Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/els8-a2fKN6ucupnpwlV724H5xE.roa
File: els8-a2fKN6ucupnpwlV724H5xE.roa (raw, json)
Hash identifier: piypFd6hkC/rSYKNa5MhlpZ9My6DKrBI40f1/8mjgfo=
Subject key identifier: 7A:5B:3C:F9:AD:9F:28:DE:AE:72:EA:67:A7:09:55:EF:6E:07:E7:11
Certificate issuer: /CN=c6d18653fbfb6fd5732dc940c1d65d77ab0bbfa3
Certificate serial: 3431912F
Authority key identifier: C6:D1:86:53:FB:FB:6F:D5:73:2D:C9:40:C1:D6:5D:77:AB:0B:BF:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xtGGU_v7b9VzLclAwdZdd6sLv6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/els8-a2fKN6ucupnpwlV724H5xE.roa
Signing time: Sat 01 Jan 2022 10:01:14 +0000
ROA not before: Sat 01 Jan 2022 10:01:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61254
IP address blocks: 94.230.186.0/24 maxlen: 24
94.230.186.0/23 maxlen: 23
94.230.187.0/24 maxlen: 24
80.93.251.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 875663663 (0x3431912f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6d18653fbfb6fd5732dc940c1d65d77ab0bbfa3
Validity
Not Before: Jan 1 10:01:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7a5b3cf9ad9f28deae72ea67a70955ef6e07e711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e2:53:e8:43:e6:89:7d:b0:3d:23:84:b7:f6:
83:bf:87:48:3f:42:2f:81:7f:bc:54:c8:04:7c:f4:
a1:6d:fa:95:40:4b:3b:e6:66:ca:26:87:29:77:9d:
b1:fe:23:1a:4b:2f:6f:91:7c:5f:3e:e3:ba:95:9c:
cd:83:69:b6:fe:21:59:b1:5f:39:f2:25:71:48:05:
61:9e:2f:38:d6:87:ad:ed:21:30:dd:90:50:87:f0:
8b:21:92:41:9e:d0:77:e4:07:07:4f:5d:a2:b1:d1:
b5:d8:b7:dd:53:06:f2:b2:42:85:79:ee:0e:a5:b3:
9d:34:d8:fd:cb:f1:49:bc:d8:18:ba:a6:88:f7:11:
91:c1:b2:d1:dc:b4:2a:af:fb:99:52:76:2e:6c:80:
5e:12:2c:8e:19:56:92:0c:dd:bb:73:95:2d:2c:d5:
ea:7e:4f:40:ea:69:54:b2:6a:26:a3:8c:9e:3a:76:
43:64:4d:fa:66:c4:50:8a:d5:36:4d:ff:f3:53:c1:
a9:0e:5e:aa:63:bc:b6:fc:89:7f:bf:4e:2b:46:07:
dd:a7:0e:5b:e3:5c:ab:3d:f8:a9:87:97:a2:51:6c:
d4:2c:a3:11:48:d1:aa:99:66:5c:99:9c:df:d7:95:
a5:73:af:c4:43:84:7f:76:50:70:6c:e0:5f:32:bb:
39:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:5B:3C:F9:AD:9F:28:DE:AE:72:EA:67:A7:09:55:EF:6E:07:E7:11
X509v3 Authority Key Identifier:
keyid:C6:D1:86:53:FB:FB:6F:D5:73:2D:C9:40:C1:D6:5D:77:AB:0B:BF:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xtGGU_v7b9VzLclAwdZdd6sLv6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/els8-a2fKN6ucupnpwlV724H5xE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/xtGGU_v7b9VzLclAwdZdd6sLv6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.93.251.0/24
94.230.186.0/23
Signature Algorithm: sha256WithRSAEncryption
a5:08:24:a4:35:0e:de:00:0c:04:ab:91:01:66:77:f9:1c:af:
40:37:13:58:bd:1e:0a:a0:12:4b:74:3e:d8:85:20:13:52:11:
99:ee:80:ac:ea:a1:cd:a1:29:9b:3d:ff:0a:71:59:09:fb:5d:
59:ff:81:4d:53:e3:af:a2:d3:2e:6f:63:58:25:6f:a0:cd:60:
c3:f5:52:30:cc:74:df:fd:29:0e:cf:fc:1c:f9:37:56:b2:b2:
15:72:dd:ab:48:3e:32:32:11:10:55:23:7f:d6:00:d0:91:2b:
97:2c:8a:68:9f:a6:d6:e6:d0:ed:70:23:30:93:e4:82:c6:58:
42:4b:2d:35:75:22:78:c7:2c:a9:53:5a:db:51:d4:bc:0f:14:
1b:a0:1f:7d:d1:c5:cd:ca:7b:98:ff:32:26:f7:b0:1e:6d:5a:
bd:2f:a1:53:7f:dd:f7:ad:53:31:e8:11:79:49:1b:03:73:fe:
fa:0f:43:a1:2b:15:b9:53:04:02:c0:48:0d:79:00:29:16:e3:
fe:82:c0:fd:63:c9:ba:9c:bf:d0:be:d3:50:96:e0:d7:99:6e:
df:83:eb:40:76:5b:ff:a5:17:ed:64:9d:4d:86:8b:df:cb:a9:
df:4c:f5:76:6c:01:7f:bb:2d:1f:31:ed:a5:ee:91:6a:bf:3b:
52:6b:4d:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:02 2024 by rpki-client on console-fra.rpki-client.org