Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/a-7Fwc5xHcxLkl0h3K9HGTtDLXs.roa
File: a-7Fwc5xHcxLkl0h3K9HGTtDLXs.roa (raw, json)
Hash identifier: lKvCtlItoUNmSihROSfXCzXAVCc34XOrghgjrkhg3Oc=
Subject key identifier: 6B:EE:C5:C1:CE:71:1D:CC:4B:92:5D:21:DC:AF:47:19:3B:43:2D:7B
Certificate issuer: /CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Certificate serial: 01856F1DC7D3F14B633C87176462D8F9C973
Authority key identifier: 5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/a-7Fwc5xHcxLkl0h3K9HGTtDLXs.roa
Signing time: Sun 01 Jan 2023 20:55:00 +0000
ROA not before: Sun 01 Jan 2023 20:55:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57271
IP address blocks: 85.202.87.0/24 maxlen: 24
81.16.141.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:1d:c7:d3:f1:4b:63:3c:87:17:64:62:d8:f9:c9:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Validity
Not Before: Jan 1 20:55:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6beec5c1ce711dcc4b925d21dcaf47193b432d7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:74:a9:58:05:ad:85:0e:3a:4b:cf:fe:46:ff:
6d:93:c7:b1:94:7b:71:53:fd:d1:62:cd:c4:03:d4:
5f:99:14:fc:4c:74:0b:68:bb:77:84:58:d9:d4:da:
c1:d2:d5:ba:90:f2:d3:fc:7c:14:fd:98:43:86:5f:
bf:6d:10:d8:95:8a:b1:3b:79:68:b9:81:1c:bf:63:
d2:27:a3:05:cf:24:d4:43:15:57:1a:ab:3e:d1:74:
0e:e5:de:f6:b9:07:79:93:6a:b7:cb:1e:72:d1:bb:
f7:91:de:79:f0:fe:8a:84:9f:1a:6b:3e:21:b0:94:
94:2a:9d:b6:93:ea:fd:77:ce:9a:6c:45:fd:ad:15:
b1:82:b1:cb:49:79:32:91:07:0a:9f:ab:91:9f:b2:
8f:11:cf:46:94:eb:af:d3:72:af:5e:38:75:ac:f2:
2a:95:76:c0:49:57:93:d5:e0:16:c5:f4:62:32:3a:
88:da:19:d4:0a:17:e1:78:8d:1e:70:0e:71:20:6a:
e9:ef:1b:fb:ca:e0:38:29:57:a0:9a:a1:b6:0a:8c:
df:ef:1e:15:44:7a:63:ed:8c:0a:a2:61:ad:6e:f5:
c7:7c:69:11:8e:c5:33:51:19:a7:59:bd:94:01:e5:
54:2e:24:b6:35:94:b9:27:77:48:1d:16:07:2a:28:
e0:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:EE:C5:C1:CE:71:1D:CC:4B:92:5D:21:DC:AF:47:19:3B:43:2D:7B
X509v3 Authority Key Identifier:
keyid:5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/a-7Fwc5xHcxLkl0h3K9HGTtDLXs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.16.141.0/24
85.202.87.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:8a:46:5b:e1:6c:0e:7f:15:08:42:dc:50:7f:84:1f:4d:5b:
57:a2:b5:6a:22:7b:ec:3b:81:a6:96:c1:77:3d:1a:d8:33:4c:
6f:c2:37:6e:00:7b:9b:a5:f7:de:a5:2a:75:e2:c3:49:39:24:
bb:0b:42:73:24:15:3d:a3:fb:8a:30:09:a7:ae:fe:32:59:c6:
54:9e:a9:bb:4d:c0:f6:16:45:09:53:cf:49:b3:bb:1e:f4:bf:
b3:21:8d:48:86:31:66:5b:72:2e:b0:0b:79:f3:66:6a:b0:f9:
7b:9d:16:15:16:a1:fb:93:00:bb:97:74:f7:ed:f9:cb:44:4e:
0a:d1:63:7e:36:1d:25:da:3b:8d:6d:8f:e0:47:c3:68:fb:b1:
48:33:67:1f:1f:b1:ad:e7:4e:a9:19:0c:3e:04:a6:35:d7:87:
6c:b9:21:f2:71:54:8c:ef:6e:13:02:7a:23:f0:72:27:77:b1:
35:81:b1:40:26:67:dc:c1:84:11:af:4c:9b:f8:49:ff:36:83:
e9:2d:13:39:c0:65:27:9b:27:24:cc:78:be:a2:9c:73:3d:0d:
31:92:cd:e1:69:0c:95:b2:0e:21:71:72:ef:e8:02:35:28:a3:
8a:f0:38:0f:4e:27:4b:d5:b6:33:86:eb:1e:12:4b:cf:aa:c1:
59:7a:da:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:47 2024 by rpki-client on console-fra.rpki-client.org