Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/cOCffEYMQLrDXKRZNUF1fyQm4Ho.roa
File: cOCffEYMQLrDXKRZNUF1fyQm4Ho.roa (raw, json)
Hash identifier: +rvUr+Bp9FacGfoGU1P1zjPs9oD9/Cy9RByIu2n5b6o=
Subject key identifier: 70:E0:9F:7C:46:0C:40:BA:C3:5C:A4:59:35:41:75:7F:24:26:E0:7A
Certificate issuer: /CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Certificate serial: 018964895C5CD5DFB6E58340FC7B67503B9B
Authority key identifier: CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/cOCffEYMQLrDXKRZNUF1fyQm4Ho.roa
Signing time: Mon 17 Jul 2023 15:47:50 +0000
ROA not before: Mon 17 Jul 2023 15:47:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202656
IP address blocks: 94.154.190.0/24 maxlen: 24
45.86.171.0/24 maxlen: 24
45.87.126.0/24 maxlen: 24
194.59.187.0/24 maxlen: 24
45.95.29.0/24 maxlen: 24
193.187.105.0/24 maxlen: 24
45.128.125.0/24 maxlen: 24
45.128.127.0/24 maxlen: 24
45.128.126.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:64:89:5c:5c:d5:df:b6:e5:83:40:fc:7b:67:50:3b:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Validity
Not Before: Jul 17 15:47:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=70e09f7c460c40bac35ca4593541757f2426e07a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:b6:ce:8d:44:63:a5:f1:a7:72:16:44:0b:0f:
f3:c0:46:d2:09:d9:49:a1:83:40:41:76:91:19:b7:
c7:16:53:90:77:49:45:f6:61:e5:4e:a3:34:e9:ca:
f3:fe:fa:11:06:57:6a:bc:47:fc:cc:b4:5d:0a:bb:
99:4a:c4:e2:ff:c5:ad:d9:43:5b:b1:24:bd:fc:31:
e9:eb:b5:3d:a6:f0:0c:11:05:04:ea:3b:8a:aa:c4:
d9:87:9d:cb:2a:13:80:96:7d:6e:39:95:2d:3c:f3:
d9:94:d1:05:e6:85:99:ef:b5:8a:8c:c1:3d:b1:e9:
c0:93:3c:77:cb:16:9d:10:16:cb:e8:31:4c:bc:4f:
98:ef:2b:c7:0d:fa:a7:d8:3a:19:2b:d9:b6:d2:dd:
ce:42:12:ce:04:1c:3d:bb:f3:4f:8d:c5:e0:c6:8c:
16:c5:0b:a9:2a:fa:05:14:8e:3e:68:2a:da:46:6b:
ef:a2:26:f4:46:8d:0a:79:25:62:83:b7:09:1c:1b:
de:78:c7:0d:8d:4e:69:0e:22:6e:6e:ae:21:48:62:
0d:2b:7e:97:82:5a:cf:15:4c:01:be:4b:0e:ac:71:
83:3a:d6:d2:b2:42:8f:78:04:4c:25:88:f9:d9:27:
46:72:54:4d:f1:45:98:f4:14:ca:b3:30:c1:66:d9:
e4:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:E0:9F:7C:46:0C:40:BA:C3:5C:A4:59:35:41:75:7F:24:26:E0:7A
X509v3 Authority Key Identifier:
keyid:CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/cOCffEYMQLrDXKRZNUF1fyQm4Ho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.171.0/24
45.87.126.0/24
45.95.29.0/24
45.128.125.0-45.128.127.255
94.154.190.0/24
193.187.105.0/24
194.59.187.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:a8:8f:19:3d:14:1e:5d:c2:b6:bd:93:4d:99:c0:1d:dc:17:
3c:44:3e:64:34:ec:19:3d:6f:f0:7c:63:e4:2e:b5:d8:1f:38:
b9:85:ef:31:e1:93:98:9a:1e:82:b3:69:79:55:6f:84:aa:02:
bb:e7:72:20:16:16:70:bb:0f:83:45:6a:5f:65:5c:fb:6e:88:
ca:ed:24:5d:38:42:62:e5:32:20:db:64:55:99:b7:5d:70:60:
a8:98:c9:f2:15:9c:dd:00:91:32:b3:d6:33:c0:ff:c3:4e:d7:
c0:fe:4d:39:44:0d:a4:2c:1d:50:10:86:2b:84:d8:25:03:70:
c2:4f:91:85:5d:1e:74:05:6a:07:3d:bb:cf:23:ca:28:19:bb:
c9:c1:38:6c:af:13:9b:18:b0:91:fa:a5:a4:8d:54:fa:0e:f5:
d3:ad:be:bd:b8:b6:cc:7d:51:97:0e:8f:1f:96:0a:84:11:33:
1d:60:63:5d:47:8d:09:21:2a:bc:42:86:6d:0d:14:fa:0e:f6:
9b:6d:68:22:13:fb:4e:bb:bd:cc:34:24:9a:0b:64:a4:18:77:
22:82:92:26:9e:25:b8:3c:92:a1:31:90:f6:8b:b5:93:fb:72:
28:6b:b6:60:a4:a6:a8:8b:f2:7e:60:4f:f6:56:11:c2:25:a2:
d5:46:ef:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:17 2024 by rpki-client on console-fra.rpki-client.org