Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/8eddf2-7d7c-44a3-b0fd-110b768bf4c0/1/YgWOf3wJt6WVW-anfhb1UaDPkKA.roa
File: YgWOf3wJt6WVW-anfhb1UaDPkKA.roa (raw, json)
Hash identifier: QPv6+z7iwZeX+HRQbzYX+fjllvkUs5cDVSNGXUcMEpU=
Subject key identifier: 62:05:8E:7F:7C:09:B7:A5:95:5B:E6:A7:7E:16:F5:51:A0:CF:90:A0
Certificate issuer: /CN=9a26657e6b25449425b748645e7420c76ac2b3a4
Certificate serial: 018D13D7F0D2D2E12948CC0A04A63BBEF65B
Authority key identifier: 9A:26:65:7E:6B:25:44:94:25:B7:48:64:5E:74:20:C7:6A:C2:B3:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/miZlfmslRJQlt0hkXnQgx2rCs6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/8eddf2-7d7c-44a3-b0fd-110b768bf4c0/1/YgWOf3wJt6WVW-anfhb1UaDPkKA.roa
Signing time: Tue 16 Jan 2024 19:55:35 +0000
ROA not before: Tue 16 Jan 2024 19:55:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58061
IP address blocks: 195.96.157.0/24 maxlen: 24
217.119.130.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:13:d7:f0:d2:d2:e1:29:48:cc:0a:04:a6:3b:be:f6:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a26657e6b25449425b748645e7420c76ac2b3a4
Validity
Not Before: Jan 16 19:55:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=62058e7f7c09b7a5955be6a77e16f551a0cf90a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ce:9f:e2:1a:bf:a6:1c:7d:b0:10:f0:d0:5b:
44:be:54:74:4b:4d:e2:bf:19:44:ec:c1:d9:8c:bb:
91:92:a6:93:2e:ab:ca:59:50:55:0e:f0:9f:80:c4:
39:1a:37:af:e1:4d:0f:c0:1e:d5:2d:84:c8:a8:09:
d3:ab:21:3d:20:70:12:3d:a2:f8:eb:47:35:a4:bb:
a1:13:2d:de:6c:b6:59:1d:3d:2b:e1:61:23:0f:e5:
64:d8:ab:c6:9c:f1:0f:f3:ca:98:37:32:0d:b2:5d:
8e:4d:35:a4:15:19:45:61:7c:6a:30:ec:f3:b0:82:
b5:5c:67:dc:27:3b:ee:9e:e8:df:e1:79:e1:43:e8:
22:cb:75:78:a6:ff:4e:89:82:fa:cd:28:5a:a3:8a:
a0:a9:a1:7e:80:6b:f8:38:1f:bd:5b:c8:0c:39:05:
80:fe:4b:c8:df:3c:fe:c2:07:4c:cd:a4:4d:55:fb:
f4:83:8a:01:b8:ef:ea:09:d6:94:85:65:c1:1e:a8:
91:90:f3:b0:db:18:61:42:cd:64:97:6a:12:9b:02:
c6:d5:ce:af:a6:ff:bb:de:a8:12:32:73:44:b6:c5:
25:37:43:d1:c2:02:e0:5d:1c:62:8b:88:30:21:90:
ae:51:7d:89:5b:b4:09:cb:8f:09:b7:65:15:83:87:
6c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:05:8E:7F:7C:09:B7:A5:95:5B:E6:A7:7E:16:F5:51:A0:CF:90:A0
X509v3 Authority Key Identifier:
keyid:9A:26:65:7E:6B:25:44:94:25:B7:48:64:5E:74:20:C7:6A:C2:B3:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/miZlfmslRJQlt0hkXnQgx2rCs6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8eddf2-7d7c-44a3-b0fd-110b768bf4c0/1/YgWOf3wJt6WVW-anfhb1UaDPkKA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8eddf2-7d7c-44a3-b0fd-110b768bf4c0/1/miZlfmslRJQlt0hkXnQgx2rCs6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.96.157.0/24
217.119.130.0/24
Signature Algorithm: sha256WithRSAEncryption
39:ec:20:28:b2:e3:29:33:ce:3d:48:b4:05:9c:93:64:96:0a:
00:2d:08:14:c6:49:94:6a:f3:a6:15:f9:d2:50:59:f9:1d:fb:
72:13:ee:c8:6b:ea:62:e3:11:19:7b:2e:af:3e:a0:d6:18:b7:
15:0f:6e:a0:6b:ec:30:d4:a3:5f:7f:cc:2b:4d:ec:76:b1:5f:
c4:fd:8a:08:8e:0e:5b:bc:af:57:26:59:78:56:09:30:9a:5e:
40:94:37:ff:ae:d8:43:dc:ea:3f:07:c1:c0:b5:25:c1:cb:b4:
3f:31:f1:7f:20:4f:a3:f7:1a:9d:ca:1c:c1:d6:4c:4e:21:f1:
79:51:8a:f4:a7:63:e0:52:3d:23:d1:27:50:2a:d2:0d:4c:1b:
70:29:8f:da:1f:2c:5a:1e:e8:5e:73:51:a4:68:72:e8:5a:8b:
1d:29:d5:4f:02:2b:22:e7:f4:cc:86:5a:bc:93:c3:3e:0b:7a:
fd:fa:4e:ed:37:6c:9c:63:cc:6f:68:80:55:b1:d4:97:32:5f:
23:c5:f8:a1:8c:08:04:78:17:70:c3:1b:9d:d1:9b:2d:1f:d0:
68:6b:4f:e5:d3:6a:ad:8d:62:d9:71:f8:f0:21:ee:45:78:ba:
b9:13:93:aa:dd:74:d3:f8:94:e7:67:93:83:23:e8:d4:d2:28:
d2:91:54:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 19 18:02:52 2024 by rpki-client on console-ams.rpki-client.org