Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/w6yfOB3nbq7LBd8zqxPxwnAUgrM.roa
File: w6yfOB3nbq7LBd8zqxPxwnAUgrM.roa (raw, json)
Hash identifier: 82LvnFgwK5HA/NQlgTH4xNv83pkYEImrUCXp0JLaeSc=
Subject key identifier: C3:AC:9F:38:1D:E7:6E:AE:CB:05:DF:33:AB:13:F1:C2:70:14:82:B3
Certificate issuer: /CN=ac7cc334f51d2b6eb4e27d6d56b9bce3e85560cc
Certificate serial: 01856FF0378D349AF5DDA4F139C710343B50
Authority key identifier: AC:7C:C3:34:F5:1D:2B:6E:B4:E2:7D:6D:56:B9:BC:E3:E8:55:60:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rHzDNPUdK2604n1tVrm84-hVYMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/w6yfOB3nbq7LBd8zqxPxwnAUgrM.roa
Signing time: Mon 02 Jan 2023 00:44:51 +0000
ROA not before: Mon 02 Jan 2023 00:44:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50316
IP address blocks: 92.245.184.0/24 maxlen: 24
92.245.185.0/24 maxlen: 24
92.245.186.0/24 maxlen: 24
92.245.187.0/24 maxlen: 24
147.123.112.0/24 maxlen: 24
147.123.118.0/24 maxlen: 24
147.123.116.0/24 maxlen: 24
147.123.117.0/24 maxlen: 24
147.123.115.0/24 maxlen: 24
147.123.113.0/24 maxlen: 24
147.123.114.0/24 maxlen: 24
147.123.119.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f0:37:8d:34:9a:f5:dd:a4:f1:39:c7:10:34:3b:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac7cc334f51d2b6eb4e27d6d56b9bce3e85560cc
Validity
Not Before: Jan 2 00:44:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c3ac9f381de76eaecb05df33ab13f1c2701482b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:07:bf:42:90:07:b5:56:7d:69:10:46:9f:47:
4b:ac:c3:db:3f:54:a4:ec:77:36:23:f6:2c:1f:35:
63:61:db:c2:fb:86:8c:17:9a:fc:64:45:11:93:fb:
ef:79:72:56:06:96:61:6f:af:c7:6f:6f:db:bb:f4:
38:79:4d:b6:f9:46:51:eb:16:c8:dc:09:0d:60:59:
29:71:7b:59:51:fc:5b:65:e7:f6:0b:08:db:ad:b3:
bf:3a:97:fa:89:07:63:32:a3:a3:d2:81:66:bb:f0:
17:bb:38:35:ac:97:db:8e:dd:e9:a9:94:d6:a3:58:
c8:5b:74:a2:d9:bd:c2:10:04:7d:81:ba:9d:66:23:
e8:e3:66:05:43:8c:cd:fd:0f:02:a5:db:63:0c:a1:
15:e6:08:0e:be:77:f1:21:2e:e8:bf:cd:d8:f8:53:
4b:63:e9:57:4e:92:44:53:b3:0f:22:ab:61:f0:2e:
6b:31:8a:64:57:5c:c4:a0:68:a3:04:96:b4:55:93:
9a:f9:97:b6:7c:67:18:a3:fc:60:9f:b8:9c:19:c3:
27:2d:df:34:08:22:e5:9a:91:10:a5:e6:a4:57:70:
dd:ef:46:08:b2:19:30:b0:69:90:4f:15:4d:aa:6f:
38:55:44:c0:9a:20:04:c7:73:3c:64:d5:73:1b:7a:
2b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:AC:9F:38:1D:E7:6E:AE:CB:05:DF:33:AB:13:F1:C2:70:14:82:B3
X509v3 Authority Key Identifier:
keyid:AC:7C:C3:34:F5:1D:2B:6E:B4:E2:7D:6D:56:B9:BC:E3:E8:55:60:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHzDNPUdK2604n1tVrm84-hVYMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/w6yfOB3nbq7LBd8zqxPxwnAUgrM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.245.184.0/22
147.123.112.0/21
Signature Algorithm: sha256WithRSAEncryption
90:b2:7f:6d:a1:5a:73:8c:94:8a:06:dd:12:3d:2b:c6:72:88:
d5:ba:b2:2b:4e:41:3c:08:e0:1b:29:13:a9:ed:57:26:e6:ba:
86:9d:ac:d7:d1:e3:a3:e5:c8:a9:30:1f:79:a4:62:81:56:de:
7e:83:6c:3e:f3:8f:c8:4b:b7:e1:c7:b5:6e:cf:87:20:e7:89:
e3:e8:72:b0:8d:7c:40:13:cb:8f:82:00:7b:8b:d6:8a:c9:ab:
1a:f4:45:01:9e:6f:a2:35:94:74:19:e8:90:15:39:dc:ed:30:
19:76:0c:1c:15:60:2c:0b:31:79:63:2a:c5:e8:f7:d3:ac:58:
93:db:a7:fc:2e:68:a2:9f:dd:0f:36:69:01:8c:13:64:2b:ac:
01:a4:21:65:71:d1:b1:5b:e9:73:d7:79:65:cd:a2:8b:3a:fe:
d7:b9:f5:72:66:1a:14:94:e6:34:04:48:92:50:f3:cc:26:f9:
07:e2:9d:74:90:d5:cd:57:d0:99:3d:24:97:c5:9e:a3:e6:85:
88:6c:c7:1e:0f:06:d9:ac:b3:10:3c:7b:f6:cf:7f:6b:14:f7:
cc:24:d8:a7:b1:e6:e9:72:a2:71:2f:c2:53:f0:46:04:ba:32:
19:f3:03:fa:d0:12:b8:f2:51:50:16:3a:e8:d6:dd:8e:20:38:
f7:e7:8f:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:23 2024 by rpki-client on console-ams.rpki-client.org