Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/B2fMR5mnx56jWdbtFfzNLSeiHKQ.roa
File: B2fMR5mnx56jWdbtFfzNLSeiHKQ.roa (raw, json)
Hash identifier: j1CAlQXZMaH+nIMWfMm+iaqueByluiaGfsvwYGdGZTg=
Subject key identifier: 07:67:CC:47:99:A7:C7:9E:A3:59:D6:ED:15:FC:CD:2D:27:A2:1C:A4
Certificate issuer: /CN=408af485b4fd0f03717cd4a709ef11c61d3ef46e
Certificate serial: 03253065
Authority key identifier: 40:8A:F4:85:B4:FD:0F:03:71:7C:D4:A7:09:EF:11:C6:1D:3E:F4:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/B2fMR5mnx56jWdbtFfzNLSeiHKQ.roa
Signing time: Sat 01 Jan 2022 12:02:31 +0000
ROA not before: Sat 01 Jan 2022 12:02:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25116
IP address blocks: 86.104.210.0/24 maxlen: 24
188.215.64.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52768869 (0x3253065)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=408af485b4fd0f03717cd4a709ef11c61d3ef46e
Validity
Not Before: Jan 1 12:02:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0767cc4799a7c79ea359d6ed15fccd2d27a21ca4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d6:cf:9d:45:01:de:29:9f:06:41:78:f7:d5:
a6:16:8e:d6:e2:f6:ed:f3:e0:ed:23:74:1a:68:e8:
7a:18:57:52:2c:23:6a:80:89:06:f7:c8:38:27:d5:
12:aa:11:12:a4:a3:d1:ef:dd:ad:17:8e:8a:4d:53:
ce:ec:c0:bc:b0:82:f8:0d:eb:9b:53:3d:f1:d6:61:
7b:32:0d:96:c2:60:a8:ef:27:ca:5d:69:2f:c0:51:
8f:44:f6:9a:c6:cd:97:49:65:9d:b5:ef:dd:b2:20:
66:8f:6b:03:91:09:09:df:c2:6f:74:7a:12:a5:32:
60:b6:1c:90:44:ed:a0:0d:d0:08:2d:d0:c0:d4:6d:
6d:ee:7e:7d:8c:4f:43:8a:17:53:f3:6a:ca:ed:d3:
7d:6c:8e:bf:9b:4b:f8:13:eb:53:7f:57:f1:4c:af:
8f:56:15:aa:4d:35:d1:be:50:97:69:d6:44:0e:4f:
1e:18:f1:5c:3a:69:81:e7:47:e5:e5:27:09:ba:55:
f7:8d:98:ff:86:5f:a7:2c:a1:58:f7:22:df:b1:d8:
9f:f1:00:d8:e2:34:3f:bc:0d:94:82:da:ef:e1:c1:
71:bd:4c:fa:f5:39:e2:d7:f7:66:07:53:17:0f:6d:
ed:b2:8e:20:37:98:de:02:7b:3c:e8:12:4c:21:82:
d5:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:67:CC:47:99:A7:C7:9E:A3:59:D6:ED:15:FC:CD:2D:27:A2:1C:A4
X509v3 Authority Key Identifier:
keyid:40:8A:F4:85:B4:FD:0F:03:71:7C:D4:A7:09:EF:11:C6:1D:3E:F4:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/B2fMR5mnx56jWdbtFfzNLSeiHKQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.104.210.0/24
188.215.64.0/24
Signature Algorithm: sha256WithRSAEncryption
95:7d:44:dd:50:d2:3f:8e:d4:6e:a1:1d:88:9f:66:0a:06:c5:
b3:04:12:b8:a8:c9:08:83:81:a2:9d:45:f5:47:5e:ac:b5:38:
1c:68:44:bb:a7:d0:77:a3:82:f4:7a:38:3b:0e:08:28:73:ef:
cd:aa:1a:15:9f:1b:98:59:51:6e:02:3c:16:c4:46:a8:c4:45:
8e:62:c6:23:ac:36:be:49:79:ac:31:e4:29:b3:a4:fe:a4:54:
e0:99:00:09:2b:97:18:91:9b:53:40:44:e7:a5:22:07:de:7c:
3a:33:a5:7e:50:d7:43:64:5f:2d:c9:50:8d:ab:02:1e:c4:a1:
12:76:38:df:e9:46:78:2f:63:5d:c9:51:a4:47:77:14:25:0f:
b8:82:8e:fb:80:ab:8c:15:3f:99:8b:02:df:a2:51:94:1c:a4:
38:84:77:09:d0:0c:3a:2f:2e:4e:4a:24:f1:86:2b:8b:8c:55:
07:41:e7:56:d5:c9:29:e2:a9:f0:5d:78:b3:2e:c4:39:9b:cd:
a3:1a:c8:46:2c:d4:47:2e:de:af:ac:f0:ed:82:b4:9a:2b:ad:
f1:91:d4:05:70:ad:60:69:24:a3:56:18:2f:0e:2f:63:f2:79:
37:47:16:44:92:7d:e0:2f:83:9b:69:55:1a:a3:40:82:16:ad:
81:c7:a7:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:20 2023 by rpki-client on console-ams.rpki-client.org