Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/rLyLuHly_xuV6pbFQiNpqAB63d4.roa
File: rLyLuHly_xuV6pbFQiNpqAB63d4.roa (raw, json)
Hash identifier: NZt+aIR4fJbSpJiomqqq6i0GdfrkGh65PcnOIEyrgtg=
Subject key identifier: AC:BC:8B:B8:79:72:FF:1B:95:EA:96:C5:42:23:69:A8:00:7A:DD:DE
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 019026AB65534BAEFE08FA463ACAE09BCF78
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/rLyLuHly_xuV6pbFQiNpqAB63d4.roa
Signing time: Mon 17 Jun 2024 14:48:05 +0000
ROA not before: Mon 17 Jun 2024 14:48:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12325
IP address blocks: 89.46.128.0/22 maxlen: 24
89.46.232.0/21 maxlen: 24
188.215.40.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:26:ab:65:53:4b:ae:fe:08:fa:46:3a:ca:e0:9b:cf:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jun 17 14:48:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=acbc8bb87972ff1b95ea96c5422369a8007addde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a4:17:48:ff:4a:be:f4:64:98:d0:c1:5a:7a:
7a:60:e7:fc:21:15:6b:8f:d5:a6:d7:af:f2:72:c0:
09:8f:eb:5b:de:2e:10:b2:28:f0:17:c6:56:8b:28:
ce:f0:6b:95:ca:f3:07:5a:10:1f:c1:cc:b8:a1:43:
8d:d7:01:e2:93:21:4c:50:46:98:9b:47:5d:1e:f9:
56:e7:4a:30:2b:62:cb:56:98:1a:5e:95:5c:a3:3a:
32:9d:84:95:d3:1e:f2:f6:a6:4c:6f:c7:cb:1e:ef:
29:01:8f:a4:36:e0:c2:37:70:1f:f8:0b:47:19:76:
13:60:ad:76:83:46:60:f9:9a:33:e5:9e:b0:40:1b:
0c:8d:79:54:bd:72:e7:3f:8c:8f:45:c5:51:56:a2:
a0:b9:67:ce:d3:13:bd:0c:5f:2c:be:5a:1b:2c:99:
4e:30:82:35:7f:4e:db:c9:e7:89:c2:22:a3:af:f2:
f7:50:b6:95:e2:6b:33:d8:dc:45:a1:e4:73:b5:af:
84:4d:5a:be:69:b4:07:9d:70:28:90:e3:4c:20:ad:
15:4e:9a:36:a1:e6:64:c4:f7:38:0f:15:f4:66:3f:
3f:ac:6f:38:62:4c:3d:51:52:5e:70:2e:d7:a3:26:
01:96:1f:f0:67:d6:75:03:f8:08:5b:29:f5:fc:61:
11:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:BC:8B:B8:79:72:FF:1B:95:EA:96:C5:42:23:69:A8:00:7A:DD:DE
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/rLyLuHly_xuV6pbFQiNpqAB63d4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.46.128.0/22
89.46.232.0/21
188.215.40.0/22
Signature Algorithm: sha256WithRSAEncryption
24:8f:cd:f3:e8:38:e4:f7:99:70:31:92:cd:7f:0c:a4:dd:ce:
80:37:7e:49:29:8a:b7:61:f6:99:1c:e1:82:74:a0:f8:d2:18:
8e:b3:a6:1b:88:37:bd:5d:f1:22:58:e0:93:07:32:42:cf:74:
b0:d2:76:45:ea:19:fa:07:b9:59:57:43:bd:d8:3a:02:39:bf:
96:d3:c5:61:75:f5:39:70:c9:05:72:70:30:ae:5e:a4:c2:7e:
17:5e:9e:25:75:89:56:59:97:e8:55:7a:00:62:57:4c:c4:02:
42:1a:c9:55:a6:67:18:e4:04:1e:21:a9:83:a3:ff:8a:a1:59:
2b:10:c1:3d:34:72:d3:b5:27:10:05:e8:be:f5:48:1d:df:be:
d1:4b:71:41:05:2a:24:b0:16:3b:1d:ec:1f:03:17:5c:f7:45:
20:47:ef:5c:8e:25:e7:13:c0:26:3a:ec:01:6c:dc:37:5a:1e:
24:e3:c4:2d:86:30:3b:30:27:c5:85:be:60:b4:7a:3f:5f:c6:
d1:7b:2d:9f:46:12:0f:1f:1c:1b:41:cc:0d:b3:4f:47:9f:a4:
b0:98:44:4b:58:7a:8b:68:c9:91:11:5c:7d:72:bf:22:11:bf:
80:05:41:11:93:fd:37:8a:ad:57:be:db:2b:1b:4a:00:04:cb:
55:b0:8f:3a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:33:32 2025 by rpki-client