Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/1be999-5a59-4c10-92ff-da1b58618841/1/erUVdvFv2w6dxhL9PMqJ1joyzOU.roa
File: erUVdvFv2w6dxhL9PMqJ1joyzOU.roa (raw, json)
Hash identifier: 0kdZFUp5lRycrEN6iZWkr60+bbkK4N+1hW1LBecW6eg=
Subject key identifier: 7A:B5:15:76:F1:6F:DB:0E:9D:C6:12:FD:3C:CA:89:D6:3A:32:CC:E5
Certificate issuer: /CN=eefbe8369a7bbc03a86fbe639b7efaa02b717287
Certificate serial: 018C1ADAE239B872A92543404DD3B573FFAE
Authority key identifier: EE:FB:E8:36:9A:7B:BC:03:A8:6F:BE:63:9B:7E:FA:A0:2B:71:72:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7vvoNpp7vAOob75jm376oCtxcoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/1be999-5a59-4c10-92ff-da1b58618841/1/erUVdvFv2w6dxhL9PMqJ1joyzOU.roa
Signing time: Wed 29 Nov 2023 11:33:21 +0000
ROA not before: Wed 29 Nov 2023 11:33:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207616
IP address blocks: 185.190.26.0/24 maxlen: 24
91.193.56.0/23 maxlen: 24
194.48.200.0/24 maxlen: 24
2a0f:6280::/30 maxlen: 48
2a0f:6284::/30 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:1a:da:e2:39:b8:72:a9:25:43:40:4d:d3:b5:73:ff:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eefbe8369a7bbc03a86fbe639b7efaa02b717287
Validity
Not Before: Nov 29 11:33:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7ab51576f16fdb0e9dc612fd3cca89d63a32cce5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:18:d3:ae:df:94:1a:0c:10:6c:34:16:f5:a8:
73:94:41:6f:cc:df:c1:eb:03:ec:6a:ae:e1:82:1c:
c1:77:06:4f:72:d4:ad:9c:8b:8e:37:96:3b:fc:35:
e9:eb:24:1a:2f:ef:d5:9f:5d:1e:37:d2:c0:5b:e0:
0c:d1:f2:cd:79:13:cc:0e:c6:e2:36:ae:1d:6b:ca:
59:5b:b2:bd:e3:ac:58:f8:37:a4:1a:aa:ae:54:48:
19:72:ee:94:90:a9:4a:f6:0f:2d:aa:3d:aa:06:bc:
3d:0b:df:84:1a:02:c0:e1:67:e1:9b:3d:f6:5e:9f:
56:ba:6a:27:b7:d0:3b:03:9b:2e:d7:db:d1:e9:25:
08:fa:41:d1:39:f8:86:a2:4a:00:16:9b:ba:98:e8:
75:23:a8:65:01:9a:6d:9e:3c:5c:9d:6c:cc:ff:b4:
dc:6a:d7:e3:7e:3d:d2:5c:75:b4:db:c2:0a:87:3b:
d9:c8:2c:75:25:04:87:3b:c9:a1:20:0c:e4:0d:8b:
e0:33:79:81:72:97:49:67:89:f4:bd:29:08:c6:59:
a4:b2:f7:92:69:69:73:7a:77:14:02:f2:4f:62:a8:
16:7e:f7:72:45:41:67:4c:e9:3d:2a:4f:b7:10:59:
46:31:a6:5e:a8:6d:e4:38:09:9a:51:ae:be:76:24:
ea:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:B5:15:76:F1:6F:DB:0E:9D:C6:12:FD:3C:CA:89:D6:3A:32:CC:E5
X509v3 Authority Key Identifier:
keyid:EE:FB:E8:36:9A:7B:BC:03:A8:6F:BE:63:9B:7E:FA:A0:2B:71:72:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7vvoNpp7vAOob75jm376oCtxcoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1be999-5a59-4c10-92ff-da1b58618841/1/erUVdvFv2w6dxhL9PMqJ1joyzOU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1be999-5a59-4c10-92ff-da1b58618841/1/7vvoNpp7vAOob75jm376oCtxcoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.193.56.0/23
185.190.26.0/24
194.48.200.0/24
IPv6:
2a0f:6280::/29
Signature Algorithm: sha256WithRSAEncryption
5a:39:72:60:e0:79:a1:4d:26:ed:43:89:75:88:d2:fe:62:3e:
81:c0:55:2e:7d:8f:d8:95:13:e4:b9:48:ef:4f:61:39:d1:2f:
9c:aa:71:6c:b9:a4:b3:a8:ae:c0:16:a6:7c:7a:ed:e6:f4:d2:
b6:18:7e:04:b6:f3:48:35:b4:03:84:fe:7d:04:e0:e2:dc:fb:
41:8b:1a:c4:f4:a6:4c:3f:eb:ab:e7:6d:0f:e2:5a:64:43:4b:
a5:f0:6c:1b:e1:ae:ca:be:82:2a:de:10:f9:ff:9d:9c:d3:7c:
f0:54:39:b5:d7:79:28:e0:2a:23:62:07:ef:27:4f:5d:2b:c8:
67:5c:91:a8:8a:64:60:e0:1a:c2:9b:0c:8d:76:d6:43:91:c3:
cf:56:ef:4a:0e:8d:c8:b4:c1:f0:75:dd:1e:3c:a8:46:1e:f8:
ba:ea:7a:2c:49:e4:de:b0:f6:e6:65:8b:12:c3:27:71:24:02:
f7:4a:ad:45:71:12:11:5f:d0:ec:dd:6f:c4:75:5e:29:ee:bc:
26:c6:4a:f7:fa:c9:23:d8:50:43:81:48:2b:f3:81:b4:9b:3b:
16:54:6c:40:33:fd:c3:3c:45:aa:09:73:97:09:ca:cf:16:6b:
63:20:07:48:f2:d5:02:20:93:f9:58:00:99:2f:1f:7d:ba:5a:
eb:e6:34:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:18 2024 by rpki-client on console-fra.rpki-client.org