d6:6a:ec:4f:83:1c:ce:9b:0e:38:78:e2:3d:
f4:f4:d0:cb:fd:9f:8c:08:5f:b3:06:0c:ab:06:86:c8:ff:fc:
90:82:cf:a2:74:d3:af:17:89:3d:9e:16:75:89:5c:eb:93:c5:
bd:46:a4:a6:13:dc:2c:13:0c:8a:25:3a:cb:5e:57:79:69:05:
c1:c4:09:62:ab:ca:9e:7e:c3:95:22:02:3a:31:d1:45:96:72:
27:1a:62:41:14:9f:60:a1:97:f9:01:37:c6:df:c7:04:83:02:
cb:b6:4f:af:a0:5b:eb:a5:33:6c:de:db:f8:64:b9:ac:e3:e3:
ad:a6:bc:3b:c3:e1:b7:93:9c:f3:bf:b1:90:78:d8:1c:2a:00:
b6:49:84:ae:06:59:5e:0a:37:55:a7:7a:f9:82:1b:c4:43:b4:
a3:da:d3:3c:6a:b0:44:30:8b:2c:a5:0c:5f:6c:14:ff:8c:46:
53:da:a3:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:51:48 2025 by rpki-client