Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/osdN0PW6yQ-FR5swEvNHF9tMa0I.roa
File: osdN0PW6yQ-FR5swEvNHF9tMa0I.roa (raw, json)
Hash identifier: 4fotn86Vlm+2YrMX9ohDCq9iOzDyYE1qQBs9xofGsCM=
Subject key identifier: A2:C7:4D:D0:F5:BA:C9:0F:85:47:9B:30:12:F3:47:17:DB:4C:6B:42
Certificate issuer: /CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Certificate serial: 0184A4E92F361F7DBA126A1D70F8857D048B
Authority key identifier: 5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/osdN0PW6yQ-FR5swEvNHF9tMa0I.roa
Signing time: Wed 23 Nov 2022 14:34:16 +0000
ROA not before: Wed 23 Nov 2022 14:34:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 52000
IP address blocks: 195.246.110.0/24 maxlen: 24
37.44.196.0/23 maxlen: 23
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:a4:e9:2f:36:1f:7d:ba:12:6a:1d:70:f8:85:7d:04:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Validity
Not Before: Nov 23 14:34:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a2c74dd0f5bac90f85479b3012f34717db4c6b42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:27:1b:f2:11:1d:f5:0f:06:b1:08:73:83:74:
06:c4:0a:4f:83:5c:18:56:3d:8c:aa:bb:e3:50:ea:
ef:56:3c:cf:41:da:02:86:ba:7b:f7:c2:48:fb:66:
5e:4b:9d:92:9d:f7:e1:49:87:ec:4c:e8:8a:9e:b8:
f2:ea:49:7d:c4:bb:67:0c:53:b0:2d:83:be:ef:ba:
68:d8:d0:10:21:4b:9e:18:c1:13:6a:06:bc:8c:f6:
e3:8e:86:15:68:b3:d9:5f:af:72:02:c7:1d:97:33:
1b:7a:a1:a8:f8:ee:c9:c9:91:0a:df:d1:64:02:0e:
9f:e2:ba:46:94:00:50:54:1d:4d:46:99:56:d7:87:
22:27:07:20:61:ff:f2:18:b0:5e:4c:d3:b2:b6:e3:
1c:d4:44:2e:f3:af:ea:d4:92:a9:3b:4d:39:f0:1a:
8d:73:59:dd:4e:68:96:b1:4e:94:98:1c:68:da:37:
5a:6e:9b:a8:f7:87:3f:0c:a5:ac:a4:9f:6d:d1:db:
be:5e:79:79:18:70:8c:51:48:e1:f3:30:d5:6d:fc:
a0:c1:a6:0d:03:1c:0b:24:6d:0b:20:4c:00:2f:db:
7b:52:f7:f5:64:cd:dd:0e:69:88:d1:dd:a7:05:17:
2a:30:4d:cf:0f:1d:45:52:b1:db:75:30:9c:fe:6c:
0d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:C7:4D:D0:F5:BA:C9:0F:85:47:9B:30:12:F3:47:17:DB:4C:6B:42
X509v3 Authority Key Identifier:
keyid:5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/osdN0PW6yQ-FR5swEvNHF9tMa0I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.44.196.0/23
195.246.110.0/24
Signature Algorithm: sha256WithRSAEncryption
62:0a:23:3b:a8:75:61:db:13:2b:09:b2:b1:c6:de:ed:42:ea:
3e:00:f6:c3:b4:89:04:2c:d5:90:39:46:c3:6a:d2:da:58:92:
e6:00:dd:59:9a:ae:ad:9d:b8:79:f2:7b:e1:cb:b2:78:56:71:
a8:4b:8d:ed:7d:e1:e7:2d:71:c7:cd:05:92:34:bc:ca:64:fe:
20:a9:de:30:7a:41:3f:3a:b4:70:53:7b:04:a3:68:6f:2c:cd:
4d:04:a5:49:76:71:9b:ae:fa:a4:7b:b6:34:e5:33:56:bc:f0:
d6:c1:3f:b4:15:e0:40:bf:f3:f6:30:12:70:1d:0e:07:21:b9:
21:b0:44:36:74:f9:d3:f1:32:92:1b:21:a1:17:80:e1:65:15:
8d:55:15:47:a2:61:7a:c8:74:e3:0f:3f:24:ef:fb:7b:52:fb:
d2:e0:21:85:4f:90:c9:a8:b2:6a:ab:8b:19:f2:99:6b:77:d3:
b5:7d:92:72:7d:e9:a8:41:29:02:e2:d3:62:b0:39:a4:21:89:
31:c3:b7:a2:3e:16:72:80:30:1f:65:9f:ad:d7:75:dd:de:57:
c5:2f:3a:91:ef:a4:dd:f6:55:c8:78:05:10:7e:04:42:b4:fc:
15:55:a9:cb:39:91:b6:3f:7e:3a:79:a5:41:e1:0b:14:f0:3c:
77:9a:f7:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:47 2024 by rpki-client on console-fra.rpki-client.org