Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0e18d2-d80b-4aa0-aaef-069661675106/1/akU_fKJmr71lJW0ZZj1x5XGxJjY.roa
File: akU_fKJmr71lJW0ZZj1x5XGxJjY.roa (raw, json)
Hash identifier: t5ENZ6/MXFUCHXSLgfdLjkTcpojAuWKXEUXf8VPZohg=
Subject key identifier: 6A:45:3F:7C:A2:66:AF:BD:65:25:6D:19:66:3D:71:E5:71:B1:26:36
Certificate issuer: /CN=b0f619ef200840dfa8fd43567c7a978c15312d7f
Certificate serial: 018E3243C510DA2A05E535559DB3714CD083
Authority key identifier: B0:F6:19:EF:20:08:40:DF:A8:FD:43:56:7C:7A:97:8C:15:31:2D:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sPYZ7yAIQN-o_UNWfHqXjBUxLX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0e18d2-d80b-4aa0-aaef-069661675106/1/akU_fKJmr71lJW0ZZj1x5XGxJjY.roa
Signing time: Tue 12 Mar 2024 10:44:45 +0000
ROA not before: Tue 12 Mar 2024 10:44:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202656
IP address blocks: 83.138.54.0/24 maxlen: 24
176.116.9.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:32:43:c5:10:da:2a:05:e5:35:55:9d:b3:71:4c:d0:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0f619ef200840dfa8fd43567c7a978c15312d7f
Validity
Not Before: Mar 12 10:44:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6a453f7ca266afbd65256d19663d71e571b12636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ec:07:6e:b8:6a:f4:dc:93:80:ab:d5:69:73:
15:5c:a9:ea:be:a6:b1:eb:83:14:a2:48:f5:9f:cb:
35:87:d6:a3:19:72:65:46:3c:4f:fb:2d:02:08:b2:
38:c7:63:af:73:c9:15:34:6c:2e:32:fe:1b:0e:6f:
b2:ce:a2:42:3b:f4:47:27:0d:60:da:7a:74:06:25:
a3:29:8f:e5:69:fa:8b:e3:3e:1d:21:8c:67:47:0c:
36:cf:e2:e9:1d:73:b4:2c:b3:a8:ee:f5:4a:03:41:
c2:62:a3:6e:3e:9a:b1:3f:54:eb:47:e2:56:81:7e:
f8:02:42:02:f5:d8:61:dc:68:8e:6c:4d:56:97:5b:
92:d3:78:bb:02:51:26:34:b8:ba:dc:ce:43:6a:f4:
2e:f3:ef:d4:05:ec:4f:72:7f:68:5e:38:36:d4:41:
a6:f7:fa:b7:03:38:11:19:0d:94:ea:91:bf:36:56:
f2:82:54:b7:2c:e8:4c:c3:30:69:0c:f9:ad:5b:f1:
c7:b2:bd:6d:d7:77:87:07:69:e1:5f:2c:7b:29:8e:
ad:7f:03:6b:ea:c3:ef:f0:42:75:2b:e8:88:55:f0:
e6:96:6f:46:e0:de:36:48:dd:87:4a:85:43:50:50:
9e:db:26:03:e5:d5:41:bb:e4:57:b3:09:c6:e1:76:
d6:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:45:3F:7C:A2:66:AF:BD:65:25:6D:19:66:3D:71:E5:71:B1:26:36
X509v3 Authority Key Identifier:
keyid:B0:F6:19:EF:20:08:40:DF:A8:FD:43:56:7C:7A:97:8C:15:31:2D:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sPYZ7yAIQN-o_UNWfHqXjBUxLX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0e18d2-d80b-4aa0-aaef-069661675106/1/akU_fKJmr71lJW0ZZj1x5XGxJjY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0e18d2-d80b-4aa0-aaef-069661675106/1/sPYZ7yAIQN-o_UNWfHqXjBUxLX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.138.54.0/24
176.116.9.0/24
Signature Algorithm: sha256WithRSAEncryption
74:c0:88:29:5e:56:3e:e4:e7:27:33:f7:f7:2f:f2:2c:a7:4a:
e6:db:d3:1d:18:fa:08:9c:ad:de:9c:ad:13:9f:3b:d4:1e:f0:
e0:c3:ce:50:02:7d:13:e9:b2:81:e3:c4:e8:a9:ff:c9:d7:38:
af:ad:f7:31:e4:04:bd:53:e9:d2:1b:8e:13:60:4f:7c:47:00:
0e:d8:e1:a5:8e:48:2c:d4:39:c8:ea:b5:ad:aa:31:4b:0f:44:
82:d7:b9:c7:e4:a0:05:b9:40:f3:c6:68:dc:f6:62:b7:ae:f8:
94:e7:4e:91:75:c2:73:11:78:9e:4d:92:3a:61:37:b5:8c:28:
5d:77:e3:8f:eb:68:35:bb:3c:a6:52:3c:81:c0:18:62:00:15:
1c:f5:94:d6:f2:c4:98:d2:8c:92:f0:79:6b:d4:85:eb:08:33:
26:3e:27:a4:cd:f2:24:42:54:ed:1b:e3:1f:79:79:b1:a8:41:
12:29:ff:7e:43:26:05:4a:3e:c2:4c:f2:73:2a:ce:38:e8:0f:
19:7e:46:f7:81:f6:8e:c9:61:11:97:83:ab:4f:7e:17:9d:61:
9d:89:8f:17:a8:d9:2e:8e:99:09:ed:58:3c:d2:1a:6f:d7:8d:
59:fd:61:da:79:79:3e:af:04:fd:95:1e:60:8d:b3:a6:b9:29:
93:56:61:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:18 2024 by rpki-client on console-ams.rpki-client.org