Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/7MRpuUoneBjYEf1ILP-bH4UOL4M.roa
File: 7MRpuUoneBjYEf1ILP-bH4UOL4M.roa (raw, json)
Hash identifier: SJTgLrxOKeqTUI0z2+TfbC2Rgj3QOoDWTsgBjKDYm5I=
Subject key identifier: EC:C4:69:B9:4A:27:78:18:D8:11:FD:48:2C:FF:9B:1F:85:0E:2F:83
Certificate issuer: /CN=260b2bc45477c81d774daa0c28ab44b774ba0920
Certificate serial: 018CC26D0A91CAA76672E16DBB84DC551798
Authority key identifier: 26:0B:2B:C4:54:77:C8:1D:77:4D:AA:0C:28:AB:44:B7:74:BA:09:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JgsrxFR3yB13TaoMKKtEt3S6CSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/7MRpuUoneBjYEf1ILP-bH4UOL4M.roa
Signing time: Mon 01 Jan 2024 00:29:35 +0000
ROA not before: Mon 01 Jan 2024 00:29:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209372
IP address blocks: 88.214.51.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:0a:91:ca:a7:66:72:e1:6d:bb:84:dc:55:17:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=260b2bc45477c81d774daa0c28ab44b774ba0920
Validity
Not Before: Jan 1 00:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ecc469b94a277818d811fd482cff9b1f850e2f83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e7:6a:29:22:36:12:ad:c6:11:92:7a:ae:8a:
e8:56:f4:04:ea:f7:e0:59:ee:56:d2:db:25:cd:b5:
f1:8e:bc:f5:f1:99:3f:fd:9c:8a:a1:d9:87:d6:69:
15:6c:12:c6:7b:dc:aa:e8:9a:5c:6e:23:f4:9c:0a:
3f:34:ef:dd:c4:eb:24:de:4f:19:4c:5c:2a:85:49:
59:ad:14:6c:8f:78:72:8b:de:e3:95:16:ae:6f:87:
1e:09:29:bc:dc:4e:1c:16:d3:f7:b0:4f:7f:7f:46:
d7:89:99:36:c8:b9:4f:d5:75:ca:a3:bf:2e:f1:9f:
93:3c:6c:9f:97:08:fd:06:8c:c4:14:26:ef:db:ad:
66:c4:c6:23:91:ae:63:ff:fe:fb:b4:f8:23:ef:eb:
c9:0d:91:4d:8d:c0:5e:df:72:46:c7:90:1e:64:74:
c6:8f:25:8c:67:a3:ed:e1:3f:6e:24:9a:96:e5:c8:
25:d9:59:f6:66:c8:ea:b4:81:b1:37:63:a6:66:33:
64:12:30:05:cd:54:e3:c9:72:7a:db:a2:0d:02:15:
ca:7f:b5:4a:dc:ca:ac:f1:93:15:55:d6:e3:59:be:
46:de:7c:25:23:47:ed:7d:3a:af:ef:8d:2d:7f:91:
2a:ed:00:42:c0:5d:72:63:77:18:82:7a:1a:9a:af:
ff:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:C4:69:B9:4A:27:78:18:D8:11:FD:48:2C:FF:9B:1F:85:0E:2F:83
X509v3 Authority Key Identifier:
keyid:26:0B:2B:C4:54:77:C8:1D:77:4D:AA:0C:28:AB:44:B7:74:BA:09:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JgsrxFR3yB13TaoMKKtEt3S6CSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/7MRpuUoneBjYEf1ILP-bH4UOL4M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/JgsrxFR3yB13TaoMKKtEt3S6CSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.214.51.0/24
Signature Algorithm: sha256WithRSAEncryption
39:7e:58:68:6f:0a:0a:e5:1d:cd:76:b0:ed:7c:78:f8:29:59:
ed:ab:19:ae:7f:fe:0c:d4:5c:01:55:c2:69:2e:ac:2d:2b:46:
cb:6e:d6:f8:39:0c:e5:3a:0a:26:dc:80:08:6b:3f:66:69:fe:
30:4e:48:39:5c:03:bb:c3:90:a7:60:ef:7a:9b:ce:f4:28:17:
42:31:76:b8:97:db:4b:08:fc:eb:6c:e6:69:12:91:4c:e8:06:
92:c8:ee:22:2f:e1:2a:86:87:b2:1a:b6:52:38:50:2c:c0:13:
c3:83:6c:40:5c:db:13:e9:8e:2e:5b:5c:e0:51:0a:a7:78:66:
8e:ac:ad:80:4d:23:66:81:93:87:90:a3:1c:56:df:7a:c2:d6:
e9:c8:3e:6c:07:3b:8c:31:9d:c0:9e:4b:c2:71:d4:a6:cb:ba:
64:98:aa:af:c7:14:71:96:d8:93:9d:6f:a4:4d:e2:0f:96:64:
d8:06:9f:8f:67:19:cb:92:b2:ba:50:6c:61:f4:45:3d:36:85:
51:8d:08:60:10:f3:2e:b0:d1:45:ca:d9:bc:3a:f8:f5:93:5b:
ae:0a:1f:0c:9a:37:6a:1b:13:68:f2:a0:1f:aa:36:7f:06:80:
82:8f:75:99:ce:84:21:1a:ad:90:8e:5e:d0:d4:8a:7f:5c:8a:
6a:87:2a:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:02 2024 by rpki-client on console-fra.rpki-client.org