Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/3PBhl5n7lyUw3CFXFkEuEz-t3ag.roa
File: 3PBhl5n7lyUw3CFXFkEuEz-t3ag.roa (raw, json)
Hash identifier: kL8ZEX+kYiz12DyW9aA91ymRDre4l45opQnQdtSm9Vg=
Subject key identifier: DC:F0:61:97:99:FB:97:25:30:DC:21:57:16:41:2E:13:3F:AD:DD:A8
Certificate issuer: /CN=94166b704843d3d9754095c83a91b493828200a2
Certificate serial: 01860BCC6E18358B6A9612803AB44598F1FF
Authority key identifier: 94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/3PBhl5n7lyUw3CFXFkEuEz-t3ag.roa
Signing time: Wed 01 Feb 2023 07:06:32 +0000
ROA not before: Wed 01 Feb 2023 07:06:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3320
IP address blocks: 171.22.147.0/24 maxlen: 24
171.22.146.0/24 maxlen: 24
185.235.71.0/24 maxlen: 24
185.149.12.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:0b:cc:6e:18:35:8b:6a:96:12:80:3a:b4:45:98:f1:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94166b704843d3d9754095c83a91b493828200a2
Validity
Not Before: Feb 1 07:06:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dcf0619799fb972530dc215716412e133faddda8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0a:dd:b7:c1:31:f1:83:64:a8:10:59:7d:41:
7b:ec:b3:cf:91:1d:8f:91:2e:eb:13:d0:16:92:47:
b5:f0:05:dd:bf:cb:15:b3:09:e8:12:be:21:79:51:
ef:ca:fd:bf:a4:46:37:ea:90:b2:2d:3f:1f:47:98:
83:4d:a0:2e:6a:54:6e:8b:04:0e:49:a5:eb:d9:ca:
55:c3:16:16:36:2b:46:0b:ab:b7:5d:9f:15:a0:78:
31:9d:cf:06:75:44:e9:f2:ab:0f:46:62:a3:ab:c4:
f4:e6:21:c4:c7:89:99:b9:a4:c9:e8:f9:07:2c:9d:
ff:b7:4e:a1:5e:af:f4:68:1b:1f:84:37:7b:27:96:
de:5d:e6:06:7d:86:77:0e:f2:04:34:82:43:6a:7e:
53:68:b6:d4:04:dc:52:d4:cf:30:95:78:ce:83:81:
3a:2e:06:f8:f0:9d:f8:36:ee:4f:eb:c8:46:64:da:
12:bf:24:7f:36:94:ed:6f:79:70:89:88:09:d5:11:
85:70:04:cd:6f:dd:ec:3d:93:9e:d9:d5:f5:c1:ec:
2a:32:fa:ce:da:a1:7e:95:df:4c:30:54:fd:3c:42:
ca:cd:02:d3:73:74:1a:36:bb:9d:82:b8:78:25:01:
38:d6:fd:77:33:a6:80:79:86:7f:01:16:18:ef:e5:
48:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:F0:61:97:99:FB:97:25:30:DC:21:57:16:41:2E:13:3F:AD:DD:A8
X509v3 Authority Key Identifier:
keyid:94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/3PBhl5n7lyUw3CFXFkEuEz-t3ag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.22.146.0/23
185.149.12.0/24
185.235.71.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:07:45:d9:76:16:c9:2a:b0:8e:e5:e6:dc:8d:81:fc:14:3c:
2a:84:82:18:72:6e:50:67:e3:18:c2:86:fc:b4:68:3d:cc:22:
36:aa:8f:ea:c3:ec:68:e6:06:2b:9d:b7:60:ec:cc:24:c9:47:
be:f7:b1:c2:76:a7:b7:98:46:21:87:90:e7:48:a0:98:3c:83:
6c:b9:d3:69:c2:32:e9:1b:8e:d8:5a:ed:6f:30:e9:75:aa:94:
38:d7:8d:ab:e3:b3:73:7f:ff:ba:53:a3:d6:dd:ec:10:5c:4a:
ba:1b:de:db:16:47:fd:82:76:31:31:aa:07:a5:71:6f:fa:d9:
8c:43:05:57:f1:7b:2b:db:f3:b2:df:ec:35:21:05:0e:b8:7e:
22:bb:96:0d:8b:94:ad:0f:d5:83:22:40:20:db:80:d5:53:da:
e2:b1:ef:79:7d:a0:93:f4:55:37:62:83:1a:60:7e:15:df:93:
bc:9a:af:58:05:7c:7b:e8:d3:9e:54:0b:3c:4d:41:62:03:3d:
d9:41:dc:c2:64:38:d1:52:73:ff:f6:3d:f3:bb:33:e0:b7:cc:
f6:73:df:8a:45:27:d3:34:e7:5a:a2:5e:44:de:f7:39:27:7c:
db:0a:da:02:42:76:bb:a4:7b:0a:63:cf:22:03:73:0f:a1:d5:
25:85:dc:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:31 2024 by rpki-client on console-fra.rpki-client.org