Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/hFHO7QnDy7l7cM8tUFfWz1YCOjw.roa
File: hFHO7QnDy7l7cM8tUFfWz1YCOjw.roa (raw, json)
Hash identifier: ubme4DWUx3n3cWTsxBVFwKECLTBTCNzZFEIPly/gnY4=
Subject key identifier: 84:51:CE:ED:09:C3:CB:B9:7B:70:CF:2D:50:57:D6:CF:56:02:3A:3C
Certificate issuer: /CN=345b4f7b4a16db9e924f0908cee3da26f22ad481
Certificate serial: 01856D785C477B88CF96888F95BA89C75AB4
Authority key identifier: 34:5B:4F:7B:4A:16:DB:9E:92:4F:09:08:CE:E3:DA:26:F2:2A:D4:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NFtPe0oW256STwkIzuPaJvIq1IE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/hFHO7QnDy7l7cM8tUFfWz1YCOjw.roa
Signing time: Sun 01 Jan 2023 13:14:42 +0000
ROA not before: Sun 01 Jan 2023 13:14:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8298
IP address blocks: 194.1.163.0/24 maxlen: 24
92.119.38.0/24 maxlen: 24
2001:678:d78::/48 maxlen: 48
2a0b:dd80::/29 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:78:5c:47:7b:88:cf:96:88:8f:95:ba:89:c7:5a:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=345b4f7b4a16db9e924f0908cee3da26f22ad481
Validity
Not Before: Jan 1 13:14:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8451ceed09c3cbb97b70cf2d5057d6cf56023a3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:3d:e9:2e:b4:41:45:1e:a4:2b:9a:ce:f4:cc:
8a:a0:41:2d:02:a8:77:23:61:7e:a2:14:6a:79:45:
fe:7c:23:2f:8f:4c:2d:13:21:95:d7:f6:19:0e:79:
73:97:7f:88:a1:b2:4e:9b:44:83:1d:d6:ef:7e:69:
5b:ae:71:5d:99:a7:e9:50:68:c9:89:a1:d7:b4:75:
1d:6e:59:76:d9:34:4c:ca:fe:79:b1:d3:67:16:9a:
70:f6:76:3d:30:8e:20:7c:8e:de:01:c0:0b:85:36:
b9:86:10:71:4f:60:10:75:ff:14:a9:0e:75:10:b9:
24:1e:aa:46:e8:68:75:10:3b:b9:51:64:93:7b:b0:
3c:4e:bc:5a:63:c6:48:6e:54:4d:6f:8d:4b:c1:ad:
1c:8b:c6:84:d2:59:6f:4a:1b:b4:92:c4:8a:eb:8d:
fb:a8:1a:dc:50:a3:c9:cb:ce:54:2d:73:6f:ea:53:
0f:79:30:95:d0:2a:14:ae:6c:3c:b5:19:b5:36:b9:
82:28:39:38:61:12:67:0e:0e:0c:d9:65:25:4c:e8:
bd:5c:f0:6e:d9:32:1e:a6:a8:c4:57:dd:98:13:a0:
d0:77:c9:4f:fa:a9:5c:7a:b2:06:a8:ad:94:8d:09:
fc:be:4b:5f:5b:8c:7d:78:82:c5:c5:fb:78:9a:7f:
9e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:51:CE:ED:09:C3:CB:B9:7B:70:CF:2D:50:57:D6:CF:56:02:3A:3C
X509v3 Authority Key Identifier:
keyid:34:5B:4F:7B:4A:16:DB:9E:92:4F:09:08:CE:E3:DA:26:F2:2A:D4:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NFtPe0oW256STwkIzuPaJvIq1IE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/hFHO7QnDy7l7cM8tUFfWz1YCOjw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.38.0/24
194.1.163.0/24
IPv6:
2001:678:d78::/48
2a0b:dd80::/29
Signature Algorithm: sha256WithRSAEncryption
67:0b:0f:9f:ac:29:5c:43:aa:1d:8b:89:b9:1f:35:a6:f4:1b:
02:02:d5:27:9e:88:11:9a:9b:87:d3:f5:af:d1:59:d9:f8:fc:
98:fe:6b:e2:1f:b3:bc:55:85:af:00:79:88:e3:2d:3c:a5:bd:
80:55:4a:54:60:c6:5f:45:5f:46:63:8a:54:5a:31:9e:11:54:
dd:a9:b7:cd:af:f8:a8:2c:b7:ef:98:74:69:0b:7e:6d:61:23:
4d:56:f2:df:b5:65:7c:56:ba:7e:65:c7:b9:28:6d:39:da:a0:
a6:d8:7c:cf:a8:07:91:e1:ad:35:d9:62:06:46:40:36:a3:9b:
ff:58:1e:d7:20:e8:14:aa:d9:32:38:be:f3:8b:98:ea:41:09:
eb:e0:66:84:a1:98:3f:b9:12:d0:02:40:5b:a0:06:d0:b9:5c:
8d:97:e1:c2:f5:ad:8b:2d:28:db:07:c6:fd:69:60:47:2b:b8:
9c:9c:7e:fa:83:3f:a5:24:ac:26:cf:ca:a5:49:9a:0c:c6:2b:
c8:d2:83:25:a8:22:d5:ca:3a:bb:1b:17:e7:e9:ad:0c:bb:bb:
70:df:9b:32:c1:47:eb:8e:1a:b9:32:90:e4:45:eb:5c:17:91:
06:cf:42:a8:c3:d0:92:ea:0d:f7:f8:41:f7:61:3e:f3:e9:26:
89:ca:0d:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:56 2024 by rpki-client on console-fra.rpki-client.org