Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/ytOQz8b6boTgMqI_KgHPK_It15I.roa
File: ytOQz8b6boTgMqI_KgHPK_It15I.roa (raw, json)
Hash identifier: d9cfBA4x5nCBxdWs2oCUdk7iblwSebPRnLiH/qLTZFs=
Subject key identifier: CA:D3:90:CF:C6:FA:6E:84:E0:32:A2:3F:2A:01:CF:2B:F2:2D:D7:92
Certificate issuer: /CN=08d79d20d76a9ddb075b94f9f00052ab218276b7
Certificate serial: 0191C724EBD0C653BDE3E5B60D7565D2854C
Authority key identifier: 08:D7:9D:20:D7:6A:9D:DB:07:5B:94:F9:F0:00:52:AB:21:82:76:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNedINdqndsHW5T58ABSqyGCdrc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/ytOQz8b6boTgMqI_KgHPK_It15I.roa
Signing time: Fri 06 Sep 2024 11:42:51 +0000
ROA not before: Fri 06 Sep 2024 11:42:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8831
IP address blocks: 62.108.64.0/21 maxlen: 21
62.108.64.0/22 maxlen: 24
62.108.68.0/22 maxlen: 24
62.108.72.0/22 maxlen: 24
62.108.76.0/22 maxlen: 24
62.108.88.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:c7:24:eb:d0:c6:53:bd:e3:e5:b6:0d:75:65:d2:85:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d79d20d76a9ddb075b94f9f00052ab218276b7
Validity
Not Before: Sep 6 11:42:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cad390cfc6fa6e84e032a23f2a01cf2bf22dd792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:4f:65:62:fd:50:0a:47:6c:59:ae:01:5e:e3:
7e:3e:46:5b:3b:40:c3:ab:92:8d:96:f2:21:a1:bb:
35:98:23:e2:be:19:5e:df:88:be:ab:ca:ec:c8:e3:
59:d7:49:9e:78:a9:f3:a6:90:0c:1c:6c:9e:85:2c:
de:d2:c1:59:e4:0e:1b:43:79:f5:d0:72:48:20:ec:
32:5a:99:37:6d:74:c9:ed:68:00:27:1f:84:24:53:
d0:3c:0d:17:c4:9d:45:2d:7a:b3:9b:dc:ac:cb:e0:
48:9f:d4:eb:02:fe:92:a8:7a:ca:1a:07:e4:eb:16:
32:c4:8f:2b:1a:fd:d3:1b:3c:04:5d:b2:68:42:02:
bc:f0:f6:50:ea:1d:f1:72:f2:b2:23:62:08:80:5a:
a2:99:8b:e8:0d:48:a7:4b:70:a7:2a:5f:e0:8d:d6:
02:93:01:ad:ba:88:ca:af:e4:57:d3:21:68:c6:46:
6b:7c:c7:46:d9:8f:f3:05:5b:f1:ea:93:b9:d6:54:
0d:6f:73:10:02:e4:b1:ec:90:b9:86:7f:7e:3d:d4:
70:ce:08:71:22:3b:1a:20:02:65:71:10:f6:2e:55:
eb:8b:d5:e0:80:a7:7c:32:b4:b3:4f:23:35:2d:08:
7a:20:ce:25:a1:b9:47:ac:dc:ea:d2:bc:c6:26:6a:
8a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:D3:90:CF:C6:FA:6E:84:E0:32:A2:3F:2A:01:CF:2B:F2:2D:D7:92
X509v3 Authority Key Identifier:
keyid:08:D7:9D:20:D7:6A:9D:DB:07:5B:94:F9:F0:00:52:AB:21:82:76:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNedINdqndsHW5T58ABSqyGCdrc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/ytOQz8b6boTgMqI_KgHPK_It15I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.108.64.0/20
62.108.88.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:50:c8:df:b6:41:bb:fe:40:fe:7c:23:c8:b1:6e:a5:fa:05:
53:96:af:05:c8:50:23:52:93:a7:42:1d:63:35:1f:20:1b:e8:
30:09:8c:72:a2:f4:52:d6:34:fb:27:08:aa:53:1e:b3:d4:66:
07:f9:94:f4:9b:52:7d:f0:44:81:fa:45:64:e9:23:5c:4e:65:
7f:9c:e5:d7:f1:c5:1b:e5:f5:55:42:54:1e:c8:54:eb:55:c3:
1f:1e:fc:db:6a:8f:b2:bd:9f:94:75:30:4c:44:e6:e8:bd:cb:
8a:e2:5d:a7:75:bb:03:ef:23:6e:50:74:66:d7:04:d0:74:06:
9c:2b:44:6d:59:30:35:38:c6:5b:44:07:37:43:44:d6:9e:54:
6e:82:3b:32:de:0d:df:ef:5d:63:44:45:33:ef:c0:7c:ce:35:
df:58:78:1f:0b:e5:0e:a7:8f:82:4c:6f:6b:19:c6:df:a1:e9:
6b:ef:fc:40:61:c4:ac:1b:40:3c:6f:d3:aa:93:27:3e:a4:80:
42:e5:c0:01:2e:d8:fd:26:01:d2:e5:d3:f1:12:91:31:2f:d5:
27:d3:3c:fd:43:34:68:3f:0f:13:1b:34:52:dc:f7:a7:46:ed:
f4:46:cc:b8:fa:d1:cb:01:4d:1f:16:5b:38:8c:e4:10:ef:f8:
3f:13:17:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 19:07:30 2024 by rpki-client on console-ams.rpki-client.org