Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/2ca2c3-e20f-494e-b1ce-6a71b844ad66/1/ANfnlZw6qJ8c99mArS2o-V-6Hsc.roa
File: ANfnlZw6qJ8c99mArS2o-V-6Hsc.roa (raw, json)
Hash identifier: Y3O8FeH/eTM0USs5BdB5n0zhUgkGK2fVPN2rnOM19SU=
Subject key identifier: 00:D7:E7:95:9C:3A:A8:9F:1C:F7:D9:80:AD:2D:A8:F9:5F:BA:1E:C7
Certificate issuer: /CN=c519468c55e6be715c0da805cefb5aec85d32926
Certificate serial: 985976
Authority key identifier: C5:19:46:8C:55:E6:BE:71:5C:0D:A8:05:CE:FB:5A:EC:85:D3:29:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xRlGjFXmvnFcDagFzvta7IXTKSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/2ca2c3-e20f-494e-b1ce-6a71b844ad66/1/ANfnlZw6qJ8c99mArS2o-V-6Hsc.roa
Signing time: Sat 01 Jan 2022 02:52:28 +0000
ROA not before: Sat 01 Jan 2022 02:52:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201792
IP address blocks: 91.196.216.0/24 maxlen: 24
91.196.219.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9984374 (0x985976)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c519468c55e6be715c0da805cefb5aec85d32926
Validity
Not Before: Jan 1 02:52:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=00d7e7959c3aa89f1cf7d980ad2da8f95fba1ec7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:96:c8:b7:dc:0d:3d:ea:84:03:75:57:e6:d5:
a6:18:1c:28:f9:cc:96:5f:b2:ad:50:49:5f:b1:4a:
c7:92:22:ed:c3:46:29:d3:fb:74:28:ca:76:ac:f1:
08:40:4b:4e:3e:3c:2a:d9:77:78:ad:10:b2:76:d4:
09:3a:e4:de:d9:46:e1:d1:a9:9f:6f:7a:49:b0:ad:
5c:f6:47:3e:90:21:4a:25:54:c3:a7:53:e7:f9:8c:
26:2e:a2:d7:49:6c:64:a7:23:f8:28:d1:f9:db:b6:
ff:fe:1a:87:30:79:3c:10:d7:63:4b:40:8c:d0:de:
7d:2c:b5:95:fc:8b:16:81:48:04:1c:d8:af:47:3c:
2a:4f:a2:b1:1f:0e:89:b0:e0:91:1c:24:d8:fa:b1:
6a:36:9e:d6:75:85:b1:e7:1a:91:9a:a8:53:bd:49:
e8:ed:a7:17:fc:b9:b7:60:b9:e4:da:63:bb:5e:1f:
f4:34:af:08:d2:08:a1:6a:49:03:b7:4c:76:f7:ff:
cf:4d:4d:ea:53:0c:20:07:7e:f1:8d:21:7b:9a:b8:
ae:f1:10:35:5a:9d:13:98:c5:23:b7:7a:9d:90:31:
fd:9e:97:3c:58:c7:8b:14:42:32:f8:2a:26:4f:62:
2d:98:b8:4e:8d:b7:02:50:d3:69:74:8f:0a:ce:76:
c3:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:D7:E7:95:9C:3A:A8:9F:1C:F7:D9:80:AD:2D:A8:F9:5F:BA:1E:C7
X509v3 Authority Key Identifier:
keyid:C5:19:46:8C:55:E6:BE:71:5C:0D:A8:05:CE:FB:5A:EC:85:D3:29:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xRlGjFXmvnFcDagFzvta7IXTKSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/2ca2c3-e20f-494e-b1ce-6a71b844ad66/1/ANfnlZw6qJ8c99mArS2o-V-6Hsc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/2ca2c3-e20f-494e-b1ce-6a71b844ad66/1/xRlGjFXmvnFcDagFzvta7IXTKSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.196.216.0/24
91.196.219.0/24
Signature Algorithm: sha256WithRSAEncryption
30:6c:b1:8a:8a:ac:7a:19:19:42:47:a8:24:f1:64:fc:14:39:
1d:41:88:51:b2:26:1c:f5:fa:f5:8e:b6:37:e8:9b:f8:2e:b1:
48:fb:10:ec:0f:88:04:c0:6f:b3:67:98:ad:60:4c:f0:61:40:
e1:da:16:b2:db:0f:33:67:cb:ac:6e:84:37:a0:a0:8b:ae:ed:
c0:11:9f:9b:68:87:35:18:b0:1a:e4:cf:54:d1:3b:18:85:70:
d5:86:25:d2:a5:52:f7:6e:98:7e:ad:d6:87:36:15:93:a5:c2:
2c:f6:25:1b:16:07:ba:78:63:12:fb:88:f6:0c:4e:3c:07:7f:
61:a3:39:c1:ed:0c:3f:62:2e:73:52:cc:4e:57:11:50:18:79:
de:fd:8c:80:16:ca:43:b1:2f:c8:b5:9d:b1:a3:57:e0:41:52:
70:f9:50:f3:cf:fe:0c:b6:20:6a:c0:8f:07:8d:e0:b1:f1:2a:
62:7b:ea:bb:10:06:7a:92:f1:e3:43:e3:f2:e6:9c:6a:a0:3c:
8a:69:a5:b3:ca:6a:23:d3:14:48:d5:cf:d6:c5:f3:6d:7c:48:
03:12:dc:11:9d:fb:47:b1:dc:a5:77:51:49:7e:58:63:ab:5f:
05:5d:f7:ba:ca:87:fc:e5:5c:b4:50:7f:ad:73:a9:22:a1:77:
ac:12:75:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:34 2024 by rpki-client on console-ams.rpki-client.org