Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/5c97a8-0a72-4646-bbef-4a58f6f4a520/1/fXAK5jpEj0004tsAaj9ENGqF--I.roa
File: fXAK5jpEj0004tsAaj9ENGqF--I.roa (raw, json)
Hash identifier: whlhRHZKrH8w7vXBhC5cgzHFqkIQzNDASqKkz4aWBG0=
Subject key identifier: 7D:70:0A:E6:3A:44:8F:4D:34:E2:DB:00:6A:3F:44:34:6A:85:FB:E2
Certificate issuer: /CN=893cfa5278774a711e44be1d6b0c2797f22f2b77
Certificate serial: 0181EDBE2413A83F0FB3F4846B719B45C333
Authority key identifier: 89:3C:FA:52:78:77:4A:71:1E:44:BE:1D:6B:0C:27:97:F2:2F:2B:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iTz6Unh3SnEeRL4dawwnl_IvK3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/5c97a8-0a72-4646-bbef-4a58f6f4a520/1/fXAK5jpEj0004tsAaj9ENGqF--I.roa
Signing time: Mon 11 Jul 2022 14:51:10 +0000
ROA not before: Mon 11 Jul 2022 14:51:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6735
IP address blocks: 194.88.160.0/19 maxlen: 19
185.218.168.0/22 maxlen: 22
2a05:e140::/29 maxlen: 29
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:ed:be:24:13:a8:3f:0f:b3:f4:84:6b:71:9b:45:c3:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=893cfa5278774a711e44be1d6b0c2797f22f2b77
Validity
Not Before: Jul 11 14:51:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7d700ae63a448f4d34e2db006a3f44346a85fbe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:f5:7b:27:91:55:25:b6:99:63:1e:f6:3a:f1:
2d:58:18:e2:70:1f:79:d2:56:6a:73:cc:13:48:ff:
39:60:e2:69:b3:9d:b5:8c:c2:c6:16:eb:18:15:a7:
1b:ee:c6:9e:b1:8b:57:76:ab:35:ce:32:f0:2f:c6:
02:1b:c1:ea:a3:9a:21:c8:d4:50:9d:21:e7:1b:ca:
32:b4:a3:c0:dc:c3:6f:3a:49:99:81:75:a5:34:83:
f5:9e:2d:d6:bd:a6:83:f8:b2:af:8f:3d:75:70:f6:
45:2c:4b:ec:bb:81:41:0e:1d:28:4b:b6:7a:c9:1b:
f0:b4:71:52:d4:98:ff:37:45:0e:35:cb:79:70:a5:
9d:24:5a:32:9f:36:52:2d:d4:b1:48:fa:c2:b4:ad:
ea:f2:95:72:a1:b9:01:e2:2b:0b:49:9f:ad:58:ea:
33:e6:5e:1c:d6:5e:c0:84:b0:c4:18:71:2d:79:2f:
8a:11:ac:1b:67:94:5a:e4:71:7a:30:ed:89:0a:4e:
a8:a1:f3:a6:10:35:cb:f9:32:a6:54:ce:24:61:99:
d1:4f:27:63:51:ee:62:5c:74:8f:70:d4:60:95:bd:
26:18:12:20:7b:9c:b2:09:37:b7:16:02:02:0b:d5:
d5:94:95:2a:2f:46:38:db:ff:fa:84:b9:07:e4:96:
e8:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:70:0A:E6:3A:44:8F:4D:34:E2:DB:00:6A:3F:44:34:6A:85:FB:E2
X509v3 Authority Key Identifier:
keyid:89:3C:FA:52:78:77:4A:71:1E:44:BE:1D:6B:0C:27:97:F2:2F:2B:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iTz6Unh3SnEeRL4dawwnl_IvK3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/5c97a8-0a72-4646-bbef-4a58f6f4a520/1/fXAK5jpEj0004tsAaj9ENGqF--I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/5c97a8-0a72-4646-bbef-4a58f6f4a520/1/iTz6Unh3SnEeRL4dawwnl_IvK3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.218.168.0/22
194.88.160.0/19
IPv6:
2a05:e140::/29
Signature Algorithm: sha256WithRSAEncryption
9a:79:ae:83:65:58:a9:02:e9:f9:ae:6c:0c:6c:27:41:c3:bb:
f3:a0:aa:1d:74:44:13:8c:40:1a:a6:c4:b7:1a:1e:61:54:32:
35:05:eb:10:15:40:69:5b:b2:4e:85:33:17:be:f6:6e:76:21:
24:7e:7c:24:8c:65:66:35:97:b4:6f:23:81:47:cb:53:bb:87:
3a:14:6a:4b:29:65:b3:1a:20:f4:6c:18:a4:5a:23:22:64:fb:
99:32:73:a8:56:f5:ba:71:48:2c:0b:b9:09:4b:0f:13:12:0b:
6e:3d:f2:42:a9:29:50:49:a3:14:47:ea:a3:7a:69:c6:f2:fb:
af:9f:18:79:f3:aa:ca:c4:eb:2f:76:e2:da:07:6c:33:fc:a6:
bf:10:fc:2a:29:fd:82:46:f6:19:1a:e1:50:86:da:29:d5:a5:
e4:6d:16:b2:cd:83:a8:46:37:be:99:9b:e3:96:75:0f:d9:b8:
38:da:7b:3a:ee:67:e7:5a:44:79:bc:5c:08:f7:44:8d:87:c2:
2e:25:e2:cd:f8:8c:d4:47:ee:c2:28:2e:a8:bd:83:06:6e:2c:
df:39:a8:e4:59:ce:73:00:6d:1d:7b:7d:58:a4:98:a6:b1:68:
f3:91:38:46:03:5e:61:1e:42:11:2d:4c:06:ce:9c:ab:9c:5e:
82:61:f8:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:23 2024 by rpki-client on console-ams.rpki-client.org