Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/YFiJOMHVxR_MXqig0plBBeqWeL4.roa
File: YFiJOMHVxR_MXqig0plBBeqWeL4.roa (raw, json)
Hash identifier: chFakD/NPbwoo16SxZkzDLKtTV0PUcrrYicRWxcNd8Y=
Subject key identifier: 60:58:89:38:C1:D5:C5:1F:CC:5E:A8:A0:D2:99:41:05:EA:96:78:BE
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 019052392255D15EED73AB8A97B197E5098F
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/YFiJOMHVxR_MXqig0plBBeqWeL4.roa
Signing time: Wed 26 Jun 2024 01:46:34 +0000
ROA not before: Wed 26 Jun 2024 01:46:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 37.128.248.0/22 maxlen: 24
95.82.0.0/20 maxlen: 20
109.111.32.0/20 maxlen: 24
109.111.40.0/22 maxlen: 24
176.221.16.0/21 maxlen: 21
176.221.20.0/22 maxlen: 24
176.221.24.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:52:39:22:55:d1:5e:ed:73:ab:8a:97:b1:97:e5:09:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Jun 26 01:46:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=60588938c1d5c51fcc5ea8a0d2994105ea9678be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f0:2a:7d:c0:f8:bc:fa:4a:3f:0e:97:3d:45:
14:1f:3a:dd:e3:f3:97:fb:c2:df:22:80:08:8d:fc:
58:77:db:7c:e0:79:f2:22:8b:34:ca:d3:7e:0c:27:
97:64:cb:0a:61:d4:69:fc:bb:54:cf:56:4f:63:c3:
48:bb:17:9d:57:af:70:86:2d:f2:8b:91:c3:c4:7a:
02:6a:76:13:89:5c:4e:d6:d7:8c:e5:d3:e5:51:4a:
89:49:e0:89:b5:0a:2a:ae:6f:5a:e4:01:02:4d:f7:
65:7c:66:84:7d:2e:c0:2d:a2:36:69:a0:e3:47:22:
a0:8a:37:1c:0f:81:69:12:4e:0e:1d:fa:65:30:e5:
33:8d:9e:1c:d1:4b:b4:e1:8f:b2:0a:42:af:84:5f:
20:55:12:15:cb:4d:88:39:d0:73:00:03:b6:b6:57:
f0:f1:89:97:b0:bc:fb:8c:5a:b0:cb:67:8f:d2:ef:
99:85:3d:60:74:cb:4d:6a:d2:10:a7:ed:80:28:1b:
65:fa:18:3a:62:c2:af:71:cc:a1:2f:d8:82:8c:06:
e1:8a:7a:fd:16:72:1e:64:a8:a0:46:a8:d9:35:1d:
ee:67:e1:cd:d9:23:be:3a:50:c3:b6:88:0f:bd:60:
31:e5:e9:cc:14:50:77:ee:ae:24:a6:55:04:7d:f8:
14:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:58:89:38:C1:D5:C5:1F:CC:5E:A8:A0:D2:99:41:05:EA:96:78:BE
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/YFiJOMHVxR_MXqig0plBBeqWeL4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.128.248.0/22
95.82.0.0/20
109.111.32.0/20
176.221.16.0-176.221.27.255
Signature Algorithm: sha256WithRSAEncryption
1f:6a:20:c9:2d:63:38:9e:b5:14:d3:f7:3e:2e:98:1f:d7:5a:
19:08:bc:7b:a1:fd:59:b2:39:85:fb:8d:aa:7b:a6:e1:c3:85:
58:13:f3:21:f7:14:cd:97:7a:17:ab:d7:c3:d4:b4:53:e3:e3:
96:04:db:77:8d:a6:f2:f7:43:e7:73:f9:fd:80:3e:21:28:c7:
0d:96:b4:62:b7:3f:4f:d3:3d:b1:47:ba:15:b2:99:6f:65:ff:
2c:07:76:d3:53:54:79:a1:b2:71:e6:79:1b:06:41:dd:7d:a8:
04:cd:b3:73:45:4b:5f:7b:c1:67:1e:91:2b:97:bf:14:9a:5e:
88:dd:4b:d9:72:d7:a4:51:ea:e1:29:d5:9b:0b:71:37:ed:10:
40:77:bc:c3:c6:84:f8:aa:e9:5e:15:f0:19:77:ab:85:66:52:
7e:56:bd:56:29:f3:f1:e7:0d:ac:b1:49:84:f8:9c:aa:c1:ab:
57:f7:9a:01:74:38:bd:cf:02:73:f4:6c:29:b2:ee:7b:ba:50:
09:30:9c:07:27:af:9e:30:b4:1d:6c:ea:b9:19:f9:ae:a3:5c:
f1:87:99:e9:fd:2d:20:7b:9b:1a:58:a3:b8:b5:68:98:fe:32:
ae:03:df:ce:1b:2d:75:41:70:ed:08:7e:b0:77:e0:f0:3e:57:
35:28:48:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:13:22 2025 by rpki-client