Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/4eEE_nNM-wdUn8_-l1HR8ZfXMBc.roa
File: 4eEE_nNM-wdUn8_-l1HR8ZfXMBc.roa (raw, json)
Hash identifier: y9qsTBqdz7O+wo3Yf3R1AKHkpacHFFGnDFS3TmoiOpQ=
Subject key identifier: E1:E1:04:FE:73:4C:FB:07:54:9F:CF:FE:97:51:D1:F1:97:D7:30:17
Certificate issuer: /CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Certificate serial: 0182D180801EA458AC32F528FC7A351F9DD3
Authority key identifier: 5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/4eEE_nNM-wdUn8_-l1HR8ZfXMBc.roa
Signing time: Wed 24 Aug 2022 20:17:15 +0000
ROA not before: Wed 24 Aug 2022 20:17:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44477
IP address blocks: 193.38.54.0/24 maxlen: 24
193.38.55.0/24 maxlen: 24
195.246.110.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:d1:80:80:1e:a4:58:ac:32:f5:28:fc:7a:35:1f:9d:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Validity
Not Before: Aug 24 20:17:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e1e104fe734cfb07549fcffe9751d1f197d73017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f6:b6:2e:0f:ae:e9:02:ab:15:e3:01:84:d7:
fa:86:15:6c:50:eb:a3:75:48:bd:cd:27:c7:7d:ac:
8b:55:d9:9a:61:c4:e1:bb:76:92:6a:9e:18:34:81:
cc:e9:73:d8:0d:27:25:29:a0:0f:e2:d0:69:80:2e:
ed:03:f6:1a:17:d6:25:c7:ea:f7:14:bd:74:d9:a9:
ac:af:cf:41:28:b3:e5:60:5c:60:11:e3:78:f8:b9:
83:61:43:5b:46:e4:80:b4:85:2f:d5:f9:06:4d:07:
43:c7:e2:b3:8a:83:32:68:2b:e9:5e:18:08:fc:1f:
b9:5d:ee:af:c7:1a:ca:f7:d0:e7:31:a6:05:37:99:
6a:3f:00:ee:28:60:8d:4c:c4:27:54:ff:ee:d7:5c:
72:c2:4d:af:dd:12:dc:6d:7b:d2:a0:0f:8c:53:0e:
35:b5:fb:e2:0f:05:67:42:4d:38:d5:05:32:ab:1a:
22:6b:b6:e9:97:bf:2b:51:24:b5:50:d9:ff:b1:09:
c4:e7:a9:5d:d3:73:29:56:fa:7b:ef:fd:79:78:be:
7f:40:0c:0b:72:2e:b3:ac:d8:96:d8:ee:a9:03:5f:
b9:53:07:c6:c0:92:30:5e:c8:c9:39:75:13:96:3c:
4a:65:f2:b3:a8:12:76:0c:3c:72:0d:07:95:7f:84:
50:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:E1:04:FE:73:4C:FB:07:54:9F:CF:FE:97:51:D1:F1:97:D7:30:17
X509v3 Authority Key Identifier:
keyid:5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/4eEE_nNM-wdUn8_-l1HR8ZfXMBc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.38.54.0/23
195.246.110.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:25:38:66:f1:32:17:9d:a8:4d:19:26:fb:a7:3b:dd:60:87:
25:7c:49:9f:34:3f:94:7c:29:20:1c:3a:b9:ee:81:22:52:af:
dc:f3:69:2d:57:c9:48:1d:26:9f:2b:59:2e:38:db:55:ec:92:
19:3d:76:a8:d3:09:2d:18:06:66:8d:3e:9f:75:fd:9a:83:4b:
66:32:8d:7f:c9:7d:c1:05:31:f0:e5:df:33:81:e1:6b:9a:63:
50:cf:89:1d:d1:bc:35:4d:b7:c8:b2:c1:8f:6d:b5:48:f3:26:
c0:74:9b:cf:5a:58:49:71:52:39:92:1f:b4:67:cc:1a:7e:f4:
bf:8e:36:eb:26:9e:1b:bf:2c:1d:ec:88:e8:dc:4c:61:63:43:
41:0b:56:2b:3c:62:8d:a5:b3:49:73:aa:0e:03:42:02:26:63:
e9:ed:7a:f5:4a:4c:f3:bd:a1:66:4b:5b:5a:ec:c7:2f:66:1a:
73:ec:ee:70:78:01:cb:15:ac:c0:f3:69:60:76:32:67:21:c6:
78:16:b7:7c:71:66:0c:2a:51:74:ac:5a:7a:fa:1a:26:d9:82:
a2:28:b7:01:40:06:10:c9:a1:cb:19:81:71:d7:d4:de:36:a2:
3d:43:04:33:99:14:36:b7:b8:5a:f2:12:d6:b1:a3:56:46:56:
98:39:67:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:47 2024 by rpki-client on console-fra.rpki-client.org