Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/ef03b3-7472-46de-9586-fd7b9739ca26/1/FuKUdP4VcTiNjtv2lG1xS-M_aII.roa
File: FuKUdP4VcTiNjtv2lG1xS-M_aII.roa (raw, json)
Hash identifier: jsLiZabCN09x1q74ZMSrFRsW2aNw+ZTiiWQM2sFOAdY=
Subject key identifier: 16:E2:94:74:FE:15:71:38:8D:8E:DB:F6:94:6D:71:4B:E3:3F:68:82
Certificate issuer: /CN=3e08834b3b2973909c0aaf5bb5d354b1c0e5ca3e
Certificate serial: 018EE13FED61784DB622DA2544EE2FEEF1D1
Authority key identifier: 3E:08:83:4B:3B:29:73:90:9C:0A:AF:5B:B5:D3:54:B1:C0:E5:CA:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PgiDSzspc5CcCq9btdNUscDlyj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/ef03b3-7472-46de-9586-fd7b9739ca26/1/FuKUdP4VcTiNjtv2lG1xS-M_aII.roa
Signing time: Mon 15 Apr 2024 10:14:06 +0000
ROA not before: Mon 15 Apr 2024 10:14:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34600
IP address blocks: 91.194.138.0/24 maxlen: 24
193.29.254.0/24 maxlen: 24
193.30.1.0/24 maxlen: 24
193.30.2.0/24 maxlen: 24
193.30.5.0/24 maxlen: 24
2a0f:7c40::/29 maxlen: 29
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:e1:3f:ed:61:78:4d:b6:22:da:25:44:ee:2f:ee:f1:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e08834b3b2973909c0aaf5bb5d354b1c0e5ca3e
Validity
Not Before: Apr 15 10:14:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=16e29474fe1571388d8edbf6946d714be33f6882
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b4:d2:44:d0:ef:e6:93:81:7f:d3:32:77:cd:
c0:2a:31:94:7f:c2:71:62:a5:d7:d4:a2:e8:df:41:
b8:51:d7:5b:d7:cf:45:ee:ca:02:0b:75:00:8c:ef:
9b:da:ae:1f:1d:29:c3:83:e8:ac:e8:6f:8e:5c:46:
0f:09:a9:2c:fb:ce:6d:fa:96:24:00:d3:58:58:2f:
94:e6:73:ac:99:d6:bf:f3:fb:aa:97:26:41:52:6a:
98:37:18:94:17:57:1c:f2:8d:4e:53:1f:13:b9:66:
7f:8c:b4:ad:e3:d2:82:ab:af:13:03:5c:fb:c2:76:
84:21:5c:50:5b:75:06:61:09:a6:14:21:05:23:8c:
45:b5:65:06:e4:aa:c7:2d:e4:fb:a1:13:af:5e:5b:
74:f3:79:1e:60:f0:d3:42:a8:22:28:04:2a:22:a1:
62:8a:d5:3d:96:1d:2b:65:67:1b:be:86:93:11:1c:
09:8e:bd:64:9b:6f:12:e2:3f:3f:c0:5d:c6:00:8a:
ca:5c:ae:6a:4d:12:ef:23:2d:29:14:ba:c3:1f:79:
cd:cd:e0:6d:dc:e5:c4:81:5f:1b:da:2f:95:68:fd:
83:c6:47:3d:0c:5b:e9:66:2d:11:8a:4c:e3:03:51:
83:23:cd:37:17:98:ea:19:3e:5e:31:c4:ff:e9:26:
8a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:E2:94:74:FE:15:71:38:8D:8E:DB:F6:94:6D:71:4B:E3:3F:68:82
X509v3 Authority Key Identifier:
keyid:3E:08:83:4B:3B:29:73:90:9C:0A:AF:5B:B5:D3:54:B1:C0:E5:CA:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PgiDSzspc5CcCq9btdNUscDlyj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/ef03b3-7472-46de-9586-fd7b9739ca26/1/FuKUdP4VcTiNjtv2lG1xS-M_aII.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/ef03b3-7472-46de-9586-fd7b9739ca26/1/PgiDSzspc5CcCq9btdNUscDlyj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.138.0/24
193.29.254.0/24
193.30.1.0-193.30.2.255
193.30.5.0/24
IPv6:
2a0f:7c40::/29
Signature Algorithm: sha256WithRSAEncryption
6e:f8:73:a7:c3:5e:08:d0:71:ef:b6:1c:9e:e3:24:5a:29:3d:
87:33:d6:e8:21:3b:5f:aa:7d:7a:86:3e:c8:08:af:ed:12:a3:
ff:c5:04:cb:e5:7f:cf:22:7c:00:9b:01:d2:7c:a6:ba:53:ab:
ef:65:b2:76:31:08:07:9a:dd:ab:10:ac:c1:b4:b0:64:10:11:
ed:cb:8d:98:4d:f8:5d:9a:a8:78:fc:58:d7:04:aa:76:d0:20:
f5:14:58:23:7a:30:dc:ff:cc:7d:93:52:c8:56:00:f8:6c:b2:
51:fb:54:56:61:a5:64:a8:af:b9:8c:db:40:5d:30:64:20:c2:
fa:23:b1:76:da:e7:1b:ce:a7:f6:19:e8:3e:72:ed:f8:10:03:
b3:1a:d5:2f:9e:83:1c:25:a9:b2:30:c2:c6:c1:61:ad:d8:91:
03:0c:89:d1:9c:18:ef:b8:6e:0a:05:96:9b:c5:42:5e:73:88:
01:ed:10:03:91:eb:a3:58:20:66:6c:26:f5:bb:04:02:f7:31:
04:c2:c2:cb:7f:d5:19:52:5a:c0:c5:27:42:ca:20:e2:75:c3:
cd:f7:82:9f:84:05:68:2c:c8:33:86:4b:89:fb:ad:c8:e5:97:
a3:3f:82:40:a9:77:15:02:b7:87:b1:76:9c:da:ed:d3:87:c6:
28:97:6a:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:58 2024 by rpki-client on console-fra.rpki-client.org