Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/ChfmQnCJRGJOo96PMzeSSXksLZA.roa
File: ChfmQnCJRGJOo96PMzeSSXksLZA.roa (raw, json)
Hash identifier: I9bP5ZXDEadbYe6uxtSpm+6o46Z4w+m28AgkRTgFvxE=
Subject key identifier: 0A:17:E6:42:70:89:44:62:4E:A3:DE:8F:33:37:92:49:79:2C:2D:90
Certificate issuer: /CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Certificate serial: 041C6143
Authority key identifier: 5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/ChfmQnCJRGJOo96PMzeSSXksLZA.roa
Signing time: Fri 18 Feb 2022 21:02:06 +0000
ROA not before: Fri 18 Feb 2022 21:02:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 174
IP address blocks: 94.231.218.0/24 maxlen: 24
94.231.217.0/24 maxlen: 24
94.231.216.0/24 maxlen: 24
109.94.222.0/24 maxlen: 24
109.94.221.0/24 maxlen: 24
109.94.220.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68968771 (0x41c6143)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Validity
Not Before: Feb 18 21:02:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0a17e642708944624ea3de8f33379249792c2d90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d6:30:9e:70:49:47:17:f2:69:65:1d:02:0b:
5e:dd:9a:15:c0:0d:55:6a:6a:6d:be:41:d5:b0:e0:
43:c5:b9:00:84:80:ef:80:cf:80:79:94:15:c4:69:
be:e8:ef:f5:76:bf:0a:9d:16:68:71:1c:0a:d8:7e:
8e:e0:64:ab:d6:c5:ba:63:b3:9a:ff:0b:4c:c4:ca:
1d:74:32:d1:06:ea:9f:ac:1b:33:93:22:5f:e9:5a:
75:c9:24:a7:a9:7a:15:f0:9a:56:24:fd:ea:f6:54:
6b:1f:15:7b:2d:50:8f:7d:4c:8f:4d:94:12:2c:d3:
89:f6:ae:7e:9c:3d:95:c5:76:99:2a:27:b7:1e:7f:
6d:e7:9d:b5:31:38:7c:c5:d6:e6:0d:06:13:b8:00:
45:20:e5:5d:64:1f:82:5f:bf:f7:0f:1a:65:4a:1b:
d1:2d:f0:f4:cc:c9:c1:02:d4:4c:8c:2f:84:02:db:
53:49:32:9c:31:87:88:54:02:22:69:bc:0d:b5:05:
c9:93:0f:7d:7a:ec:8f:8f:a0:89:fa:5d:ca:35:5d:
43:9d:b1:80:57:9b:2f:2e:65:02:b7:07:c8:87:04:
42:db:07:d1:fa:16:5d:37:da:e6:f9:6c:e1:16:02:
47:c8:b8:5d:a7:c1:32:8a:79:b5:a1:22:c2:09:6a:
f1:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:17:E6:42:70:89:44:62:4E:A3:DE:8F:33:37:92:49:79:2C:2D:90
X509v3 Authority Key Identifier:
keyid:5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/ChfmQnCJRGJOo96PMzeSSXksLZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.231.216.0-94.231.218.255
109.94.220.0-109.94.222.255
Signature Algorithm: sha256WithRSAEncryption
10:d7:c5:04:e6:5d:9b:f3:a3:ad:13:63:da:02:20:74:10:72:
97:82:65:78:91:a3:92:2a:05:32:f6:fa:a0:71:80:1f:a6:a5:
2e:ff:6b:23:00:82:ee:a1:15:5f:b3:fc:06:bc:24:f8:93:ff:
d4:38:c5:97:be:67:ed:13:3b:fc:47:18:e0:27:9f:8d:0e:85:
db:4f:f8:df:a0:ac:09:f5:d6:d7:08:f0:16:12:ca:e1:e7:e5:
47:15:16:f0:c6:d8:92:f9:1a:4b:d0:a5:db:2b:6a:47:50:02:
d0:69:8f:80:8e:15:b5:7b:cd:e2:3f:c2:d6:c7:76:9a:78:ba:
30:16:16:d8:7f:92:74:b4:c7:33:c3:c2:1f:89:79:7c:ea:f2:
8d:b3:11:2c:7e:d4:97:33:09:df:96:a1:ca:bb:2a:fb:29:10:
bc:30:d4:66:84:f3:a3:e3:b3:a4:b6:9f:2c:50:08:61:7f:29:
50:45:c6:9d:7a:cf:b5:3f:c0:1a:50:1b:5f:6d:ec:8f:e9:ce:
c8:ee:c2:6a:ab:ba:f2:b2:1d:7e:42:c7:30:6c:0a:b9:1c:ae:
5c:27:b5:49:62:22:05:da:39:3a:bb:2c:43:23:c8:f9:e6:14:
ec:de:f9:2e:74:8c:cf:25:1c:b4:80:a5:ca:49:99:07:33:3f:
6b:a4:5a:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:34 2023 by rpki-client on console-fra.rpki-client.org