Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/DHmFZq_KVrsMbQlrPGEbYFKSWeU.roa
File: DHmFZq_KVrsMbQlrPGEbYFKSWeU.roa (raw, json)
Hash identifier: f+Eqny5Epik6zahFVGUFIGANc7iW2rdOukQfq2qC3fM=
Subject key identifier: 0C:79:85:66:AF:CA:56:BB:0C:6D:09:6B:3C:61:1B:60:52:92:59:E5
Certificate issuer: /CN=add353933674a5608f6d1ee2dab4f64c8bff8f39
Certificate serial: 01874C02568BEB74D3A111EC490F0EDD3B96
Authority key identifier: AD:D3:53:93:36:74:A5:60:8F:6D:1E:E2:DA:B4:F6:4C:8B:FF:8F:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/DHmFZq_KVrsMbQlrPGEbYFKSWeU.roa
Signing time: Tue 04 Apr 2023 11:23:54 +0000
ROA not before: Tue 04 Apr 2023 11:23:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8851
IP address blocks: 194.46.32.0/19 maxlen: 19
91.84.0.0/16 maxlen: 16
91.84.0.0/15 maxlen: 15
194.46.64.0/19 maxlen: 19
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:4c:02:56:8b:eb:74:d3:a1:11:ec:49:0f:0e:dd:3b:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=add353933674a5608f6d1ee2dab4f64c8bff8f39
Validity
Not Before: Apr 4 11:23:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0c798566afca56bb0c6d096b3c611b60529259e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:2c:dd:6b:ff:7a:0c:3a:12:17:11:84:db:22:
8b:8d:9c:8c:4a:70:40:29:f3:d5:df:bf:b8:f1:a0:
c3:f5:94:5a:7b:ac:7e:8e:19:41:7b:bb:bc:2f:40:
8a:3a:b3:a0:fb:7d:92:71:b1:40:e2:8c:68:de:8a:
87:7b:b8:3d:95:15:13:f9:59:d8:45:6b:9c:92:90:
72:63:31:70:d0:23:30:02:8f:db:ce:be:00:71:c5:
ec:4b:ed:e1:13:c4:dd:34:a0:a0:22:53:d4:c4:e8:
24:3b:d8:28:d7:78:c4:de:bf:e3:54:0c:a3:4c:82:
d3:d2:62:61:24:5d:1a:49:70:aa:a9:c2:fe:e7:61:
5c:d5:5e:23:d6:b9:b1:53:0b:5a:1d:3c:57:bf:4d:
21:90:79:cb:45:ac:3a:e8:82:01:bd:11:34:79:dc:
4b:cc:df:76:f5:0e:6e:ff:b7:5a:ca:e4:fa:ed:d6:
55:80:09:ea:c3:05:c1:b8:f7:99:b1:d5:1a:b1:a2:
be:72:ce:11:a5:35:d6:f4:20:b4:e6:63:5b:16:e3:
3a:ea:2a:74:ed:3a:b7:28:bd:0b:0d:ad:ec:86:d8:
b7:82:cb:54:81:4f:78:2c:13:11:80:d3:fb:31:95:
b6:9c:dc:34:00:73:37:50:01:b5:62:2e:68:05:08:
b7:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:79:85:66:AF:CA:56:BB:0C:6D:09:6B:3C:61:1B:60:52:92:59:E5
X509v3 Authority Key Identifier:
keyid:AD:D3:53:93:36:74:A5:60:8F:6D:1E:E2:DA:B4:F6:4C:8B:FF:8F:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/DHmFZq_KVrsMbQlrPGEbYFKSWeU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.84.0.0/15
194.46.32.0-194.46.95.255
Signature Algorithm: sha256WithRSAEncryption
2f:61:51:9d:89:38:ac:26:14:6b:d5:3a:a7:9e:cd:4d:a9:f6:
57:cb:d0:7b:b2:7c:d0:b6:ae:71:f1:c3:55:4f:2f:ee:71:4c:
de:78:54:4b:90:5c:ea:55:71:be:1a:b2:2a:34:17:ae:93:10:
74:85:68:a4:10:2b:13:e8:a1:6c:20:14:09:e8:27:cc:c0:f0:
6d:6a:87:38:e4:be:f2:32:48:e4:2c:62:89:5a:8c:a1:4e:86:
16:70:fb:df:72:de:da:59:45:9c:2a:e1:af:ae:39:a1:9d:81:
d5:53:3f:df:45:80:8d:82:e5:91:f1:9a:af:e2:40:c3:f9:66:
a4:47:fb:50:ad:79:71:f8:a1:f5:26:42:a8:2f:46:e5:28:43:
29:82:5d:c8:60:ac:ce:c2:a5:78:33:b8:3b:3d:8e:7c:b4:6b:
2a:6c:0b:42:60:72:4a:06:a4:b1:3b:c2:49:28:f9:7e:c0:5b:
80:7e:0f:69:78:e0:7a:58:24:83:bd:02:1d:8a:7b:83:39:e5:
9b:48:87:8c:60:9e:fc:74:26:c6:e7:8d:03:78:bb:f6:65:5f:
40:ee:7f:36:f4:3c:81:4b:f2:ce:d5:a9:b4:7b:14:df:cb:64:
54:81:ce:22:1a:11:b6:71:f3:2b:e1:31:55:06:c8:42:ed:96:
ef:de:ad:10
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:37 2024 by rpki-client on console-ams.rpki-client.org