Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/9QqdSTl-DebjZBDV7QRrrcJSWIw.roa
File: 9QqdSTl-DebjZBDV7QRrrcJSWIw.roa (raw, json)
Hash identifier: sYiDhEDwxBlfAj9XG167hWpjMIYFn0Wjfr22HpaV5s0=
Subject key identifier: F5:0A:9D:49:39:7E:0D:E6:E3:64:10:D5:ED:04:6B:AD:C2:52:58:8C
Certificate issuer: /CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Certificate serial: 01853FD8FF7343DD751E0DA71DBF978BD6A0
Authority key identifier: 5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/9QqdSTl-DebjZBDV7QRrrcJSWIw.roa
Signing time: Fri 23 Dec 2022 16:37:43 +0000
ROA not before: Fri 23 Dec 2022 16:37:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14576
IP address blocks: 94.231.218.0/24 maxlen: 24
94.231.217.0/24 maxlen: 24
94.231.216.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:3f:d8:ff:73:43:dd:75:1e:0d:a7:1d:bf:97:8b:d6:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Validity
Not Before: Dec 23 16:37:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f50a9d49397e0de6e36410d5ed046badc252588c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:66:72:48:e3:fa:3e:2f:78:ac:80:5b:f4:84:
c9:f2:b3:8c:c5:25:08:7d:9f:ec:56:f1:b7:f0:a7:
69:be:c1:47:3e:6a:2a:ab:ac:e2:bd:00:7e:87:8a:
cb:ca:70:c6:66:2a:0a:ea:29:04:b9:f1:1a:33:63:
8d:a9:34:c9:78:81:09:fd:55:55:2f:1d:e4:79:8a:
f5:d7:50:e5:88:d6:cb:67:bf:6b:e5:5a:5f:ab:31:
8a:74:ff:56:1c:60:24:da:4c:9e:e0:6a:25:5e:5f:
28:97:20:da:ed:f7:5e:00:a2:00:86:17:5f:54:8e:
cd:72:a5:e1:60:6a:45:ac:0b:4a:56:d8:fe:24:93:
a1:19:63:a1:1e:8a:f9:7b:52:7a:4c:78:17:29:ff:
13:c1:70:ae:b3:ef:91:8a:f1:d7:6b:93:45:af:c1:
1a:88:50:e7:e7:2f:5e:56:9f:ce:1b:ff:eb:41:df:
f0:91:62:ce:24:19:1b:07:4b:ec:bf:ff:9b:84:cd:
95:ba:4c:7e:f6:e0:35:a8:b4:af:a1:e0:46:58:77:
7f:00:d5:94:45:3c:1e:5f:e5:cf:ad:f3:58:5e:f5:
0a:02:c2:5a:b7:83:f8:9c:13:f8:9c:6a:ea:fd:ee:
86:86:fb:26:38:ab:5c:07:e2:b0:b6:9a:99:a5:a0:
d6:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:0A:9D:49:39:7E:0D:E6:E3:64:10:D5:ED:04:6B:AD:C2:52:58:8C
X509v3 Authority Key Identifier:
keyid:5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/9QqdSTl-DebjZBDV7QRrrcJSWIw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.231.216.0-94.231.218.255
Signature Algorithm: sha256WithRSAEncryption
92:ef:01:3d:28:6f:b0:1e:75:00:3e:6a:0f:30:48:e9:0b:23:
b2:36:4f:58:7c:44:98:ba:de:38:4c:04:7d:2d:ef:b0:c5:bc:
8e:b5:ac:32:3b:e8:3a:bd:2c:7d:4d:38:8a:d8:2c:16:07:3a:
62:6e:33:71:27:09:cb:31:0a:88:36:cb:d0:f6:6c:a5:8b:3e:
6f:84:99:c4:49:11:5a:29:15:5c:3f:05:f9:0c:f0:bd:10:ae:
5c:7d:3c:cc:a7:77:07:dc:44:86:32:ed:b3:3c:51:4d:f2:06:
c7:df:ec:a7:19:79:82:e6:8e:f0:14:e3:98:1d:eb:b9:73:ff:
a2:a8:4c:5f:04:de:55:7b:bf:b3:77:b6:d7:8b:6a:64:dc:f8:
6e:1b:ba:53:5e:bc:67:6e:44:23:72:cd:12:c6:e8:3d:dd:54:
d9:21:94:cc:da:4e:69:d9:85:0b:38:d8:8c:25:bf:f4:55:29:
cd:1a:25:a1:38:2f:3c:31:72:3f:84:44:fb:e4:d4:40:aa:a7:
b4:a0:a5:4f:af:41:5b:e9:4e:10:d0:34:6f:2e:69:cf:18:c0:
ee:80:09:4c:d1:ad:fb:54:1b:56:e3:6f:d2:92:e3:42:db:51:
b7:4d:f8:93:84:5a:19:9e:44:6c:e9:a1:1b:11:7c:7c:d9:cf:
c0:a1:80:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:25 2024 by rpki-client on console-ams.rpki-client.org