Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/bOVmK0gDTchc4kcsuZyrK1u2rIM.roa
File: bOVmK0gDTchc4kcsuZyrK1u2rIM.roa (raw, json)
Hash identifier: O8EbOKnbaTLZZHpkLcb0rrpHydOtJZWTwCJvGaGLGvk=
Subject key identifier: 6C:E5:66:2B:48:03:4D:C8:5C:E2:47:2C:B9:9C:AB:2B:5B:B6:AC:83
Certificate issuer: /CN=23394a125fa3ace0c47a6fe34f4086b4d3ba5588
Certificate serial: 01856D016B6350931851EE2DEA7D28EE5088
Authority key identifier: 23:39:4A:12:5F:A3:AC:E0:C4:7A:6F:E3:4F:40:86:B4:D3:BA:55:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IzlKEl-jrODEem_jT0CGtNO6VYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/bOVmK0gDTchc4kcsuZyrK1u2rIM.roa
Signing time: Sun 01 Jan 2023 11:04:47 +0000
ROA not before: Sun 01 Jan 2023 11:04:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197248
IP address blocks: 77.111.96.0/20 maxlen: 20
93.88.192.0/20 maxlen: 20
109.61.0.0/24 maxlen: 24
109.61.0.0/17 maxlen: 17
109.61.0.0/18 maxlen: 18
109.61.11.0/24 maxlen: 24
77.111.64.0/19 maxlen: 19
109.61.69.0/24 maxlen: 24
109.61.64.0/18 maxlen: 18
109.61.80.0/24 maxlen: 24
62.112.192.0/19 maxlen: 19
109.61.22.0/24 maxlen: 24
2a01:be00::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:01:6b:63:50:93:18:51:ee:2d:ea:7d:28:ee:50:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23394a125fa3ace0c47a6fe34f4086b4d3ba5588
Validity
Not Before: Jan 1 11:04:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6ce5662b48034dc85ce2472cb99cab2b5bb6ac83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:e8:54:b9:a2:5b:22:4c:c3:2e:03:39:08:92:
ab:54:b1:91:0c:76:16:63:9f:2f:cf:34:cd:dd:b5:
d1:8a:ad:cf:cc:cb:70:4f:9e:c0:56:9a:ac:d2:8c:
80:90:c5:53:4b:c4:1d:8b:75:83:37:fd:52:b0:97:
05:29:f6:9a:77:11:02:f3:35:37:1b:c9:75:ca:1f:
f9:3e:5f:a5:ba:48:c4:e0:eb:a9:6c:89:bf:7a:42:
40:d6:14:0d:17:50:e7:9f:8c:a0:f2:92:3e:4f:b5:
ce:22:f2:9e:a8:a6:ef:bd:52:3a:ac:e1:ea:cc:f3:
70:cc:ed:ce:ad:de:b1:d4:99:fd:35:7b:2d:df:82:
44:6f:b2:8c:71:c9:0d:78:41:6b:bb:e8:5b:fd:ce:
04:fd:b5:bc:d9:5c:54:27:aa:16:e4:74:27:b8:e2:
51:bc:81:7f:eb:54:18:3a:54:cd:c9:d2:8d:e5:9a:
d9:89:7b:d5:9a:07:b9:f4:3e:6f:49:a9:77:9e:11:
4a:25:5c:f0:69:f4:d4:dc:2d:9a:a4:a3:a9:9a:a3:
5a:cd:5d:8e:bd:d5:03:c4:f2:96:69:70:57:7c:fb:
1f:35:ec:f7:a2:b0:34:1b:f4:8a:0e:3c:48:14:ee:
fb:be:8d:d8:5b:74:a1:c4:f6:d8:cc:d2:a2:c6:55:
ff:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:E5:66:2B:48:03:4D:C8:5C:E2:47:2C:B9:9C:AB:2B:5B:B6:AC:83
X509v3 Authority Key Identifier:
keyid:23:39:4A:12:5F:A3:AC:E0:C4:7A:6F:E3:4F:40:86:B4:D3:BA:55:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IzlKEl-jrODEem_jT0CGtNO6VYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/bOVmK0gDTchc4kcsuZyrK1u2rIM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/IzlKEl-jrODEem_jT0CGtNO6VYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.112.192.0/19
77.111.64.0-77.111.111.255
93.88.192.0/20
109.61.0.0/17
IPv6:
2a01:be00::/32
Signature Algorithm: sha256WithRSAEncryption
53:9b:ee:a2:00:c5:16:c3:8c:c8:b8:4d:f4:b3:5d:35:28:1a:
7f:7a:0e:ab:cb:c2:10:08:f2:29:22:eb:e4:0b:c3:b2:de:c3:
2b:61:ae:79:a2:39:a6:22:49:86:76:d8:70:65:93:4a:5a:33:
46:83:5c:0e:fb:60:2e:a8:02:65:96:22:12:a6:f2:2e:9e:99:
34:aa:3a:b9:2e:e9:eb:70:b5:69:4e:47:09:9b:b7:db:f2:01:
7f:3b:42:46:19:81:e5:b9:77:f3:c3:32:bf:04:a4:19:55:44:
a5:57:ef:44:1b:09:5d:b9:04:cd:bb:2c:0d:fc:f4:01:de:ab:
51:44:ff:90:6e:43:e2:da:b8:7c:32:f6:98:8d:63:9d:e8:09:
eb:15:38:eb:d9:95:f1:b7:85:e1:50:bf:9b:cd:8e:89:c8:f9:
4a:92:11:21:16:19:5d:e9:f6:99:ce:4c:e4:26:d6:11:bf:e5:
ba:a0:e2:e2:78:a3:46:37:8e:30:00:6d:d6:b6:48:d4:32:16:
fa:91:91:7d:b8:8a:fe:ec:56:e1:8d:03:dd:bf:cb:89:19:c6:
ef:51:61:91:cc:90:16:06:8c:a5:2c:e7:f3:36:3b:7e:71:09:
ce:3c:e8:c4:31:e7:60:d6:77:32:76:81:29:b3:36:84:74:ec:
85:a3:ed:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:39 2024 by rpki-client on console-fra.rpki-client.org