Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/5858f1-29c5-46e6-a76d-5a40e52cd481/1/IXKGdxVe9-Uw-_S-SKMShbCkQ34.roa
File: IXKGdxVe9-Uw-_S-SKMShbCkQ34.roa (raw, json)
Hash identifier: DM+ADT6FDaPFQnD1xn/qN0YURNsZb/zKNghO1ZMuurI=
Subject key identifier: 21:72:86:77:15:5E:F7:E5:30:FB:F4:BE:48:A3:12:85:B0:A4:43:7E
Certificate issuer: /CN=9344b4879f19ee719a351463001726f686d659ef
Certificate serial: 01856CEF4393DAA6049C333E2D4E1143C74D
Authority key identifier: 93:44:B4:87:9F:19:EE:71:9A:35:14:63:00:17:26:F6:86:D6:59:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k0S0h58Z7nGaNRRjABcm9obWWe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/5858f1-29c5-46e6-a76d-5a40e52cd481/1/IXKGdxVe9-Uw-_S-SKMShbCkQ34.roa
Signing time: Sun 01 Jan 2023 10:44:57 +0000
ROA not before: Sun 01 Jan 2023 10:44:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51432
IP address blocks: 185.55.208.0/22 maxlen: 32
217.15.160.0/20 maxlen: 32
2a02:22f8::/29 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ef:43:93:da:a6:04:9c:33:3e:2d:4e:11:43:c7:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9344b4879f19ee719a351463001726f686d659ef
Validity
Not Before: Jan 1 10:44:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=21728677155ef7e530fbf4be48a31285b0a4437e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:be:6d:c4:fd:99:c2:ee:38:b5:9a:28:0e:13:
89:db:06:c7:53:0e:1b:2c:ba:73:08:87:4c:f2:42:
94:55:12:63:21:40:ad:17:f5:70:fe:e4:b1:ee:19:
1c:0d:c4:b3:78:cd:92:f6:81:d2:18:d5:7f:4d:84:
a2:14:b4:30:fd:48:0b:53:fe:f4:10:a9:60:29:91:
9b:24:81:0e:4f:49:35:e9:57:96:15:22:1e:00:52:
c4:3a:dd:eb:59:bc:79:59:bc:b4:92:67:3c:51:05:
41:35:81:a8:51:0d:6b:91:ed:82:db:9d:06:24:4a:
50:ba:1d:70:69:84:6b:31:c2:cc:c6:e2:8f:e8:3c:
07:b0:b7:18:da:74:b3:d4:01:c2:71:cd:30:e3:f8:
bf:27:0b:f5:f6:3a:2e:34:cf:01:99:73:60:88:dd:
3c:f5:84:c9:e0:42:73:64:d2:5f:a2:83:e6:cf:04:
66:b0:a9:e4:1a:03:e9:a4:7d:46:d6:6f:b7:79:f0:
c9:a6:ad:24:8d:d3:c2:1b:1c:d0:5a:30:20:d1:e3:
f8:80:41:97:6f:00:b7:a0:62:1d:d0:5a:7b:03:9d:
22:90:b3:5c:5f:c4:44:63:29:9b:ad:b1:12:d5:5a:
dd:8e:c4:21:74:c8:c9:76:75:f0:59:a3:38:4d:b8:
49:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:72:86:77:15:5E:F7:E5:30:FB:F4:BE:48:A3:12:85:B0:A4:43:7E
X509v3 Authority Key Identifier:
keyid:93:44:B4:87:9F:19:EE:71:9A:35:14:63:00:17:26:F6:86:D6:59:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k0S0h58Z7nGaNRRjABcm9obWWe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5858f1-29c5-46e6-a76d-5a40e52cd481/1/IXKGdxVe9-Uw-_S-SKMShbCkQ34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5858f1-29c5-46e6-a76d-5a40e52cd481/1/k0S0h58Z7nGaNRRjABcm9obWWe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.55.208.0/22
217.15.160.0/20
IPv6:
2a02:22f8::/29
Signature Algorithm: sha256WithRSAEncryption
53:b5:a2:71:67:3b:6e:b5:3d:df:0c:08:d1:28:dd:ae:66:45:
8e:96:9a:7d:6d:db:ce:58:b5:07:7c:1c:5c:f4:36:d7:c4:2e:
56:0f:e1:2f:a4:a4:11:2b:52:9e:e5:2a:3e:3e:f8:fd:be:33:
24:05:0a:8c:77:00:9e:af:98:ae:79:af:f8:21:b2:e1:53:37:
d7:17:42:3e:d7:93:2a:22:ee:89:7e:ac:71:ed:20:79:e2:f5:
ce:7c:fe:74:53:95:9c:ac:ea:33:60:c9:92:35:3c:cb:1d:c4:
1a:2c:3d:6e:6b:81:86:fd:ea:f9:f1:c7:fa:ad:b1:36:1a:b0:
08:2a:70:56:94:24:f8:ce:3d:c9:9d:24:12:c9:07:45:73:bb:
13:95:0b:03:c9:4a:c9:c0:79:19:4a:ad:13:50:bb:b2:ce:0e:
9a:5a:19:49:b5:6f:36:f0:71:fc:1e:9e:83:26:63:21:05:3f:
e1:3f:9a:e0:f0:58:6e:03:05:a4:e2:e6:b9:fa:d5:4c:06:b4:
e1:38:4a:0b:e1:83:1e:bf:7b:9f:c7:b0:e4:73:0f:5a:30:20:
85:ac:73:12:23:c2:0d:ca:44:f6:53:29:0f:b9:81:e1:59:de:
6b:68:4e:8b:1d:76:fe:39:c1:66:07:42:fa:3a:6b:09:02:c2:
77:8d:8e:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:38 2024 by rpki-client on console-fra.rpki-client.org