Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b16080-1813-492b-a7c2-98d4ffea210c/1/8k6E1QwuhVQ8689R_ffdr9f6Lhc.roa
File: 8k6E1QwuhVQ8689R_ffdr9f6Lhc.roa (raw, json)
Hash identifier: IDCFPeycDNofi2yz9hTtgnJ9lI/3F2gIh25cgJu+SPY=
Subject key identifier: F2:4E:84:D5:0C:2E:85:54:3C:EB:CF:51:FD:F7:DD:AF:D7:FA:2E:17
Certificate issuer: /CN=3f283af20fe6cf39100169d776bafa78241f44ed
Certificate serial: 018AFBF6EB9D27BBE7DD63701D11AE59801B
Authority key identifier: 3F:28:3A:F2:0F:E6:CF:39:10:01:69:D7:76:BA:FA:78:24:1F:44:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pyg68g_mzzkQAWnXdrr6eCQfRO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/b16080-1813-492b-a7c2-98d4ffea210c/1/8k6E1QwuhVQ8689R_ffdr9f6Lhc.roa
Signing time: Wed 04 Oct 2023 18:32:57 +0000
ROA not before: Wed 04 Oct 2023 18:32:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47714
IP address blocks: 91.202.211.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:fb:f6:eb:9d:27:bb:e7:dd:63:70:1d:11:ae:59:80:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f283af20fe6cf39100169d776bafa78241f44ed
Validity
Not Before: Oct 4 18:32:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f24e84d50c2e85543cebcf51fdf7ddafd7fa2e17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:51:be:a9:45:24:72:c8:ce:9c:8e:2d:f7:15:
b4:c8:02:a9:fd:42:14:d0:06:97:1f:43:12:54:dd:
4b:5b:e5:6c:05:a0:57:7f:bc:2e:64:50:61:cb:e2:
ef:a4:cf:86:99:8a:3c:61:8f:de:a5:9c:82:52:90:
a4:91:a0:96:e3:e0:e0:cf:e2:61:82:e5:29:de:a6:
f0:41:c9:62:72:31:4f:8c:ff:95:19:ca:17:ac:26:
97:80:c1:49:86:03:09:15:53:5a:39:9a:84:53:5d:
79:bd:de:a4:ea:94:41:7c:4f:e8:b2:9c:90:6e:33:
1b:a8:dd:56:74:98:da:10:f2:73:dc:7f:bf:a5:74:
08:43:49:a4:bf:45:7b:77:34:26:7a:e3:60:d0:f5:
04:4e:38:0a:31:ea:68:a1:3e:d7:ad:0b:a1:c3:8d:
2b:4c:9c:3e:ea:90:1c:22:b3:f6:dd:7c:a5:9a:46:
00:f5:ef:38:6b:41:a4:0f:7d:99:82:20:57:10:3b:
b2:00:0e:0b:32:10:a2:15:26:6f:08:0d:30:03:af:
71:20:06:ef:7b:2d:e8:5b:00:09:34:1b:3e:c6:42:
8a:fa:8f:76:bf:ab:2c:8d:01:70:ef:38:8e:57:14:
4d:ba:4c:5c:7e:92:76:d2:ad:b5:14:1d:ed:91:52:
6e:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:4E:84:D5:0C:2E:85:54:3C:EB:CF:51:FD:F7:DD:AF:D7:FA:2E:17
X509v3 Authority Key Identifier:
keyid:3F:28:3A:F2:0F:E6:CF:39:10:01:69:D7:76:BA:FA:78:24:1F:44:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pyg68g_mzzkQAWnXdrr6eCQfRO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b16080-1813-492b-a7c2-98d4ffea210c/1/8k6E1QwuhVQ8689R_ffdr9f6Lhc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b16080-1813-492b-a7c2-98d4ffea210c/1/Pyg68g_mzzkQAWnXdrr6eCQfRO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.202.211.0/24
Signature Algorithm: sha256WithRSAEncryption
54:d8:23:27:b3:18:d5:aa:56:db:f0:97:75:96:0e:56:14:58:
4f:da:e3:55:95:f1:e5:20:21:84:08:ad:b8:64:69:d4:e0:7b:
09:87:29:f2:31:a7:2c:ce:0d:ee:b6:19:13:4b:61:9a:c2:7f:
22:e7:7c:9d:94:42:68:91:5d:ff:c5:73:58:7b:8d:ff:aa:36:
66:8c:84:84:7d:d7:bb:f2:1e:b6:5e:bc:de:42:26:50:07:70:
43:ff:4e:bc:7c:ba:96:bc:9d:dc:d9:4a:4c:d0:12:9f:49:29:
60:ae:a5:59:35:df:86:ad:29:6b:cf:9f:ed:fc:05:47:3a:1f:
11:b4:15:f3:0e:45:12:40:8a:4d:b7:bb:4b:7e:63:ee:8d:92:
15:17:f9:a7:64:64:c9:11:2b:0f:c5:75:1d:f0:5a:07:24:7c:
98:c8:21:0f:dc:d9:09:ae:c0:0e:ae:2b:63:f2:ea:33:f0:d7:
c5:7a:29:e2:95:70:cb:47:65:b3:7e:77:21:40:4e:b4:e5:34:
ca:ef:b5:a6:2e:42:dc:8e:00:3b:2c:b9:48:60:a3:87:5e:bf:
d2:1d:24:58:66:4a:f0:74:92:35:93:20:ef:37:fb:00:d9:32:
92:ca:3d:4a:31:3e:c6:43:74:0b:03:64:ae:34:3b:25:97:6a:
5f:c3:9e:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:19 2024 by rpki-client on console-fra.rpki-client.org