Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/ff94f1-ba63-40d6-beca-5e624a3038cf/1/S5qXoalkL78o1sHPR5Fnjd6-M7k.roa
File: S5qXoalkL78o1sHPR5Fnjd6-M7k.roa (raw, json)
Hash identifier: Xc7AYIWInykGCmjSh8KaVPkkeH1qDVgk5wZbiPfkbtk=
Subject key identifier: 4B:9A:97:A1:A9:64:2F:BF:28:D6:C1:CF:47:91:67:8D:DE:BE:33:B9
Certificate issuer: /CN=9c1aed9913f8880af7557eef3ef02d6e0ff3fd49
Certificate serial: 08B5CED3
Authority key identifier: 9C:1A:ED:99:13:F8:88:0A:F7:55:7E:EF:3E:F0:2D:6E:0F:F3:FD:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nBrtmRP4iAr3VX7vPvAtbg_z_Uk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/ff94f1-ba63-40d6-beca-5e624a3038cf/1/S5qXoalkL78o1sHPR5Fnjd6-M7k.roa
Signing time: Mon 04 Jul 2022 17:16:27 +0000
ROA not before: Mon 04 Jul 2022 17:16:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61439
IP address blocks: 194.8.28.0/24 maxlen: 24
2a0d:8041::/32 maxlen: 32
2a0f:a1c1::/32 maxlen: 32
2a0d:8044::/32 maxlen: 32
2a0f:a1c4::/32 maxlen: 32
2a0d:8045::/32 maxlen: 32
2a0f:a1c5::/32 maxlen: 32
2a0f:a1c2::/32 maxlen: 32
2a0d:8042::/32 maxlen: 32
2a0d:8043::/32 maxlen: 32
2a0f:a1c3::/32 maxlen: 32
2a0f:a1c7::/32 maxlen: 32
2a0d:8047::/32 maxlen: 32
2a0d:8040::/32 maxlen: 32
2a0f:a1c0::/32 maxlen: 32
2a0d:8046::/32 maxlen: 32
2a0f:a1c6::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 146132691 (0x8b5ced3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c1aed9913f8880af7557eef3ef02d6e0ff3fd49
Validity
Not Before: Jul 4 17:16:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4b9a97a1a9642fbf28d6c1cf4791678ddebe33b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:1e:7c:2e:24:27:ab:82:b2:10:05:6f:9f:06:
08:c8:e7:ff:24:08:9a:b4:eb:66:e2:38:6f:15:29:
fb:ae:9a:da:af:cf:d1:fe:d2:96:d4:dc:0b:d7:98:
5b:75:91:7e:a5:05:f6:63:05:6c:cf:1c:03:4c:9f:
f5:10:0f:9f:5b:b1:40:c6:ab:ef:b3:6d:57:e8:60:
fc:f2:74:aa:7e:20:00:d6:f1:b9:c1:32:58:92:c1:
bc:7f:78:be:08:e2:43:37:21:40:52:b8:6a:70:8f:
38:21:03:38:de:6b:2c:82:33:48:7e:3e:67:5b:41:
47:d4:e7:63:be:f6:db:d7:fd:fc:93:b9:54:77:33:
4f:53:e0:2c:d4:dc:be:11:73:33:31:05:64:e2:31:
14:b0:c0:ce:c9:68:2c:ef:e9:2a:59:f9:b7:31:bc:
41:38:62:c3:41:c5:85:db:1f:6c:f6:6b:a6:2e:55:
76:f8:76:6b:3f:66:21:89:a9:f1:fa:ed:c1:36:4a:
12:dd:86:8b:f7:6d:34:1f:32:ae:00:08:46:a6:9f:
a7:40:97:d7:83:80:f6:91:17:8a:2f:04:32:3a:2e:
02:38:23:5f:c1:0a:b7:67:70:96:fe:02:51:03:af:
93:a5:f9:55:b6:12:b9:59:3d:cc:06:ae:63:a5:e3:
0e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:9A:97:A1:A9:64:2F:BF:28:D6:C1:CF:47:91:67:8D:DE:BE:33:B9
X509v3 Authority Key Identifier:
keyid:9C:1A:ED:99:13:F8:88:0A:F7:55:7E:EF:3E:F0:2D:6E:0F:F3:FD:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nBrtmRP4iAr3VX7vPvAtbg_z_Uk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/ff94f1-ba63-40d6-beca-5e624a3038cf/1/S5qXoalkL78o1sHPR5Fnjd6-M7k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/ff94f1-ba63-40d6-beca-5e624a3038cf/1/nBrtmRP4iAr3VX7vPvAtbg_z_Uk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.8.28.0/24
IPv6:
2a0d:8040::/29
2a0f:a1c0::/29
Signature Algorithm: sha256WithRSAEncryption
2d:fe:f2:ed:57:b5:a6:53:26:ad:5f:05:1a:f1:ed:62:77:78:
8e:3b:81:7a:3b:c4:2f:e3:a1:71:90:cc:4b:d8:3f:1a:fd:14:
61:94:61:d0:1d:7d:07:5a:73:4f:56:c2:5f:13:ca:a4:1b:38:
bc:f1:6c:10:49:c9:9e:e6:4d:06:0b:35:c9:fe:12:83:1d:0e:
c6:2d:4b:c9:7c:19:0d:59:f0:f7:49:4e:91:57:b0:3f:d0:9f:
31:ab:d0:89:96:9b:d7:39:0c:1a:44:f4:55:f6:c9:b5:0e:aa:
81:48:ab:4a:2e:88:67:48:f6:5b:ed:66:72:67:dd:58:f8:f5:
92:f2:2c:0e:08:55:bc:ec:34:08:44:86:36:92:cb:f6:4b:f7:
58:60:bc:b9:63:19:51:a3:92:68:b5:7f:c3:b1:da:ba:63:05:
c3:ab:2e:58:7b:77:27:35:53:31:89:13:36:41:5a:3d:fe:d9:
99:24:c2:0a:4c:b1:d9:20:ce:54:c0:2a:3b:c8:a1:b2:44:7b:
7b:e1:51:92:73:79:6a:b5:f3:a5:91:5c:bd:bb:75:5b:f1:f5:
70:69:89:e7:be:ef:f8:df:52:6d:81:ab:9f:34:6b:23:8a:e8:
05:53:fe:f6:b8:85:87:d9:05:6a:98:80:18:ac:60:f2:0a:7c:
b8:52:7d:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:06 2024 by rpki-client on console-fra.rpki-client.org