Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/62764b-9aa6-4f12-a71c-6bac34987019/1/ISFSGb_AnECKHU_Bv9D2tC-Ihzs.roa
File: ISFSGb_AnECKHU_Bv9D2tC-Ihzs.roa (raw, json)
Hash identifier: p666oKrjNm51k2f9a5honAlyXAFPA5rMWTYViEJQMxQ=
Subject key identifier: 21:21:52:19:BF:C0:9C:40:8A:1D:4F:C1:BF:D0:F6:B4:2F:88:87:3B
Certificate issuer: /CN=35c96065093998ba42cfba11bf0d17d3ac403d40
Certificate serial: 018AEA47AAA4179919F57C9D25C85BBD88DA
Authority key identifier: 35:C9:60:65:09:39:98:BA:42:CF:BA:11:BF:0D:17:D3:AC:40:3D:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NclgZQk5mLpCz7oRvw0X06xAPUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/62764b-9aa6-4f12-a71c-6bac34987019/1/ISFSGb_AnECKHU_Bv9D2tC-Ihzs.roa
Signing time: Sun 01 Oct 2023 08:07:59 +0000
ROA not before: Sun 01 Oct 2023 08:07:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3320
IP address blocks: 79.139.52.0/22 maxlen: 24
95.178.8.0/21 maxlen: 24
116.50.16.0/21 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ea:47:aa:a4:17:99:19:f5:7c:9d:25:c8:5b:bd:88:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35c96065093998ba42cfba11bf0d17d3ac403d40
Validity
Not Before: Oct 1 08:07:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=21215219bfc09c408a1d4fc1bfd0f6b42f88873b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ef:9b:16:88:19:23:1d:08:08:2a:6a:b3:81:
07:f5:69:02:c9:a0:99:a0:d4:ef:c2:cf:6a:1f:27:
66:15:fb:75:40:b8:9c:d2:60:90:c0:6b:2e:d3:fd:
4f:56:b7:14:14:6f:00:69:ba:57:4c:07:7b:5d:19:
7c:9e:9a:3d:6b:48:3b:13:7c:ad:8e:3d:1b:b3:0c:
85:06:b5:a8:0d:5c:59:2d:9b:df:5a:4a:13:2d:47:
ff:65:41:b2:09:1a:e3:b9:2c:c5:d7:cc:40:ab:7d:
3f:9d:87:d4:cb:b0:be:e0:af:cd:86:fd:11:7d:c7:
d4:d5:eb:34:18:1e:42:cd:f6:49:6d:53:1a:75:e6:
42:73:58:9a:cf:eb:c3:77:9f:05:4f:8e:3d:75:7a:
24:cc:20:9e:9d:6a:ac:48:f4:a5:e7:aa:7a:21:cf:
e7:cc:37:70:ef:5a:ba:63:73:4e:fe:39:a3:36:34:
71:f3:74:d2:33:63:d2:5b:9c:9f:a2:95:93:d5:7b:
00:6a:b5:72:89:f9:a5:dc:38:b4:84:b9:c6:5f:04:
42:84:fe:d0:7b:67:98:0b:ce:53:30:04:94:48:60:
ee:33:80:db:00:8e:1a:f9:17:dd:d1:11:1c:ee:80:
c8:9c:00:74:cc:26:f4:8e:a6:bc:6c:3b:69:01:69:
98:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:21:52:19:BF:C0:9C:40:8A:1D:4F:C1:BF:D0:F6:B4:2F:88:87:3B
X509v3 Authority Key Identifier:
keyid:35:C9:60:65:09:39:98:BA:42:CF:BA:11:BF:0D:17:D3:AC:40:3D:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NclgZQk5mLpCz7oRvw0X06xAPUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/62764b-9aa6-4f12-a71c-6bac34987019/1/ISFSGb_AnECKHU_Bv9D2tC-Ihzs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/62764b-9aa6-4f12-a71c-6bac34987019/1/NclgZQk5mLpCz7oRvw0X06xAPUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.139.52.0/22
95.178.8.0/21
116.50.16.0/21
Signature Algorithm: sha256WithRSAEncryption
06:fc:77:5f:5b:60:b6:e3:ec:15:2d:3f:92:84:1f:28:1c:2f:
ee:77:64:80:d5:50:35:ff:37:76:02:db:03:78:d8:f1:35:2f:
96:c2:21:fe:a5:27:b8:16:74:8a:c2:c1:0f:19:54:84:23:fd:
ac:fb:ed:64:41:f5:23:1e:5a:f0:fd:ff:c8:00:5f:03:0c:eb:
2d:ab:c6:e0:48:dd:c7:94:32:41:f4:a2:43:ec:6f:72:e7:76:
3f:b4:53:6a:2f:16:52:81:97:be:b1:49:62:65:43:5d:69:96:
af:b3:41:fd:78:72:81:ad:bb:13:62:db:6f:a2:29:dd:b1:e4:
b5:46:4a:24:87:5d:0b:58:fd:95:24:17:28:0c:ca:16:3a:81:
c5:73:85:bc:2b:d2:26:17:c0:e8:58:00:4b:a3:66:4a:0b:68:
86:59:32:ca:24:0a:90:6c:77:27:9e:d9:5d:ef:3b:4d:f7:7b:
f8:26:4e:71:c8:d0:d9:f2:cd:ed:05:3a:f6:c5:bb:61:fc:d1:
72:5c:14:26:09:85:db:b2:5d:8b:4a:6c:7a:e7:35:21:f0:56:
77:88:48:20:c3:b9:f6:d0:87:7a:56:ea:95:09:69:e9:e4:48:
8d:3f:57:20:a5:a6:ff:ba:46:cc:a9:cc:6c:b8:23:fd:93:84:
93:39:da:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 13 09:17:55 2023 by rpki-client on console-fra.rpki-client.org