Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/oT6ndcCqFLuGZ5hHSUtAGl2c664.roa
File: oT6ndcCqFLuGZ5hHSUtAGl2c664.roa (raw, json)
Hash identifier: 6V8rJPkw9cGlmcRvMBHouaNpZVhczUreSyiqjzVfDBw=
Subject key identifier: A1:3E:A7:75:C0:AA:14:BB:86:67:98:47:49:4B:40:1A:5D:9C:EB:AE
Certificate issuer: /CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Certificate serial: 0188B4FA50BA906AFDC735B804CC1546546F
Authority key identifier: 1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/oT6ndcCqFLuGZ5hHSUtAGl2c664.roa
Signing time: Tue 13 Jun 2023 13:38:03 +0000
ROA not before: Tue 13 Jun 2023 13:38:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 91.213.174.0/24 maxlen: 24
91.213.186.0/24 maxlen: 24
91.213.200.0/24 maxlen: 24
194.156.150.0/24 maxlen: 24
45.150.197.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b4:fa:50:ba:90:6a:fd:c7:35:b8:04:cc:15:46:54:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Validity
Not Before: Jun 13 13:38:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a13ea775c0aa14bb86679847494b401a5d9cebae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:77:64:b4:4f:25:41:12:d6:ad:01:b1:fa:34:
71:36:0b:8f:03:b6:b7:87:33:96:d0:e6:00:97:3a:
e8:2e:24:ce:37:cf:56:dc:b8:f3:19:75:22:82:bf:
f6:55:ec:d2:9c:88:30:e1:77:75:e5:6a:5c:bc:3c:
28:3f:6f:8c:2a:f9:17:c6:da:c6:0f:d8:13:87:09:
80:8f:cc:f2:d8:2a:14:e0:97:0f:1a:d1:14:49:07:
8b:e9:7b:4a:d1:a4:1d:0d:6b:9f:5a:7a:5f:f8:1b:
c5:ee:92:91:2c:d1:a2:90:1f:72:48:78:ec:57:f0:
f0:5f:f2:5f:02:d0:ae:7c:4d:bf:e4:27:63:43:ed:
09:20:87:d1:a7:e5:e9:43:9c:ef:3b:10:00:03:ba:
b4:89:04:aa:a8:cb:db:a4:ee:6a:da:90:ae:37:b7:
e6:c9:ed:69:6b:1c:de:2a:60:bb:b0:16:05:5f:8a:
62:ca:75:ef:d9:70:06:68:0f:ac:73:1e:86:15:ad:
c6:07:ad:ea:a6:45:ec:39:6c:bb:19:65:85:ac:f3:
0b:82:9f:40:79:bb:5c:42:fa:45:e3:f3:b9:82:aa:
51:f9:a4:fe:f5:7c:c5:d4:4b:8c:22:32:d3:d4:73:
a9:ff:aa:53:8f:ed:73:91:74:c1:7e:37:0c:eb:89:
4c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:3E:A7:75:C0:AA:14:BB:86:67:98:47:49:4B:40:1A:5D:9C:EB:AE
X509v3 Authority Key Identifier:
keyid:1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/oT6ndcCqFLuGZ5hHSUtAGl2c664.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.197.0/24
91.213.174.0/24
91.213.186.0/24
91.213.200.0/24
194.156.150.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:79:81:d7:88:d9:4c:d6:5b:3b:ec:1d:3f:4a:c2:34:c2:99:
2a:c8:94:51:df:ad:30:ab:52:70:ac:5d:8d:95:17:4a:95:7e:
c7:b4:59:b4:ac:11:df:9b:c2:3f:1d:1c:dc:4f:a7:2d:8a:51:
5e:b9:af:5e:b3:a2:dc:f7:a4:f0:1c:e2:cd:11:64:2e:ee:3f:
d2:8f:e4:e3:54:98:8e:ca:56:40:a6:b9:6a:50:ca:9c:ad:20:
3a:23:51:53:9d:7a:d2:21:16:cc:8f:6e:7d:ab:21:bf:38:66:
3b:a9:ac:4e:c6:b6:43:69:a9:ae:aa:e5:4a:11:e4:0d:0f:12:
c9:3c:56:3c:da:f2:72:b7:35:8f:b3:61:f8:f4:e0:61:63:f2:
fa:e8:f3:e7:22:53:95:02:85:15:47:69:ba:56:4c:86:b6:fc:
cf:c4:89:51:ae:55:d1:18:8e:cb:19:f6:10:e3:91:28:42:22:
a9:0e:b4:f8:d9:27:06:f4:eb:7f:2d:9f:25:b9:85:e9:2b:14:
b9:48:66:38:fe:2a:bd:1f:df:17:3e:3d:ed:00:0c:6c:96:38:
0c:4b:0e:18:68:18:2d:b3:6b:76:02:b1:5b:de:74:ec:00:a1:
eb:17:b0:b2:8e:be:c6:7b:7c:91:07:8f:61:fd:cd:0d:f2:fd:
d0:43:94:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:14 2024 by rpki-client on console-ams.rpki-client.org