Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/PjgoJPwQZdcN2au9orKOJNcBZUE.roa
File: PjgoJPwQZdcN2au9orKOJNcBZUE.roa (raw, json)
Hash identifier: lBQLuRIkJvSJsOnTifQpT8711yKokMYTws6IMAvCzac=
Subject key identifier: 3E:38:28:24:FC:10:65:D7:0D:D9:AB:BD:A2:B2:8E:24:D7:01:65:41
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 018C01B0F2BFADB5BB6D7C3A73F0B858CC36
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/PjgoJPwQZdcN2au9orKOJNcBZUE.roa
Signing time: Fri 24 Nov 2023 14:17:02 +0000
ROA not before: Fri 24 Nov 2023 14:17:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12325
IP address blocks: 185.18.224.0/23 maxlen: 24
188.215.40.0/22 maxlen: 24
89.40.222.0/23 maxlen: 24
89.47.52.0/24 maxlen: 24
188.208.135.0/24 maxlen: 24
89.46.232.0/21 maxlen: 24
89.46.128.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:01:b0:f2:bf:ad:b5:bb:6d:7c:3a:73:f0:b8:58:cc:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Nov 24 14:17:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3e382824fc1065d70dd9abbda2b28e24d7016541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c7:2b:bd:f3:9f:ee:08:24:0f:3c:f8:90:71:
2d:aa:e1:d0:ab:e8:ad:cb:9e:c1:d4:c7:fc:6d:a2:
99:80:9a:77:f7:a6:8d:f8:c4:09:0b:a7:39:1a:39:
89:72:46:2c:85:d0:da:d4:8a:6b:d1:4a:56:53:78:
dd:dd:54:e9:22:94:c0:2f:6b:1d:5a:58:ed:55:43:
6f:b8:6d:29:ff:2b:f4:b1:73:72:02:7e:21:cb:b7:
3b:61:7b:df:f0:13:65:b7:55:3f:25:f7:1a:f4:fe:
bc:e3:ee:71:27:32:2e:39:bb:19:70:41:0d:5c:d4:
2b:13:38:77:88:d7:98:94:65:47:cf:67:fe:f7:e8:
c3:8d:f1:ab:3a:46:a3:19:82:51:0b:58:07:58:3c:
45:4b:dc:2f:49:29:6a:1e:1f:60:4b:84:a5:c5:12:
1e:c4:2b:32:7f:58:d0:29:17:a9:fe:c8:a9:c1:cf:
0a:cd:1e:32:cf:28:ac:a6:f6:24:15:05:f2:46:54:
61:19:2b:f8:0a:13:48:fe:06:0e:27:88:54:58:86:
95:e4:63:c0:13:77:2c:bf:d1:b3:f4:1b:b8:46:0d:
1d:62:d4:b6:52:49:c8:4f:87:7f:a1:fa:c8:64:54:
ba:de:3b:49:3a:26:67:83:93:3d:a4:ea:82:23:c3:
20:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:38:28:24:FC:10:65:D7:0D:D9:AB:BD:A2:B2:8E:24:D7:01:65:41
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/PjgoJPwQZdcN2au9orKOJNcBZUE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.40.222.0/23
89.46.128.0/22
89.46.232.0/21
89.47.52.0/24
185.18.224.0/23
188.208.135.0/24
188.215.40.0/22
Signature Algorithm: sha256WithRSAEncryption
60:3d:ae:d2:31:34:89:dc:a5:33:b9:43:21:7e:02:3d:dd:8d:
47:22:06:ec:01:ff:49:ff:3e:27:07:46:9f:f6:39:5a:ba:58:
b9:6c:31:5a:59:3b:06:c1:e8:87:52:06:bb:04:2b:37:cd:9c:
34:a3:ae:de:ce:8d:07:86:b0:a3:a2:69:d3:1d:d7:66:99:af:
f6:83:4a:d6:30:f1:2a:f6:4e:f9:28:e8:2b:b2:7d:a2:69:67:
27:cd:f3:da:89:7c:84:4b:1f:e3:10:9c:ac:d7:c0:1e:86:52:
a4:fe:9d:fd:65:ae:34:aa:34:02:d0:af:57:7b:8f:2e:d0:55:
c4:78:2b:86:38:42:0b:5a:a0:a9:7c:35:db:3e:e8:63:4e:18:
b0:12:ed:ee:bc:23:ef:c2:28:b6:86:5d:80:3f:24:9e:66:1b:
d8:8c:12:72:ff:3e:cc:3d:8d:d8:93:0d:6b:a7:88:a4:d0:0e:
d1:54:e1:f1:42:64:94:df:25:06:14:f6:3c:88:a9:d3:86:c9:
a9:20:ae:10:c7:9d:5b:1d:53:97:ed:5c:9b:a0:66:bd:0d:8c:
a4:d4:50:e6:db:ac:d7:25:29:c4:36:ec:8b:5e:06:ca:21:dd:
90:72:9a:ca:75:ce:bb:ec:06:c2:3d:bf:b0:f4:ec:a3:f4:68:
25:07:13:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:42:49 2025 by rpki-client