Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/920I6FXTyBZsDtlO4pjVXOUHIh4.roa
File: 920I6FXTyBZsDtlO4pjVXOUHIh4.roa (raw, json)
Hash identifier: ntLzHDih5P4Qlb81OUaURplz7oGPl/J23FUyDNophcw=
Subject key identifier: F7:6D:08:E8:55:D3:C8:16:6C:0E:D9:4E:E2:98:D5:5C:E5:07:22:1E
Certificate issuer: /CN=992b86095ce558d2e9618728a44228a27be9098f
Certificate serial: 0183D136DA66CE8789F78E185995085D0F0A
Authority key identifier: 99:2B:86:09:5C:E5:58:D2:E9:61:87:28:A4:42:28:A2:7B:E9:09:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSuGCVzlWNLpYYcopEIoonvpCY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/920I6FXTyBZsDtlO4pjVXOUHIh4.roa
Signing time: Thu 13 Oct 2022 11:59:36 +0000
ROA not before: Thu 13 Oct 2022 11:59:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207326
IP address blocks: 166.108.188.0/22 maxlen: 24
166.108.200.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:d1:36:da:66:ce:87:89:f7:8e:18:59:95:08:5d:0f:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=992b86095ce558d2e9618728a44228a27be9098f
Validity
Not Before: Oct 13 11:59:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f76d08e855d3c8166c0ed94ee298d55ce507221e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:81:f1:bf:e5:81:84:b1:2c:1a:38:6c:8e:c0:
63:3b:b1:e0:07:06:87:67:21:0a:aa:65:f2:7d:90:
71:e5:5e:e6:39:c5:fe:a5:d3:4e:64:8f:08:ea:a0:
0b:05:b5:03:ff:5f:c1:35:e8:65:c7:35:50:8e:8f:
ba:b4:14:f4:3e:d4:b4:fc:75:26:61:28:19:fa:a9:
72:36:e8:6b:0a:41:6f:97:15:af:e3:62:65:0d:fe:
65:de:72:be:3b:93:bc:d4:18:97:7f:0f:35:9a:79:
02:a9:df:40:6f:44:32:76:ff:89:5a:9f:a0:8c:de:
04:00:47:aa:e8:00:d6:c3:d1:71:68:21:86:1d:7a:
54:34:0c:4c:ea:62:ab:52:95:25:67:d2:98:fc:d7:
62:c5:f9:1f:c9:ee:83:d2:cb:7a:97:62:5c:a3:e0:
50:02:0a:86:a0:96:c1:82:2f:34:d1:74:9f:28:32:
33:52:6c:1a:36:74:d8:24:ee:67:26:48:86:84:ba:
ac:ad:83:df:12:42:18:93:5b:16:f5:85:24:bb:66:
33:ab:30:c0:64:ee:dd:77:13:34:9e:9a:d6:f0:c4:
e0:28:dc:76:58:2b:31:f9:da:7d:5f:5e:89:c7:db:
d0:17:19:ed:8b:2d:d2:a1:f7:3c:eb:97:3a:62:ab:
6f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:6D:08:E8:55:D3:C8:16:6C:0E:D9:4E:E2:98:D5:5C:E5:07:22:1E
X509v3 Authority Key Identifier:
keyid:99:2B:86:09:5C:E5:58:D2:E9:61:87:28:A4:42:28:A2:7B:E9:09:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSuGCVzlWNLpYYcopEIoonvpCY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/920I6FXTyBZsDtlO4pjVXOUHIh4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
166.108.188.0/22
166.108.200.0/22
Signature Algorithm: sha256WithRSAEncryption
a8:f1:05:92:de:12:6a:e1:3c:58:f0:b6:d6:b3:86:84:9a:10:
08:6d:3a:74:10:62:a5:15:55:bc:3e:a5:a4:8f:40:11:72:c3:
1f:58:9a:ec:d8:87:e2:d9:d0:80:ff:a6:31:6e:0c:d4:b6:d1:
1b:f4:79:1d:c3:4e:da:27:a4:ca:c1:30:0d:65:c2:4d:2f:c9:
bd:5b:61:44:63:c0:75:5c:b4:0c:7a:89:72:96:15:99:a0:63:
bd:c9:4f:f2:8e:67:2d:14:af:76:d4:74:43:d9:47:d8:15:16:
46:8f:07:6e:4c:f0:ee:98:16:a7:00:13:7d:a5:06:94:35:bb:
8b:06:09:f4:fe:25:9b:6d:23:c8:73:b1:25:a3:08:3e:ae:59:
b9:ec:65:9d:72:3b:4d:0c:ac:1f:7f:12:3f:e0:6a:bc:a8:b6:
30:66:18:ed:a0:a2:c0:85:1e:0b:ae:a3:79:e6:50:d2:03:55:
8c:97:dc:37:47:d5:18:a5:e2:68:64:4e:e6:9b:5b:02:10:2e:
5c:0d:e9:ed:47:67:d5:c5:bf:a8:28:cc:95:c2:b2:de:c7:2f:
09:e8:ad:f9:30:74:dd:7b:89:4d:f9:77:1b:ca:0f:bc:d6:37:
6b:30:db:4e:9f:a3:57:d1:25:79:61:d6:54:11:4c:7e:65:0f:
1d:82:cb:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:46 2024 by rpki-client on console-fra.rpki-client.org