Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/k2C7BONUERInmkOQM30p9ZHgVEk.roa
File: k2C7BONUERInmkOQM30p9ZHgVEk.roa (raw, json)
Hash identifier: azSEhVXWaNVt1NervhWM2nouyEJBe35NoCR7lJyeIxI=
Subject key identifier: 93:60:BB:04:E3:54:11:12:27:9A:43:90:33:7D:29:F5:91:E0:54:49
Certificate issuer: /CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Certificate serial: 048BF03C
Authority key identifier: 5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/k2C7BONUERInmkOQM30p9ZHgVEk.roa
Signing time: Fri 01 Apr 2022 21:02:37 +0000
ROA not before: Fri 01 Apr 2022 21:02:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57271
IP address blocks: 85.202.87.0/24 maxlen: 24
85.235.82.0/24 maxlen: 24
37.44.198.0/24 maxlen: 24
81.16.141.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76279868 (0x48bf03c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Validity
Not Before: Apr 1 21:02:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9360bb04e3541112279a4390337d29f591e05449
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d3:ac:48:f3:5f:92:3f:d0:c6:50:3a:f9:3b:
12:18:48:79:5a:f2:00:33:66:9a:bc:d3:33:24:58:
6d:1d:31:5e:c0:01:95:ee:ee:dc:0f:30:df:50:61:
b3:12:80:0f:4d:5a:ad:05:90:dd:3a:be:25:5e:09:
dd:90:d0:07:36:e9:fb:f0:0d:1b:2c:a1:9a:fb:56:
ab:66:2c:9f:14:cb:8e:27:82:f4:e7:7b:e9:dd:67:
13:3c:c1:71:60:b5:3d:00:64:57:ff:f7:8c:bb:27:
bf:10:2b:7c:6a:94:87:17:8e:3f:d3:8d:58:ea:89:
d6:66:01:b4:6b:7b:b0:d6:9b:50:3e:7e:4a:5d:b4:
b3:b9:78:ee:5b:b6:bc:b8:41:ff:0c:8c:b6:81:f0:
ce:cf:b1:3f:d9:35:c4:d2:e4:eb:36:97:85:5f:f1:
07:79:ae:23:60:f5:fd:fb:c0:b7:87:38:d2:22:34:
b2:36:d4:53:b2:fa:d7:05:d3:0e:d6:19:49:3a:d8:
e3:81:15:94:1c:ef:84:9d:c1:4e:b3:13:af:2b:95:
89:35:56:f5:c0:97:bb:64:05:f3:d4:88:ce:e0:83:
0c:b7:20:42:6e:40:da:2b:f6:be:10:9d:0c:e3:ee:
59:c4:e1:6e:25:be:51:27:c4:57:4f:f5:29:a7:77:
22:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:60:BB:04:E3:54:11:12:27:9A:43:90:33:7D:29:F5:91:E0:54:49
X509v3 Authority Key Identifier:
keyid:5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/k2C7BONUERInmkOQM30p9ZHgVEk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.44.198.0/24
81.16.141.0/24
85.202.87.0/24
85.235.82.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:d8:85:17:6a:0d:90:c8:e5:a4:67:7c:b5:93:33:e4:65:61:
a7:51:b2:f9:83:bf:6d:e6:3e:02:60:07:62:42:e6:f1:73:1a:
03:7d:0b:83:d5:bf:09:43:76:0b:8e:37:bc:99:ba:4a:40:09:
51:79:6a:00:8e:1f:00:bf:f8:18:5d:15:03:83:a2:52:e9:60:
57:ce:1f:8f:6c:99:7b:49:a9:fd:c3:1d:3a:d3:4f:ec:96:6b:
c8:f5:80:a1:46:e0:9f:1b:6f:b5:61:35:09:36:ce:14:21:02:
b6:66:78:32:1d:ab:e2:54:da:00:2f:37:71:92:f0:e2:a1:13:
00:7b:2e:6c:28:eb:ea:32:e9:cc:e8:fd:58:32:52:a8:55:35:
7a:62:06:7d:b5:6f:31:cd:f1:1c:43:28:8b:9f:26:27:84:6f:
45:02:04:cc:43:25:f2:7a:a2:ad:58:f8:f0:31:9d:b9:db:4b:
6c:d6:e4:31:b0:c4:2b:04:18:33:9f:56:a5:4a:bb:cc:d5:75:
8b:e8:d5:e7:8f:c2:73:52:b9:ca:de:42:93:0f:42:d1:e8:eb:
a6:66:56:05:34:e8:59:aa:68:11:5f:e3:6c:31:f7:3f:47:dd:
2e:57:b6:29:77:91:72:50:85:66:41:b0:d2:73:ba:8d:46:cb:
bd:38:ef:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:47 2024 by rpki-client on console-fra.rpki-client.org