Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/Bgbvcb1faGxtmcJLG39bbHVkLHk.roa
File: Bgbvcb1faGxtmcJLG39bbHVkLHk.roa (raw, json)
Hash identifier: J4tKKkgUXQm4d/hIczqCT8nTa1mqiTeYo/CoM6qoEYI=
Subject key identifier: 06:06:EF:71:BD:5F:68:6C:6D:99:C2:4B:1B:7F:5B:6C:75:64:2C:79
Certificate issuer: /CN=408af485b4fd0f03717cd4a709ef11c61d3ef46e
Certificate serial: 0185727117D12E18CFB111252782F649B6F1
Authority key identifier: 40:8A:F4:85:B4:FD:0F:03:71:7C:D4:A7:09:EF:11:C6:1D:3E:F4:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/Bgbvcb1faGxtmcJLG39bbHVkLHk.roa
Signing time: Mon 02 Jan 2023 12:24:52 +0000
ROA not before: Mon 02 Jan 2023 12:24:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20616
IP address blocks: 195.246.242.0/23 maxlen: 23
86.105.192.0/24 maxlen: 24
91.208.142.0/24 maxlen: 24
188.214.16.0/21 maxlen: 21
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:71:17:d1:2e:18:cf:b1:11:25:27:82:f6:49:b6:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=408af485b4fd0f03717cd4a709ef11c61d3ef46e
Validity
Not Before: Jan 2 12:24:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0606ef71bd5f686c6d99c24b1b7f5b6c75642c79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:b1:32:d8:ca:a9:21:2d:be:a8:e7:e2:31:4f:
04:92:6a:09:48:cd:17:88:18:0d:9e:99:46:08:c9:
21:2e:d7:55:89:11:f0:9e:c0:3b:ca:d0:dc:d5:90:
7f:6c:7b:46:1d:b5:fb:76:9d:ac:9e:c9:2c:31:e8:
1a:36:13:64:a8:34:14:68:f2:de:db:9a:18:95:00:
19:fe:06:98:fa:82:f1:fd:42:96:2b:ae:c5:f2:3b:
ce:60:a5:c6:e8:79:79:0a:13:ce:3c:b7:6c:79:7d:
e7:cc:1e:2b:0e:3d:bd:83:ac:19:db:5c:ef:11:01:
6b:c3:b6:b8:bf:8c:42:13:90:61:b5:53:ea:a6:21:
2f:55:aa:56:e7:74:3b:b0:c5:87:26:69:03:a8:59:
cf:35:96:1d:60:69:aa:97:b6:07:c9:ab:9d:1b:38:
f0:5b:57:1c:10:bf:98:5b:de:b8:b2:8e:39:0c:19:
a7:bc:04:26:c2:2b:11:62:9c:4c:a5:82:38:2c:f3:
06:a6:dd:60:cb:ba:d3:5a:9b:6a:65:01:d7:04:94:
0e:0c:8a:9e:1a:9c:4f:bd:a5:53:af:46:78:97:d8:
46:5c:ba:74:35:2d:a4:95:16:c7:28:28:76:d8:d0:
09:f1:88:3f:7c:bb:b2:b7:2f:5c:49:3d:75:26:0a:
a2:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:06:EF:71:BD:5F:68:6C:6D:99:C2:4B:1B:7F:5B:6C:75:64:2C:79
X509v3 Authority Key Identifier:
keyid:40:8A:F4:85:B4:FD:0F:03:71:7C:D4:A7:09:EF:11:C6:1D:3E:F4:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/Bgbvcb1faGxtmcJLG39bbHVkLHk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.105.192.0/24
91.208.142.0/24
188.214.16.0/21
195.246.242.0/23
Signature Algorithm: sha256WithRSAEncryption
59:6b:de:b9:58:22:ac:7e:ba:1a:6c:6d:21:16:d5:d2:ed:00:
1b:de:f1:0c:58:bb:87:c9:e1:2f:e4:f5:6d:cf:d7:d7:7f:fa:
9b:90:4c:e2:a8:69:00:ad:88:ff:17:11:bc:89:5e:6f:00:4c:
56:1a:5b:45:68:12:43:e4:49:69:63:14:71:36:3c:74:9c:92:
bf:f6:1a:a4:f4:7a:2d:3d:49:00:44:bb:94:cc:a0:fb:73:f3:
bc:9e:e3:2d:b8:6e:0e:e5:30:13:64:71:9b:c1:9d:57:cc:8c:
45:ec:71:1b:52:78:f2:27:63:53:dc:d6:fd:77:c9:0c:43:86:
6d:12:02:4e:c1:68:d0:45:f1:fc:cb:58:54:26:ca:aa:23:f3:
72:16:b8:5a:ed:5e:bb:d9:65:61:32:1a:04:dd:8d:c2:bc:57:
67:09:c3:a2:92:e9:ee:c8:6e:6a:04:87:83:cb:97:3c:e2:65:
8c:80:82:f8:50:ec:91:8e:8f:19:02:25:b9:59:10:7f:aa:a3:
7d:56:a7:7b:6f:95:b2:5b:d4:ec:8a:74:9d:a5:9a:63:10:1a:
97:c0:b5:bc:4f:a1:32:f8:21:ef:92:64:6e:e5:29:3b:0d:6f:
c5:04:36:cc:a4:c8:15:52:8c:c5:49:79:f9:f5:33:a3:67:b0:
24:62:08:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:06 2024 by rpki-client on console-ams.rpki-client.org