Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/bGUm7bi4sgT1enYdHGTNeXDMrV4.roa
File: bGUm7bi4sgT1enYdHGTNeXDMrV4.roa (raw, json)
Hash identifier: HPZw+j0oCtEdSrmovXtsw7W0eqKPwwUPS0RfQePaTiU=
Subject key identifier: 6C:65:26:ED:B8:B8:B2:04:F5:7A:76:1D:1C:64:CD:79:70:CC:AD:5E
Certificate issuer: /CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Certificate serial: 039B40ED
Authority key identifier: 5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/bGUm7bi4sgT1enYdHGTNeXDMrV4.roa
Signing time: Sat 01 Jan 2022 14:07:02 +0000
ROA not before: Sat 01 Jan 2022 14:07:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35913
IP address blocks: 94.231.218.0/24 maxlen: 24
94.231.217.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60506349 (0x39b40ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Validity
Not Before: Jan 1 14:07:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6c6526edb8b8b204f57a761d1c64cd7970ccad5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e4:37:ce:31:97:eb:3c:dc:4e:67:05:fe:97:
ef:bb:47:ec:83:63:23:16:45:6d:00:bc:82:e5:d3:
44:63:fa:5c:66:a5:7a:97:ea:c6:20:cf:93:49:0b:
b7:ca:fe:1b:f0:26:cf:83:8b:02:c8:83:5e:83:4a:
dc:ce:ed:b2:d2:93:24:d8:5f:3b:96:fd:71:93:32:
f5:96:d7:7f:05:dc:2f:0d:8d:4a:53:05:52:ff:ef:
e2:b8:c4:20:92:60:f6:9b:13:75:70:18:0e:ca:d8:
8f:88:48:b8:46:b7:35:a4:75:7e:08:21:82:51:8b:
dc:94:c7:a9:f2:56:4e:f5:0a:74:3c:bb:79:24:3c:
0b:51:42:f7:d3:9c:e5:7f:62:56:08:14:82:b3:30:
49:1d:7f:17:37:06:50:b2:b4:51:aa:85:8c:91:a2:
06:95:e3:5a:db:62:7f:04:6d:e5:c6:b7:fc:af:cc:
be:f7:8f:08:0d:bf:a9:d8:29:f2:41:48:96:09:6f:
26:87:f1:27:92:c2:47:2d:f6:5f:13:71:d9:8d:d8:
14:9e:da:67:a9:d1:6f:eb:fb:72:00:11:ee:81:d8:
30:7b:74:da:4e:13:dd:2a:78:be:a2:eb:8e:da:b8:
d9:e5:1f:d2:16:dd:5c:ea:21:fe:2f:6f:02:45:3a:
fa:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:65:26:ED:B8:B8:B2:04:F5:7A:76:1D:1C:64:CD:79:70:CC:AD:5E
X509v3 Authority Key Identifier:
keyid:5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/bGUm7bi4sgT1enYdHGTNeXDMrV4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.231.217.0-94.231.218.255
Signature Algorithm: sha256WithRSAEncryption
ad:82:fc:7d:01:d3:bc:9f:c4:d9:4f:b2:7f:bf:91:9b:71:de:
1a:8c:4b:6a:2a:e1:2a:3e:99:2d:ad:ae:cd:29:4a:45:ac:51:
b3:94:cc:91:2e:1f:09:a4:64:e4:4a:9e:50:85:54:04:99:f1:
a5:88:c4:bc:35:1d:87:3d:12:0e:e7:23:47:e6:b4:5d:a2:ec:
6a:86:e5:bc:14:b3:3c:3a:18:6c:ba:e4:4f:ab:1e:83:6a:c2:
d7:8f:ff:ce:60:30:ea:79:84:0e:35:26:2f:c1:3c:e1:1a:c1:
78:32:1b:8c:8f:9a:07:37:66:d6:fe:ca:37:63:b2:df:f4:5a:
be:aa:f8:89:12:56:92:cd:b5:2d:27:c0:91:4c:73:70:b1:11:
e1:05:fe:41:5c:98:dc:76:25:cf:d2:1c:d3:8e:24:2e:b2:06:
49:e9:89:e1:f2:84:8a:e8:ea:c1:aa:68:99:0c:12:83:18:be:
52:4d:2e:d0:c5:68:ab:fc:95:cb:1a:a1:09:ac:59:34:ff:0c:
8d:13:b3:a8:b8:5e:74:76:f2:d9:d5:cb:a6:41:17:e5:eb:9c:
ba:89:88:11:c7:d4:e8:2a:b0:82:86:a4:6a:04:94:d5:8a:a9:
6d:e0:7a:4c:44:71:e1:b2:eb:ae:86:74:aa:fa:90:2b:10:e3:
7d:b9:27:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:25 2024 by rpki-client on console-ams.rpki-client.org