Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/64fe7d-862d-4e1a-9fd0-06b41ef1398d/1/yW-6CoqPYl2tLOzlW5yC2QkXojk.roa
File: yW-6CoqPYl2tLOzlW5yC2QkXojk.roa (raw, json)
Hash identifier: NLxSWox2ppZg1v8RtBU60bIvzhRYuayEhCoQ5j/xOwA=
Subject key identifier: C9:6F:BA:0A:8A:8F:62:5D:AD:2C:EC:E5:5B:9C:82:D9:09:17:A2:39
Certificate issuer: /CN=2956584b70ce847c1a9b400548b14db031bedff2
Certificate serial: 018CB4E5F4C74180C4E88946554EBE4D525B
Authority key identifier: 29:56:58:4B:70:CE:84:7C:1A:9B:40:05:48:B1:4D:B0:31:BE:DF:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVZYS3DOhHwam0AFSLFNsDG-3_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/64fe7d-862d-4e1a-9fd0-06b41ef1398d/1/yW-6CoqPYl2tLOzlW5yC2QkXojk.roa
Signing time: Fri 29 Dec 2023 09:26:58 +0000
ROA not before: Fri 29 Dec 2023 09:26:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209371
IP address blocks: 195.24.232.0/24 maxlen: 24
188.93.141.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:b4:e5:f4:c7:41:80:c4:e8:89:46:55:4e:be:4d:52:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2956584b70ce847c1a9b400548b14db031bedff2
Validity
Not Before: Dec 29 09:26:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c96fba0a8a8f625dad2cece55b9c82d90917a239
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:df:67:05:f2:5b:8e:6e:a5:83:42:08:44:d8:
dd:00:74:da:00:3c:f7:88:4e:47:2c:46:83:00:ef:
11:e7:c7:bc:ce:6c:55:10:3a:7d:71:60:b0:06:ce:
56:ac:3a:96:20:cf:fa:3f:5a:91:82:81:8b:31:6c:
72:c4:43:00:aa:c9:21:fe:7f:ac:9d:ba:32:b5:bb:
8f:2e:71:59:4a:77:71:4c:41:14:eb:aa:6a:ac:9c:
36:ea:66:d8:49:b7:5b:e7:27:95:cc:01:4c:7d:05:
6b:1d:2b:34:cd:7a:81:ef:ab:af:8d:82:6f:18:f0:
08:06:c8:25:26:9b:13:66:7f:37:dc:e2:56:b7:8e:
db:74:ee:dc:22:df:3a:cd:f1:c2:9c:20:6d:8d:29:
59:30:ab:76:c7:8b:23:fe:c7:d6:37:a4:a8:7b:d4:
e3:df:f0:89:67:28:0b:5f:81:06:bd:e9:1f:c9:1c:
b1:ee:9b:0c:e4:ce:fa:32:a1:25:5e:20:91:22:37:
cf:86:69:f1:44:9a:af:57:0d:9d:d1:13:49:0d:47:
0d:2f:07:97:94:e3:b3:61:a0:e5:44:c8:16:0a:04:
0e:bc:24:66:0d:8b:e7:35:0a:6c:c9:c5:e3:75:da:
fb:16:5c:1e:0c:f8:68:2a:bb:7c:00:0c:0d:e7:a1:
46:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:6F:BA:0A:8A:8F:62:5D:AD:2C:EC:E5:5B:9C:82:D9:09:17:A2:39
X509v3 Authority Key Identifier:
keyid:29:56:58:4B:70:CE:84:7C:1A:9B:40:05:48:B1:4D:B0:31:BE:DF:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVZYS3DOhHwam0AFSLFNsDG-3_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/64fe7d-862d-4e1a-9fd0-06b41ef1398d/1/yW-6CoqPYl2tLOzlW5yC2QkXojk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/64fe7d-862d-4e1a-9fd0-06b41ef1398d/1/KVZYS3DOhHwam0AFSLFNsDG-3_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.93.141.0/24
195.24.232.0/24
Signature Algorithm: sha256WithRSAEncryption
25:10:5d:ad:84:dc:21:a3:19:e6:b7:67:9b:8e:46:87:be:3b:
40:83:74:6a:df:57:99:0d:c5:1a:1c:38:93:ba:c7:44:54:f6:
d7:14:31:93:c6:df:dc:a6:6c:d6:19:82:ff:56:34:64:20:d0:
6d:9c:6b:f3:68:eb:65:84:66:b7:d5:ae:0f:58:40:fb:04:da:
d5:78:84:a7:a8:d3:47:c9:d5:68:36:6c:94:8c:29:0d:4c:53:
9e:75:6d:32:94:ca:1e:8e:f7:0f:c7:5a:bc:3d:61:ff:f9:7d:
f3:ba:e2:f1:6a:70:4e:51:ca:bd:7f:77:aa:0c:70:2a:89:ce:
83:bc:a5:f0:43:3b:3c:55:5d:4d:68:73:c1:b4:ea:5c:54:bd:
74:92:a6:4e:10:e2:9d:65:c9:a1:53:67:88:c8:c4:80:e8:b2:
ce:11:e5:f9:ca:d3:da:5e:f5:67:dd:93:4b:fb:97:5a:fc:7f:
48:71:cc:df:e8:e5:f2:b2:4d:78:93:0b:e8:71:f1:18:1c:95:
49:06:64:0a:6b:22:82:64:b4:53:dd:bb:de:35:cf:95:31:ee:
bc:1b:c9:d6:f0:ef:62:1a:fd:d1:16:f9:64:b3:0d:78:50:4c:
86:3a:f0:e7:ec:ab:11:4c:87:a4:57:31:f5:cc:72:6d:fd:92:
76:d5:96:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:31 2024 by rpki-client on console-ams.rpki-client.org