Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/4luXNjNyfBrc7buUan0ZRYKCYZo.roa
File: 4luXNjNyfBrc7buUan0ZRYKCYZo.roa (raw, json)
Hash identifier: T1r79KQoUc7dtr97lwYzoFFv3hiYx5iTZCrIjxJ45WM=
Subject key identifier: E2:5B:97:36:33:72:7C:1A:DC:ED:BB:94:6A:7D:19:45:82:82:61:9A
Certificate issuer: /CN=94166b704843d3d9754095c83a91b493828200a2
Certificate serial: 0A6DCD45
Authority key identifier: 94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/4luXNjNyfBrc7buUan0ZRYKCYZo.roa
Signing time: Fri 11 Mar 2022 09:08:12 +0000
ROA not before: Fri 11 Mar 2022 09:08:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 0
IP address blocks: 91.222.43.0/24 maxlen: 24
185.149.12.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 174968133 (0xa6dcd45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94166b704843d3d9754095c83a91b493828200a2
Validity
Not Before: Mar 11 09:08:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e25b973633727c1adcedbb946a7d19458282619a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:63:3c:d5:69:aa:38:35:9f:98:bc:c4:a3:9c:
25:15:a7:3d:46:fd:2b:9e:c5:8e:3c:6c:fd:11:58:
ca:e0:1e:1e:69:26:70:b4:ba:4f:99:24:3d:84:c8:
9f:80:3e:2d:e7:d0:e4:ec:4c:6c:2c:d6:8a:41:6e:
4f:fe:b9:b0:c2:ef:70:c2:45:28:3a:91:b1:bf:20:
23:17:00:bb:13:80:3a:28:4e:97:43:2c:a9:46:80:
a2:d0:74:1d:c3:2a:36:5c:2e:ef:31:17:5f:47:b7:
06:68:24:c7:4e:54:12:01:c9:ed:d0:6c:db:f8:f1:
ea:c2:81:5f:26:62:57:16:92:35:19:38:d5:55:5b:
57:76:6a:5c:6e:1c:f6:25:07:05:cf:6d:52:37:99:
cc:99:63:ac:31:be:8c:a6:74:4e:0e:cf:b9:11:73:
39:9e:81:40:a5:da:48:8f:3a:92:2f:5b:ed:3c:73:
e7:7e:6f:aa:ef:fa:cb:4b:8e:7a:42:41:e7:55:f7:
81:38:5b:2f:00:bc:20:59:bf:57:87:6c:a4:ff:d9:
a9:dc:34:82:50:26:ed:b9:b4:e0:a3:8f:21:27:42:
cd:00:74:d1:3c:4d:f5:e4:cf:4d:53:25:77:a5:c8:
c6:11:eb:8e:dc:05:b2:23:8f:74:20:05:ba:c6:7f:
90:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:5B:97:36:33:72:7C:1A:DC:ED:BB:94:6A:7D:19:45:82:82:61:9A
X509v3 Authority Key Identifier:
keyid:94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/4luXNjNyfBrc7buUan0ZRYKCYZo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.222.43.0/24
185.149.12.0/24
Signature Algorithm: sha256WithRSAEncryption
83:e4:b0:09:0c:20:33:3c:4e:81:e2:11:09:30:fd:6c:73:8e:
85:c2:3e:11:d8:dd:6f:52:2d:ca:90:d1:8d:b9:ef:59:9f:3b:
f1:73:61:91:8c:34:08:e5:38:99:b0:22:da:60:24:00:6b:b6:
9f:2c:bc:a1:ed:54:0f:a2:69:f6:e9:7a:95:89:a6:0e:eb:07:
f5:da:70:2b:b5:77:61:bf:04:84:95:65:a2:b2:30:de:9b:01:
23:e5:57:4d:ca:52:b6:d7:10:ab:9b:f2:a0:eb:f4:3b:48:6a:
5a:fc:dd:77:93:d7:d1:1d:78:98:cc:5e:68:b1:58:91:75:42:
9b:e1:37:aa:c0:5d:f0:88:12:a3:aa:7c:fd:06:da:24:33:27:
f6:4c:3f:9c:25:12:72:a7:19:e6:11:98:a2:12:59:9b:4f:6e:
06:80:7b:bf:a4:88:09:05:82:f4:4c:7f:60:3b:dc:f2:c6:a1:
e5:ff:73:78:cb:e3:0d:c0:31:3e:93:68:93:36:51:c3:c3:72:
5f:61:7b:a8:ab:34:31:f1:22:0b:b0:22:ec:3b:4f:ab:35:ae:
e0:a9:26:04:8f:c4:2d:b9:eb:2e:0b:b2:1d:ef:5e:87:d0:d0:
76:23:2f:6e:12:e5:61:ce:cc:59:61:8e:4b:19:51:7e:27:7c:
20:04:26:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:31 2024 by rpki-client on console-fra.rpki-client.org