Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/NmeNQjh94RZPJVQaXfNvRy2is1g.roa
File: NmeNQjh94RZPJVQaXfNvRy2is1g.roa (raw, json)
Hash identifier: TYeNkKc97qfwV/C9bjqgr6LKeeE1xYhxj5Dpbv9FA7A=
Subject key identifier: 36:67:8D:42:38:7D:E1:16:4F:25:54:1A:5D:F3:6F:47:2D:A2:B3:58
Certificate issuer: /CN=b404cc0e038eb0e697ec6e7ae49d0286146e0c1a
Certificate serial: 018BA55FB9979FD35392BDEE5EFBD26B2D73
Authority key identifier: B4:04:CC:0E:03:8E:B0:E6:97:EC:6E:7A:E4:9D:02:86:14:6E:0C:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tATMDgOOsOaX7G565J0ChhRuDBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/NmeNQjh94RZPJVQaXfNvRy2is1g.roa
Signing time: Mon 06 Nov 2023 16:03:15 +0000
ROA not before: Mon 06 Nov 2023 16:03:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58026
IP address blocks: 65.111.0.0/19 maxlen: 19
104.167.16.0/20 maxlen: 20
104.207.32.0/19 maxlen: 19
45.78.80.0/20 maxlen: 20
45.3.32.0/19 maxlen: 19
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:a5:5f:b9:97:9f:d3:53:92:bd:ee:5e:fb:d2:6b:2d:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b404cc0e038eb0e697ec6e7ae49d0286146e0c1a
Validity
Not Before: Nov 6 16:03:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=36678d42387de1164f25541a5df36f472da2b358
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:bb:15:ab:c8:14:df:8c:01:4a:eb:75:50:d5:
f9:22:ce:5d:e2:60:ec:06:58:ba:86:27:60:a3:1f:
0c:05:cb:86:0c:db:9f:e9:01:72:7b:26:0f:c4:47:
1d:a4:30:db:1c:b8:5b:7f:96:27:29:d5:c6:b6:55:
08:bf:46:8f:22:cb:c4:a6:ad:e2:60:33:45:33:5b:
08:2a:5d:35:3c:60:44:17:80:16:dc:2d:ec:8e:b0:
2f:fc:fe:88:18:ac:3c:b8:00:a4:1c:f5:3a:a3:9a:
6b:21:70:57:02:a1:94:fb:37:1b:95:54:7c:ad:14:
48:4a:07:31:5d:d2:96:34:96:bf:ef:23:94:db:f5:
eb:61:88:21:b0:1e:14:f6:e6:d4:ed:fa:72:7c:fa:
1d:62:d4:fa:cd:4c:51:ec:de:2c:4f:e0:28:8b:fc:
d9:e9:f8:54:c8:a5:0d:e6:0e:e6:1c:24:6f:04:37:
ed:1a:06:94:80:63:ee:2e:eb:1c:37:df:2e:0f:c1:
49:43:bb:a9:38:94:27:92:d2:94:87:91:b9:75:3a:
6f:f5:93:85:71:8a:27:a9:6c:ba:ec:f5:09:c6:ed:
70:8c:d5:d1:6a:da:1d:d5:cb:b3:7d:8e:73:cb:5c:
a5:86:38:cd:d7:9b:83:1c:63:45:7a:1d:eb:93:8d:
87:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:67:8D:42:38:7D:E1:16:4F:25:54:1A:5D:F3:6F:47:2D:A2:B3:58
X509v3 Authority Key Identifier:
keyid:B4:04:CC:0E:03:8E:B0:E6:97:EC:6E:7A:E4:9D:02:86:14:6E:0C:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tATMDgOOsOaX7G565J0ChhRuDBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/NmeNQjh94RZPJVQaXfNvRy2is1g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/tATMDgOOsOaX7G565J0ChhRuDBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.3.32.0/19
45.78.80.0/20
65.111.0.0/19
104.167.16.0/20
104.207.32.0/19
Signature Algorithm: sha256WithRSAEncryption
9c:a0:a4:d3:e7:ae:c5:54:90:d6:4e:93:28:e0:85:96:bf:3e:
25:ca:cd:20:f1:37:33:2e:ee:26:42:93:63:5f:36:93:1d:b5:
6f:e0:02:72:f4:5e:5b:67:42:29:68:e6:db:fd:34:b9:1c:12:
dd:7f:17:9e:4c:7c:9d:c4:b0:ec:d2:d3:7e:e2:b5:cd:7c:d6:
34:f1:85:ca:3d:c9:c9:35:3f:ac:29:14:b8:ff:96:65:2b:32:
13:f2:40:95:25:28:73:4e:26:b0:61:ae:e4:cd:b4:9f:05:c4:
28:1e:aa:b8:6e:8d:83:d0:3b:7b:85:e1:63:e8:cb:5d:1b:f8:
84:d6:22:f5:76:f1:4b:6b:fd:0b:94:3a:ae:45:1c:a9:9a:2d:
e5:bf:98:01:43:2e:0b:3e:dc:3c:ef:fe:75:54:26:c6:08:c0:
c0:c1:ff:36:6c:a5:43:e1:d6:6f:90:29:55:35:21:c4:23:de:
7e:78:fe:d0:c6:67:6c:45:ac:5a:32:f0:3d:46:6c:3a:9d:01:
95:35:7e:50:64:57:c1:91:10:ba:c9:b7:1b:d7:3d:d2:87:97:
49:d9:b4:db:5b:cf:0c:ba:c0:ba:d4:fb:a6:7d:fc:d9:b5:5b:
3b:bc:ec:4a:85:a6:5b:d4:d5:7d:2e:a2:33:fb:23:57:c0:c3:
ef:84:62:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:55 2024 by rpki-client on console-ams.rpki-client.org