Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/771486-bee3-424a-b341-7cfdf2df6632/1/y4v8ILsO5qvRefqCbyx3WQtDEO0.roa
File: y4v8ILsO5qvRefqCbyx3WQtDEO0.roa (raw, json)
Hash identifier: mXqKkKQ0P0r9eXzSFkfuHLWFHhW5X/sPdmohlQtCRWM=
Subject key identifier: CB:8B:FC:20:BB:0E:E6:AB:D1:79:FA:82:6F:2C:77:59:0B:43:10:ED
Certificate issuer: /CN=310b05251378994cfa8088d23b6eeed4e9e6ab08
Certificate serial: 018D13D7EFEAE7A4924D42E2103030F2BCF3
Authority key identifier: 31:0B:05:25:13:78:99:4C:FA:80:88:D2:3B:6E:EE:D4:E9:E6:AB:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MQsFJRN4mUz6gIjSO27u1Onmqwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/771486-bee3-424a-b341-7cfdf2df6632/1/y4v8ILsO5qvRefqCbyx3WQtDEO0.roa
Signing time: Tue 16 Jan 2024 19:55:35 +0000
ROA not before: Tue 16 Jan 2024 19:55:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61317
IP address blocks: 37.140.221.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:13:d7:ef:ea:e7:a4:92:4d:42:e2:10:30:30:f2:bc:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=310b05251378994cfa8088d23b6eeed4e9e6ab08
Validity
Not Before: Jan 16 19:55:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cb8bfc20bb0ee6abd179fa826f2c77590b4310ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:23:13:c3:0c:00:e7:85:3b:17:6d:79:86:4d:
bd:9c:92:5a:87:6f:9b:19:57:3b:74:c8:5c:c6:9e:
4f:03:23:95:12:a9:69:9d:d1:71:45:be:6d:cf:8d:
64:40:78:ed:c3:39:46:f7:de:c3:41:db:2d:a2:84:
ca:60:cf:61:32:3b:dc:69:29:ab:ed:e9:a2:58:f7:
ed:3d:de:48:72:1d:fb:47:c0:bb:0b:9e:9d:86:84:
49:ee:42:1e:d4:43:9c:ed:ef:ca:5e:ce:0b:e1:1f:
67:78:3a:a5:63:8d:ae:8f:f8:49:80:74:14:58:48:
ff:70:2c:c9:5e:72:87:79:be:7c:e5:87:7f:97:7c:
a6:f8:36:a2:97:e7:f1:ac:6d:b7:5f:f6:55:6d:cd:
2c:0f:5f:6c:d6:68:f3:5d:54:9a:22:e0:34:b3:e9:
23:d8:15:18:43:0e:2a:bd:9b:e1:f6:e6:35:a8:1c:
cb:69:b7:ab:bc:5a:06:62:99:94:59:1b:f6:0e:f8:
4a:c5:55:7b:ef:a5:9a:fc:16:94:97:eb:43:23:c9:
0d:d9:cd:69:c4:6c:77:a8:0e:30:20:66:af:f7:b1:
70:65:4c:2f:0f:2f:66:2c:b7:a0:3b:0c:e0:5f:95:
cf:c6:57:c4:80:1f:b0:22:1b:23:2b:66:8b:0f:91:
d3:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:8B:FC:20:BB:0E:E6:AB:D1:79:FA:82:6F:2C:77:59:0B:43:10:ED
X509v3 Authority Key Identifier:
keyid:31:0B:05:25:13:78:99:4C:FA:80:88:D2:3B:6E:EE:D4:E9:E6:AB:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MQsFJRN4mUz6gIjSO27u1Onmqwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/771486-bee3-424a-b341-7cfdf2df6632/1/y4v8ILsO5qvRefqCbyx3WQtDEO0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/771486-bee3-424a-b341-7cfdf2df6632/1/MQsFJRN4mUz6gIjSO27u1Onmqwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.140.221.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:47:e4:ec:ca:a9:f3:5e:5f:08:ad:a3:04:1d:f7:33:79:27:
65:77:49:39:10:b9:5f:89:52:ac:09:01:6e:ce:4d:57:49:c5:
66:35:ad:4c:64:24:5a:0c:c5:b1:6e:ee:fd:14:dc:66:85:39:
d4:1e:f6:0f:53:c1:f9:a4:9f:64:a6:73:af:fc:03:8f:08:85:
d9:fd:68:5f:76:1d:f5:46:ab:28:23:e4:4b:f9:69:c8:c6:b6:
16:b8:5e:b2:4c:5a:e1:ff:0a:5b:95:3e:84:ca:21:e5:01:19:
71:0b:14:33:bb:eb:2a:fc:fd:1a:d8:1e:b0:57:d4:9e:40:42:
16:35:0b:69:61:c6:71:49:2b:d0:1c:96:0c:40:9d:2a:13:47:
d3:27:2c:71:d2:e0:08:f5:b0:f3:96:4d:c4:ef:64:c7:5d:cd:
30:62:2a:30:a7:b2:52:07:f2:49:ff:2a:9e:b3:e0:0a:ad:32:
a4:ce:49:7c:76:6a:3a:22:9f:18:d8:4f:d8:bd:8b:92:93:c1:
aa:bc:c5:8f:83:2c:5e:b3:d9:ed:3a:03:b9:74:15:94:62:dd:
e1:d7:c5:86:46:15:8c:92:82:14:cd:90:d5:28:de:ac:0d:84:
23:ca:2b:22:9b:13:dd:23:e1:10:41:63:78:94:d8:f9:43:65:
2f:1a:2e:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:48 2024 by rpki-client on console-fra.rpki-client.org