Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/hrYfCenGnaQP8MdqU1oaItO_7KE.roa
File: hrYfCenGnaQP8MdqU1oaItO_7KE.roa (raw, json)
Hash identifier: YqC7t3nhyebRsPNVVzM8sRruwmBYTrPxxUc/zJdEdDU=
Subject key identifier: 86:B6:1F:09:E9:C6:9D:A4:0F:F0:C7:6A:53:5A:1A:22:D3:BF:EC:A1
Certificate issuer: /CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97
Certificate serial: 0186084938B6685D885DBD9208F3017698FD
Authority key identifier: 55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/hrYfCenGnaQP8MdqU1oaItO_7KE.roa
Signing time: Tue 31 Jan 2023 14:44:21 +0000
ROA not before: Tue 31 Jan 2023 14:44:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201133
IP address blocks: 185.7.219.0/24 maxlen: 24
95.169.196.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:08:49:38:b6:68:5d:88:5d:bd:92:08:f3:01:76:98:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97
Validity
Not Before: Jan 31 14:44:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=86b61f09e9c69da40ff0c76a535a1a22d3bfeca1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ef:67:17:5d:6d:e5:72:73:3e:a4:9d:b8:89:
13:3b:0d:59:1a:9b:a7:20:ea:93:89:28:05:94:f9:
4e:5f:ee:f2:e3:fe:f1:96:8a:2e:3b:87:f7:40:68:
b2:5a:70:b7:b1:61:c3:ac:62:d5:9f:66:43:b7:9d:
2d:e0:f1:fe:75:4f:ff:85:1a:a8:81:7f:b2:38:be:
cd:8d:94:1e:6c:5d:bb:f3:e5:c3:20:6d:53:81:65:
ca:21:09:ba:b1:a1:fd:5d:8b:d0:92:f2:f6:66:e7:
ca:f3:65:7a:ff:67:de:85:60:88:b6:ca:1d:85:08:
ef:92:b9:4c:26:18:3b:21:f8:f1:6c:1e:f8:a8:9c:
36:19:95:ff:f2:95:03:ff:ea:78:95:e2:13:05:bb:
99:0d:82:32:98:5e:6e:34:34:e6:4e:92:32:01:a1:
6b:af:ce:c3:d5:05:a1:e3:99:5c:34:20:fc:ac:8e:
c4:99:3e:37:7d:f4:a9:51:75:44:9b:3b:a4:e7:47:
22:01:f7:0f:08:46:5a:59:a4:61:0b:8d:81:76:07:
a8:76:01:5a:a7:4d:19:01:9e:b3:3e:da:39:df:27:
35:16:f1:ab:5a:99:df:41:46:07:1e:c2:42:6f:0b:
0b:3a:c9:1f:26:00:a5:57:85:ce:65:14:89:f9:fb:
18:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:B6:1F:09:E9:C6:9D:A4:0F:F0:C7:6A:53:5A:1A:22:D3:BF:EC:A1
X509v3 Authority Key Identifier:
keyid:55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/hrYfCenGnaQP8MdqU1oaItO_7KE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.169.196.0/24
185.7.219.0/24
Signature Algorithm: sha256WithRSAEncryption
46:0c:32:ec:95:a3:07:83:56:46:95:b5:6d:ea:b9:c1:4a:50:
15:d2:f0:d3:01:c9:6f:48:d0:2b:0c:18:1d:26:89:4c:94:b7:
79:45:4d:76:82:4c:33:46:a7:8e:d1:c4:f7:ea:dd:d5:55:97:
de:1d:96:2f:c5:e1:91:bc:91:50:f7:7b:78:8d:68:49:39:d4:
ce:34:8e:f0:64:c7:81:31:eb:4a:ae:34:95:60:19:ba:a9:32:
6d:af:01:d1:78:2d:b0:e0:6b:78:84:84:91:3e:d5:0f:94:65:
17:df:1f:75:b3:1b:8b:a1:9e:60:32:7c:f6:d7:67:24:00:db:
96:21:69:e5:9c:4b:64:54:28:72:0f:a4:40:ea:93:76:7e:79:
13:6b:3c:a7:24:4c:86:07:51:eb:d1:7c:c2:1f:2d:4d:bc:0e:
3a:b1:29:a1:ab:36:a9:cc:ca:9b:3a:c7:3c:8f:01:da:fa:fd:
9d:09:70:d8:c0:07:ea:f2:df:c6:df:75:30:90:cd:87:44:89:
56:31:2d:59:0c:ad:b8:da:0c:3d:80:10:62:cd:e8:dd:8b:dd:
6e:60:6d:8d:7f:00:ca:a8:01:60:83:db:f4:16:a9:cb:4a:27:
bb:e2:5f:44:9c:1d:d6:72:12:f0:1d:a7:a1:28:b7:5a:15:e1:
b5:0a:51:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:11:50 2024 by rpki-client on console-ams.rpki-client.org