Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/3Po8lBKT4WOdoN1uywrGHyj0EeM.roa
File: 3Po8lBKT4WOdoN1uywrGHyj0EeM.roa (raw, json)
Hash identifier: YZYLWfM8UKtYEBAU61mESqFYB8vFoqsK+hKm555tDIk=
Subject key identifier: DC:FA:3C:94:12:93:E1:63:9D:A0:DD:6E:CB:0A:C6:1F:28:F4:11:E3
Certificate issuer: /CN=da8f05e3843517cf0971c2bf9cddddd62717e52c
Certificate serial: 01890CF82CA94F145DA8C4EBDADE3C0CF9CC
Authority key identifier: DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/3Po8lBKT4WOdoN1uywrGHyj0EeM.roa
Signing time: Fri 30 Jun 2023 15:42:18 +0000
ROA not before: Fri 30 Jun 2023 15:42:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13259
IP address blocks: 138.124.0.0/17 maxlen: 17
138.124.232.0/21 maxlen: 21
138.124.228.0/22 maxlen: 22
138.124.240.0/20 maxlen: 20
138.124.176.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:0c:f8:2c:a9:4f:14:5d:a8:c4:eb:da:de:3c:0c:f9:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da8f05e3843517cf0971c2bf9cddddd62717e52c
Validity
Not Before: Jun 30 15:42:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dcfa3c941293e1639da0dd6ecb0ac61f28f411e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:2e:aa:ec:e4:f2:d4:37:dd:97:97:b9:8a:4a:
08:2d:e1:f3:19:aa:a5:d2:f4:79:73:4a:ed:ba:81:
e3:43:02:01:48:10:19:f5:35:eb:32:9b:a6:97:47:
63:32:1c:6d:68:e6:95:bc:78:6f:16:0d:75:bb:c5:
d1:2f:c7:96:f5:54:8b:f2:79:62:0e:9e:0f:4e:24:
98:53:2c:67:4b:7b:ae:ba:f5:f5:7e:53:ce:84:f0:
bb:26:9d:e5:66:7e:8f:7d:19:74:55:e5:cb:a2:b6:
bb:ab:8e:28:49:ea:35:fc:e2:fc:82:e1:4c:02:a8:
9e:b7:a7:cc:8c:9d:1e:d4:02:5a:98:29:f5:05:37:
63:f5:31:83:d0:44:ac:12:0a:a3:b1:41:5a:b1:d9:
04:8d:44:09:1e:a3:d3:08:e9:88:d4:c1:cf:82:87:
b1:b2:09:09:0b:55:c3:fb:f7:52:54:5f:e1:95:a5:
5f:96:49:c4:2f:1a:29:ce:9a:ec:3d:73:45:7f:8d:
9a:08:f0:f4:4c:4c:43:88:8a:6d:12:e7:87:c9:9d:
37:a7:39:e0:6c:bf:a5:db:36:fd:dc:b9:80:92:ca:
28:61:77:c4:13:7f:5f:27:78:d5:3a:d9:79:42:c5:
1b:1e:1a:da:61:3a:49:c6:de:1d:9e:6e:c9:71:76:
d3:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:FA:3C:94:12:93:E1:63:9D:A0:DD:6E:CB:0A:C6:1F:28:F4:11:E3
X509v3 Authority Key Identifier:
keyid:DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/3Po8lBKT4WOdoN1uywrGHyj0EeM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.124.0.0/17
138.124.176.0/24
138.124.228.0-138.124.255.255
Signature Algorithm: sha256WithRSAEncryption
50:62:a0:c4:58:79:d2:9e:e7:b4:6c:2b:a7:2d:a1:25:99:19:
9b:0b:ff:fe:a3:77:89:72:b4:f6:de:3c:46:c5:7f:e5:d6:64:
88:e1:e7:75:c5:24:63:45:ba:60:78:a9:e2:5e:47:eb:55:c7:
68:51:61:15:3c:cb:6f:10:62:a3:a8:68:dd:ff:58:06:a5:04:
08:61:f7:00:94:31:c1:36:c4:d0:3d:98:f3:65:34:a2:d7:09:
ce:d8:d0:3c:76:c0:d2:98:83:17:b4:2f:c2:1f:4b:b5:f2:69:
d8:71:9d:fc:73:70:ba:58:3f:62:c6:45:8c:2f:1f:13:9f:80:
ad:32:45:35:b2:05:72:0c:bb:85:91:60:ee:df:63:f0:44:1b:
18:b8:67:f1:2e:a2:0c:d3:5e:fb:07:2b:8f:33:44:db:2a:7f:
fe:51:4e:34:c8:c6:6a:52:55:89:7d:be:f5:7b:12:f7:94:20:
66:8a:af:a0:f2:d3:fb:ae:21:a0:e7:21:4d:c4:07:c6:11:55:
f3:61:54:29:2d:c4:f6:15:d5:89:f3:4b:82:d8:c6:87:39:9e:
2c:3f:fa:9a:eb:40:2b:82:40:ab:33:fd:09:f3:f7:01:08:a2:
d5:a3:18:e7:b1:f4:4e:d1:54:da:39:94:b1:28:a2:46:22:c1:
6f:e1:ce:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:13:40 2024 by rpki-client on console-ams.rpki-client.org