Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/8Gey0B7qdgyzj86m1bvaAtkgQs4.roa
File: 8Gey0B7qdgyzj86m1bvaAtkgQs4.roa (raw, json)
Hash identifier: NB8h5bkt7XwR6bDxUxKknSW7XKsmqco8DvFYn0aOljA=
Subject key identifier: F0:67:B2:D0:1E:EA:76:0C:B3:8F:CE:A6:D5:BB:DA:02:D9:20:42:CE
Certificate issuer: /CN=3c4ed942e5c742e77bfb9beb954f872534f52848
Certificate serial: 018AEEF358D0FAE06E8423CB392CCE526F72
Authority key identifier: 3C:4E:D9:42:E5:C7:42:E7:7B:FB:9B:EB:95:4F:87:25:34:F5:28:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PE7ZQuXHQud7-5vrlU-HJTT1KEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/8Gey0B7qdgyzj86m1bvaAtkgQs4.roa
Signing time: Mon 02 Oct 2023 05:53:59 +0000
ROA not before: Mon 02 Oct 2023 05:53:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 62.182.170.0/24 maxlen: 24
194.15.153.0/24 maxlen: 24
194.15.154.0/24 maxlen: 24
194.15.155.0/24 maxlen: 24
83.97.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ee:f3:58:d0:fa:e0:6e:84:23:cb:39:2c:ce:52:6f:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4ed942e5c742e77bfb9beb954f872534f52848
Validity
Not Before: Oct 2 05:53:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f067b2d01eea760cb38fcea6d5bbda02d92042ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:26:e1:d5:db:8d:08:c7:f3:c3:b4:52:74:00:
4d:ea:bf:98:be:c8:38:35:8c:fd:5c:5f:9f:8d:24:
a9:e6:08:b0:5b:4e:63:49:52:b5:69:e7:05:8b:c1:
c1:43:95:36:92:d4:32:0c:5f:88:01:14:8c:6a:7c:
18:39:1e:60:1d:9f:0c:3f:24:e0:6e:6e:e9:a7:0f:
79:4a:6d:cd:f2:73:ce:ca:ea:8a:42:4e:77:06:a1:
f6:15:33:cc:91:58:62:11:9d:75:3b:1c:64:1a:4e:
29:f6:94:fd:f3:54:fb:9d:6f:00:1a:70:ee:79:c7:
60:3b:48:ab:90:33:3d:fa:88:51:b5:b6:b7:72:de:
1c:6a:a8:24:55:6e:2d:aa:84:a7:2d:13:b6:8d:17:
0d:85:96:77:0c:c2:59:3b:36:a3:fd:7a:a9:ae:5d:
99:e1:dc:a8:73:44:05:d4:f6:5f:75:1b:2c:7a:87:
38:8a:ae:f5:92:98:ec:4d:89:e7:36:f1:22:40:e6:
bd:0a:c5:a6:56:fb:58:99:34:f0:db:14:dc:05:b9:
9a:54:bf:e1:4a:10:34:f2:f9:6a:08:db:4c:5a:34:
af:ea:37:a8:5e:6a:ae:73:ce:fd:a9:26:96:54:a9:
6c:fc:2b:b3:b3:50:ac:49:ca:89:cd:2a:78:3c:1c:
af:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:67:B2:D0:1E:EA:76:0C:B3:8F:CE:A6:D5:BB:DA:02:D9:20:42:CE
X509v3 Authority Key Identifier:
keyid:3C:4E:D9:42:E5:C7:42:E7:7B:FB:9B:EB:95:4F:87:25:34:F5:28:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PE7ZQuXHQud7-5vrlU-HJTT1KEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/8Gey0B7qdgyzj86m1bvaAtkgQs4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/PE7ZQuXHQud7-5vrlU-HJTT1KEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.182.170.0/24
83.97.96.0/22
194.15.153.0-194.15.155.255
Signature Algorithm: sha256WithRSAEncryption
83:3e:5b:d7:e1:45:bc:7b:b1:fd:b3:be:22:09:a4:00:46:bb:
74:ba:03:95:bf:bf:b7:d1:21:ff:cf:6b:1b:fd:10:e8:41:a7:
39:b1:4f:a3:90:10:52:ba:85:4d:da:3a:22:4e:a5:fa:65:43:
d3:47:72:ca:b7:71:40:ae:04:8f:a4:a9:f5:17:ee:eb:d0:a1:
84:fc:5f:0e:4d:dc:1b:76:ca:63:52:7e:89:c1:06:01:85:6a:
5e:84:48:d3:32:e0:6d:7b:0a:ce:48:69:5a:d7:bb:94:40:1f:
59:62:a7:d3:96:fc:14:b1:0f:e4:6c:0c:2c:21:75:dc:7e:5b:
18:b6:b1:9e:92:e7:4d:71:1a:49:7e:d4:0d:64:93:43:8d:b6:
09:cb:83:0c:a4:8b:b5:7e:b5:cf:66:6d:4f:35:1e:40:b1:b4:
c5:a6:ff:83:95:a8:85:fe:8c:4d:f1:b5:ac:c7:ea:29:90:09:
e3:73:1f:87:a5:71:30:75:4b:be:62:81:25:54:0c:9b:6b:a4:
f0:54:6a:ca:15:06:51:8f:61:64:16:d3:de:ac:eb:54:55:d9:
4c:c1:48:e7:ca:9f:69:a2:44:88:40:1a:6c:57:42:09:cc:93:
86:cd:a2:5b:6e:8f:1f:6a:4a:60:e9:dd:54:53:40:a5:d0:24:
b9:64:c4:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:09 2024 by rpki-client on console-ams.rpki-client.org