Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/aLHWJv3P2S1iHdcwrxcxf3i8gtE.roa
File: aLHWJv3P2S1iHdcwrxcxf3i8gtE.roa (raw, json)
Hash identifier: 1TyNqQawY2hb6oj/Ub+8j8lU4hXgKtouuEPIK9YECmA=
Subject key identifier: 68:B1:D6:26:FD:CF:D9:2D:62:1D:D7:30:AF:17:31:7F:78:BC:82:D1
Certificate issuer: /CN=458d12f095053c35876b88b47685d6435421fcf2
Certificate serial: 018CC8DF94E7446282B7B06EAC9D26635DC8
Authority key identifier: 45:8D:12:F0:95:05:3C:35:87:6B:88:B4:76:85:D6:43:54:21:FC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/aLHWJv3P2S1iHdcwrxcxf3i8gtE.roa
Signing time: Tue 02 Jan 2024 06:32:24 +0000
ROA not before: Tue 02 Jan 2024 06:32:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44066
IP address blocks: 79.132.138.0/24 maxlen: 24
79.132.136.0/24 maxlen: 24
79.132.142.0/24 maxlen: 24
79.132.143.0/24 maxlen: 24
79.132.140.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:94:e7:44:62:82:b7:b0:6e:ac:9d:26:63:5d:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=458d12f095053c35876b88b47685d6435421fcf2
Validity
Not Before: Jan 2 06:32:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=68b1d626fdcfd92d621dd730af17317f78bc82d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a5:d9:69:21:7b:ab:ff:f3:12:a3:6f:dc:ab:
a7:8f:95:26:81:69:07:54:1c:6e:74:d9:3e:d4:e3:
0e:04:df:c1:38:e9:9d:3c:4a:9c:7b:bc:90:f1:52:
be:a6:5a:2d:11:f5:7a:d3:2b:cf:67:cb:da:62:ad:
cb:f3:f0:fe:98:88:db:72:36:d0:1a:c5:3a:90:41:
c8:07:d9:27:45:5c:d6:47:6f:bb:cc:2f:68:cb:30:
a7:b0:17:cd:56:42:d5:e2:b0:f9:c0:50:ea:6f:5c:
30:c5:f3:93:d8:7e:f5:a1:19:d2:bd:d6:03:bd:73:
5a:4f:c2:b9:11:c6:d3:9d:1e:9e:2b:b8:7f:67:84:
f1:56:54:f5:a6:20:0b:53:d5:8f:0b:46:32:92:54:
72:0f:b9:55:50:39:5a:ed:98:42:97:61:42:00:2a:
f1:f1:3c:ee:d3:90:1f:47:49:24:25:e3:fa:b8:a4:
80:df:53:11:a9:3e:ba:0d:ff:cf:ca:c2:66:50:10:
ec:11:2c:8e:c4:61:1d:c9:08:1a:50:9d:12:7c:11:
15:43:9f:3a:80:21:1c:2a:03:5f:73:ca:7a:96:be:
27:fa:e9:75:83:aa:3b:44:d1:ba:4c:27:9c:5b:ec:
97:bd:8e:86:8c:e9:92:5b:8a:16:2e:41:1f:de:0b:
e5:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:B1:D6:26:FD:CF:D9:2D:62:1D:D7:30:AF:17:31:7F:78:BC:82:D1
X509v3 Authority Key Identifier:
keyid:45:8D:12:F0:95:05:3C:35:87:6B:88:B4:76:85:D6:43:54:21:FC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/aLHWJv3P2S1iHdcwrxcxf3i8gtE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.132.136.0/24
79.132.138.0/24
79.132.140.0/24
79.132.142.0/23
Signature Algorithm: sha256WithRSAEncryption
8e:b7:ec:d6:10:84:e6:74:c9:b5:b0:1a:f5:4e:3a:05:20:95:
e1:3d:08:b4:87:f7:b9:cb:23:77:5e:c7:3d:25:18:66:9e:de:
74:68:d9:d2:ed:ab:0a:fa:c0:a5:27:43:ad:5e:a6:a4:47:74:
bb:fe:94:69:e4:1d:76:2e:14:c6:a0:d4:0f:e7:a4:38:a4:31:
00:51:e9:28:cc:8e:65:a8:d5:2b:ff:81:c0:9c:02:78:87:05:
ac:8e:d0:f3:90:67:85:6e:e7:8c:45:7e:58:90:1c:7d:3f:82:
b6:b2:b8:55:8c:88:4e:57:5d:6a:95:7f:ec:28:86:01:0b:c4:
9e:6d:92:8b:3d:5f:35:50:02:16:be:8b:c4:e5:0d:b0:be:14:
93:ad:2b:38:52:4b:9c:77:09:3e:51:90:11:11:2d:75:96:5f:
be:29:44:6e:bf:16:b0:08:33:6e:65:48:65:61:28:30:69:4a:
52:3c:e5:1b:4b:1d:d0:9d:8b:22:1e:31:52:ba:9f:0c:5e:ed:
d7:da:2c:65:c9:58:40:33:ed:94:4c:27:42:80:58:88:2c:0f:
65:1f:59:56:da:08:db:43:61:bf:a5:da:b9:d4:c3:fa:77:cd:
36:08:92:73:c1:5b:3e:76:c5:c6:92:0c:38:9f:42:69:43:50:
be:12:3c:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:55 2024 by rpki-client on console-ams.rpki-client.org