Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/AW6KV7Zy5lDsmI6eDEix63xwuAQ.roa
File: AW6KV7Zy5lDsmI6eDEix63xwuAQ.roa (raw, json)
Hash identifier: clMcAzjrLLwIquTbkupMn08YaM6wLYO3eztg7xqPg4s=
Subject key identifier: 01:6E:8A:57:B6:72:E6:50:EC:98:8E:9E:0C:48:B1:EB:7C:70:B8:04
Certificate issuer: /CN=94166b704843d3d9754095c83a91b493828200a2
Certificate serial: 01879817FC9E7600730ED8647FE338CA0418
Authority key identifier: 94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/AW6KV7Zy5lDsmI6eDEix63xwuAQ.roa
Signing time: Wed 19 Apr 2023 05:58:41 +0000
ROA not before: Wed 19 Apr 2023 05:58:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 91.103.120.0/21 maxlen: 24
185.235.71.0/24 maxlen: 24
95.111.128.0/20 maxlen: 24
95.111.144.0/20 maxlen: 24
185.149.12.0/22 maxlen: 24
185.149.12.0/24 maxlen: 24
89.46.96.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:98:17:fc:9e:76:00:73:0e:d8:64:7f:e3:38:ca:04:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94166b704843d3d9754095c83a91b493828200a2
Validity
Not Before: Apr 19 05:58:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=016e8a57b672e650ec988e9e0c48b1eb7c70b804
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:49:f9:50:f0:fc:3e:65:05:f4:ea:f7:32:ab:
f1:77:f9:b0:73:29:58:51:fd:fa:20:ab:b3:ee:01:
e4:25:82:02:1e:06:28:6d:c3:df:b3:33:2d:5b:9a:
44:34:67:00:c9:2e:0a:a3:75:c3:35:87:43:78:c9:
c7:f5:54:fa:fb:bc:ca:ea:23:4d:8a:15:bd:4b:ff:
de:b3:18:85:b9:74:f5:fb:1e:88:07:be:ae:ca:ca:
25:6b:ea:2f:85:95:8a:8c:b3:70:d6:0a:a9:03:14:
ce:21:ba:b9:a3:5e:cd:5b:18:62:f9:e9:39:4e:5d:
24:85:fc:3e:53:1d:90:17:ad:a3:b5:d1:b1:b4:44:
a5:5a:64:99:a8:79:6f:11:77:d7:ff:7d:61:42:9d:
62:64:1c:02:8f:fe:d4:04:55:9e:fb:6f:46:9c:6e:
8d:0f:1f:6c:04:da:40:90:c4:0c:0e:62:64:b2:2d:
6c:5d:b7:31:09:22:67:6d:6e:ae:c9:59:4c:d5:d8:
80:e4:e1:b6:5d:ee:68:62:40:23:52:51:82:07:55:
39:10:4a:fb:91:5a:95:a8:55:d5:05:67:90:ef:9f:
b6:f5:9d:e2:14:7e:6d:fa:b2:1b:7f:f4:93:24:06:
4f:66:d3:65:66:21:94:cc:a8:6a:27:19:d3:69:65:
a0:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:6E:8A:57:B6:72:E6:50:EC:98:8E:9E:0C:48:B1:EB:7C:70:B8:04
X509v3 Authority Key Identifier:
keyid:94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/AW6KV7Zy5lDsmI6eDEix63xwuAQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.46.96.0/22
91.103.120.0/21
95.111.128.0/19
185.149.12.0/22
185.235.71.0/24
Signature Algorithm: sha256WithRSAEncryption
52:3a:4a:aa:8f:8d:f4:f8:2c:d3:ac:be:62:8f:e2:9c:9d:38:
e4:6b:dd:5a:22:f5:c8:64:21:1b:9a:63:89:dc:51:9f:d1:e1:
38:f8:68:02:3e:2f:7b:5c:ea:b1:23:ca:01:ec:ed:ab:19:62:
46:41:ff:81:d9:ab:e5:76:92:e7:40:74:64:1d:48:9d:02:d9:
08:79:bf:c2:54:1c:fc:92:e7:f0:cf:08:5c:48:36:2e:37:6a:
74:c7:bc:5b:7f:d6:01:e5:de:28:2a:4a:4d:15:e3:93:11:ab:
15:94:23:e7:4a:12:e2:4c:d6:f9:d7:be:81:02:0e:d4:1d:3f:
02:e4:27:25:84:52:13:b1:92:7b:06:be:7a:42:35:8f:90:06:
c7:a0:7c:66:93:2b:ec:22:1a:cf:7e:fe:31:9d:94:9e:a9:59:
4c:85:23:86:de:99:27:2b:1c:49:0e:21:a2:84:8e:4f:c4:81:
54:ca:02:80:2d:ef:2c:95:0f:6b:1e:b9:6c:ad:1b:99:9b:fe:
cf:44:b4:12:c3:9f:6f:5c:56:0e:88:9d:48:98:4d:26:84:cb:
1e:e7:9b:8e:1d:17:c7:e4:ce:16:1b:3b:78:93:3c:ac:13:2d:
ff:bd:ac:03:96:61:04:4f:00:5d:f4:87:e2:f3:fa:3c:76:01:
7d:3b:ee:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:01 2023 by rpki-client on console-fra.rpki-client.org