Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/6d9359-afef-4535-9c93-f33d3bb36484/1/OqYJ8ttvMCjOrFs4wgCYU-VzZno.roa
File: OqYJ8ttvMCjOrFs4wgCYU-VzZno.roa (raw, json)
Hash identifier: omB8DmQqzqgxLQ1LJx1ujQPHR7Qa+A9gxZISNNfEGMM=
Subject key identifier: 3A:A6:09:F2:DB:6F:30:28:CE:AC:5B:38:C2:00:98:53:E5:73:66:7A
Certificate issuer: /CN=529c273098b52768ca0e44a3a2c16efed4a65ca0
Certificate serial: 018EE131BDE1BF894F0488CC31CAF299184A
Authority key identifier: 52:9C:27:30:98:B5:27:68:CA:0E:44:A3:A2:C1:6E:FE:D4:A6:5C:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UpwnMJi1J2jKDkSjosFu_tSmXKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/6d9359-afef-4535-9c93-f33d3bb36484/1/OqYJ8ttvMCjOrFs4wgCYU-VzZno.roa
Signing time: Mon 15 Apr 2024 09:58:37 +0000
ROA not before: Mon 15 Apr 2024 09:58:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59729
IP address blocks: 78.136.248.0/24 maxlen: 24
78.136.249.0/24 maxlen: 24
78.136.250.0/24 maxlen: 24
78.136.251.0/24 maxlen: 24
78.136.252.0/24 maxlen: 24
78.136.253.0/24 maxlen: 24
78.136.254.0/24 maxlen: 24
88.204.45.0/24 maxlen: 24
88.204.46.0/24 maxlen: 24
88.204.47.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:e1:31:bd:e1:bf:89:4f:04:88:cc:31:ca:f2:99:18:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=529c273098b52768ca0e44a3a2c16efed4a65ca0
Validity
Not Before: Apr 15 09:58:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3aa609f2db6f3028ceac5b38c2009853e573667a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:48:54:96:52:3c:c3:ae:8e:a2:e2:88:ba:86:
64:bd:c1:ee:81:03:57:bf:a2:cb:e2:5b:81:42:a4:
e7:76:6e:1d:ce:81:31:a1:44:75:e7:28:5a:24:0b:
05:3c:fd:7d:a1:f9:b4:af:f7:c1:17:77:14:5c:4b:
fd:67:ff:51:92:56:53:7a:96:14:e1:8a:8c:b8:f9:
c5:fc:5e:4a:b1:a9:c6:9d:d7:ee:3e:04:a9:23:58:
65:da:7b:d9:e5:7f:a5:c2:ad:bc:e5:a3:61:40:28:
bf:74:e1:9d:9a:b0:7e:c6:a3:2e:e7:2c:70:47:87:
f7:ad:31:08:68:66:25:17:41:cd:b1:5c:5c:e9:9e:
67:bb:59:3f:27:88:66:fd:23:d3:c0:85:83:72:98:
49:91:43:b2:aa:9c:05:8c:fc:1e:86:f6:8d:3f:f9:
a4:2d:5d:b2:52:11:ca:68:ae:4c:5e:a0:79:8c:9e:
55:95:08:1d:10:80:55:0a:64:d5:19:31:04:7f:f5:
75:f9:31:ca:67:f4:d6:fe:cb:c4:a1:5a:52:5b:74:
ec:bd:66:a5:d4:0e:bf:d3:71:23:9b:7c:85:df:23:
a3:13:9c:59:32:4c:92:f5:10:85:7b:4d:e9:9f:74:
d3:c7:b2:64:eb:9a:12:a8:2e:ae:9e:50:89:cb:f2:
1d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:A6:09:F2:DB:6F:30:28:CE:AC:5B:38:C2:00:98:53:E5:73:66:7A
X509v3 Authority Key Identifier:
keyid:52:9C:27:30:98:B5:27:68:CA:0E:44:A3:A2:C1:6E:FE:D4:A6:5C:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UpwnMJi1J2jKDkSjosFu_tSmXKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6d9359-afef-4535-9c93-f33d3bb36484/1/OqYJ8ttvMCjOrFs4wgCYU-VzZno.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6d9359-afef-4535-9c93-f33d3bb36484/1/UpwnMJi1J2jKDkSjosFu_tSmXKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.136.248.0-78.136.254.255
88.204.45.0-88.204.47.255
Signature Algorithm: sha256WithRSAEncryption
68:fa:6f:f6:98:a3:56:ea:31:1b:ae:56:4a:f2:3f:7e:a3:8a:
aa:c3:2e:63:c7:48:6b:dc:08:31:e2:fc:4d:33:72:17:6b:66:
1c:ed:e8:e8:37:7d:0f:8d:05:48:b5:a0:0a:82:dd:41:07:eb:
d2:48:a4:1d:e5:44:4f:44:04:ab:67:0c:af:6f:8f:3d:0f:d7:
2e:81:b7:34:2f:3f:43:18:ed:34:21:b0:ad:f5:e3:f6:6a:c8:
fd:f5:19:1e:c4:ab:5a:54:f8:d9:cc:cb:79:52:cc:45:3b:55:
24:7f:ab:07:3c:0d:75:a7:f5:1e:8f:1e:71:7a:39:fd:0e:6d:
44:18:c7:59:ae:33:a6:8d:ae:2a:98:f2:3a:b9:e5:3c:04:12:
57:da:28:05:52:a2:5e:3d:e9:b8:bd:9c:c0:34:d0:40:4b:27:
e7:02:43:0d:f2:aa:b0:46:42:e0:85:fa:b7:40:5e:d1:39:61:
06:25:df:71:fc:0a:52:37:13:78:92:8d:48:67:15:19:c8:f0:
78:50:4f:13:2d:cc:c3:ed:27:33:f8:df:0d:d7:e2:42:b3:18:
96:54:34:40:e7:91:73:2b:6b:c7:8e:b8:b1:5d:81:06:af:ed:
ad:7f:b7:72:06:4a:3e:db:5f:12:a2:4e:3f:da:7b:03:c8:62:
c7:ab:75:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 12:10:33 2024 by rpki-client on console-fra.rpki-client.org