Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/rkRU2-33PY6byvPN2KSFozqOdxM.roa
File: rkRU2-33PY6byvPN2KSFozqOdxM.roa (raw, json)
Hash identifier: sE6oUWp+bDeHkgWMvkDV2HnlJMEzyQCuXPPhCiAH+zI=
Subject key identifier: AE:44:54:DB:ED:F7:3D:8E:9B:CA:F3:CD:D8:A4:85:A3:3A:8E:77:13
Certificate issuer: /CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Certificate serial: 018AD11BB042D2CF794D2175F97EDB62C8F9
Authority key identifier: 00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/rkRU2-33PY6byvPN2KSFozqOdxM.roa
Signing time: Tue 26 Sep 2023 10:49:27 +0000
ROA not before: Tue 26 Sep 2023 10:49:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 91.243.179.0/24 maxlen: 24
195.242.241.0/24 maxlen: 24
195.242.243.0/24 maxlen: 24
185.81.181.0/24 maxlen: 24
185.81.180.0/23 maxlen: 23
93.114.61.0/24 maxlen: 24
93.114.62.0/24 maxlen: 24
89.46.10.0/24 maxlen: 24
89.46.11.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d1:1b:b0:42:d2:cf:79:4d:21:75:f9:7e:db:62:c8:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Validity
Not Before: Sep 26 10:49:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ae4454dbedf73d8e9bcaf3cdd8a485a33a8e7713
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e2:7f:20:91:33:36:c3:e2:6b:d1:41:26:10:
96:a7:94:33:26:41:f5:44:9e:8f:58:ab:b2:45:73:
e5:ee:12:10:f9:72:30:1a:35:54:36:fb:a5:f5:f0:
09:dd:6a:21:f9:e6:6b:cc:37:04:c7:7a:84:a1:3d:
30:34:9b:fa:f2:06:ce:08:9f:f2:1d:46:08:37:4d:
c5:3c:48:11:e9:70:f3:6b:4d:1f:b5:41:e6:f2:aa:
52:88:27:bf:a4:40:43:10:fb:1e:66:2e:bc:60:18:
3e:44:d8:b4:ae:81:2b:d5:c8:6b:62:bd:7f:53:d4:
c3:c6:f8:7c:44:68:91:00:c9:2e:c1:3f:a8:0e:17:
82:5d:5e:da:e6:9e:8c:e5:9b:f4:be:46:2d:bf:6a:
44:c4:24:23:95:9c:a2:c7:9a:41:c4:dc:f1:e7:c9:
46:49:d6:6f:f7:e1:0b:39:da:0e:3b:99:91:76:66:
d3:72:ab:b1:ac:3d:ef:d9:e6:41:0f:39:a1:76:12:
42:9d:ca:8f:4e:fc:03:41:41:6d:ea:b2:59:e1:4b:
b4:fb:fd:c9:91:02:f4:b4:c7:21:c2:86:24:72:72:
49:f9:bd:c9:68:38:a7:8b:be:f5:db:b6:98:eb:62:
fc:a3:97:c1:8d:2e:4b:13:49:6e:87:51:01:b4:5a:
95:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:44:54:DB:ED:F7:3D:8E:9B:CA:F3:CD:D8:A4:85:A3:3A:8E:77:13
X509v3 Authority Key Identifier:
keyid:00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/rkRU2-33PY6byvPN2KSFozqOdxM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.46.10.0/23
91.243.179.0/24
93.114.61.0-93.114.62.255
185.81.180.0/23
195.242.241.0/24
195.242.243.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:bd:fa:30:48:70:74:30:32:a8:0a:69:a6:fc:5c:c7:51:d4:
b7:08:83:39:bd:5e:6f:96:b4:28:6c:70:c7:e6:01:05:13:41:
ed:d1:e3:6c:43:47:83:cf:d2:bc:57:bb:df:c7:a8:9e:dd:d0:
73:ca:34:d4:53:0f:43:c8:12:26:a3:e7:a0:b3:1f:51:a3:25:
97:9d:b4:6f:28:e0:d3:57:73:29:9f:2e:33:0c:88:e7:43:8f:
e1:68:ce:cb:aa:39:40:f9:ec:52:c7:fb:ab:5a:18:63:d8:ba:
82:9c:7b:a7:ee:f4:fe:cc:dd:d9:07:8b:04:a7:80:81:f1:be:
11:cc:91:52:bc:ee:49:79:30:1d:34:08:9d:33:ea:02:c0:b4:
91:d0:c8:10:be:2f:81:48:e7:df:62:51:56:5b:8a:d6:56:0a:
61:6b:3c:62:ec:82:31:09:b4:fa:58:28:05:e1:96:23:9d:17:
ea:92:f3:7f:2d:ae:94:51:6f:19:7c:ed:78:60:34:40:49:2b:
5d:5b:07:18:0c:a3:7e:0d:b2:c5:8a:03:18:54:c9:b3:20:e7:
e9:e6:0f:36:4c:ce:02:10:e7:ff:23:81:29:40:14:91:56:70:
84:b5:d9:f0:85:4d:4f:b5:0d:91:4c:98:e4:3f:5b:d4:01:36:
87:75:cb:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:15:41 2025 by rpki-client