Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/549363-1229-4114-a996-259420d32472/1/OlrwafaaZJfQYYkMYv71OqLczvw.roa
File: OlrwafaaZJfQYYkMYv71OqLczvw.roa (raw, json)
Hash identifier: tZ9MmnDihcM71L/2aBF+WZam3Cw1bYBREtDGCD1M+oQ=
Subject key identifier: 3A:5A:F0:69:F6:9A:64:97:D0:61:89:0C:62:FE:F5:3A:A2:DC:CE:FC
Certificate issuer: /CN=8d1dee964aa26f89bd102276d465633fb82eaa28
Certificate serial: 01856D6F4FC5284B7999761C2BBF06C514BD
Authority key identifier: 8D:1D:EE:96:4A:A2:6F:89:BD:10:22:76:D4:65:63:3F:B8:2E:AA:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jR3ulkqib4m9ECJ21GVjP7guqig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/549363-1229-4114-a996-259420d32472/1/OlrwafaaZJfQYYkMYv71OqLczvw.roa
Signing time: Sun 01 Jan 2023 13:04:49 +0000
ROA not before: Sun 01 Jan 2023 13:04:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1293
IP address blocks: 195.160.96.0/19 maxlen: 19
195.160.0.0/18 maxlen: 18
195.160.149.0/24 maxlen: 24
195.160.148.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:6f:4f:c5:28:4b:79:99:76:1c:2b:bf:06:c5:14:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d1dee964aa26f89bd102276d465633fb82eaa28
Validity
Not Before: Jan 1 13:04:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3a5af069f69a6497d061890c62fef53aa2dccefc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:91:3a:3d:7f:82:f9:5b:8b:7a:67:f4:cb:6f:
5f:bc:93:b9:29:ec:4b:72:8d:58:b2:af:ca:fe:47:
60:da:b6:b4:61:ec:b8:c1:ef:3c:da:92:98:29:cf:
73:73:53:88:26:c2:04:7f:cc:28:7b:fc:42:dc:00:
05:15:36:91:4e:53:a5:06:fa:fd:03:bc:f1:00:5e:
85:f4:c6:fe:c1:af:ae:52:ed:0a:ce:f7:a8:33:8d:
fd:0e:c9:9d:18:d3:0a:c1:0d:fb:7d:88:f6:23:9d:
89:4e:9c:6c:a9:ec:74:57:15:c7:af:6e:a0:fe:56:
31:21:dd:87:13:7d:14:38:d3:3a:bf:b7:f2:5c:0d:
55:cc:7a:f3:3c:43:b1:60:85:df:50:af:5b:c4:d6:
ed:73:6b:55:46:ce:c0:89:7a:92:8b:23:25:4d:a7:
fb:a2:6a:ab:c6:10:58:8d:72:bf:f0:e2:6a:f1:a0:
29:70:e6:b0:4b:e7:9b:20:6f:d8:c4:5a:c2:82:96:
be:ff:5e:92:26:b1:c3:71:af:69:27:35:83:69:62:
aa:59:8a:8a:76:43:5e:62:ca:62:17:23:d3:05:37:
7e:93:ce:54:d6:f4:d2:b1:2e:ba:3e:d7:24:39:d4:
54:b6:b2:e1:0a:b9:29:84:ca:87:cb:c3:67:74:b5:
15:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:5A:F0:69:F6:9A:64:97:D0:61:89:0C:62:FE:F5:3A:A2:DC:CE:FC
X509v3 Authority Key Identifier:
keyid:8D:1D:EE:96:4A:A2:6F:89:BD:10:22:76:D4:65:63:3F:B8:2E:AA:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jR3ulkqib4m9ECJ21GVjP7guqig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/549363-1229-4114-a996-259420d32472/1/OlrwafaaZJfQYYkMYv71OqLczvw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/549363-1229-4114-a996-259420d32472/1/jR3ulkqib4m9ECJ21GVjP7guqig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.160.0.0/18
195.160.96.0/19
195.160.148.0/23
Signature Algorithm: sha256WithRSAEncryption
85:44:6d:32:1c:80:06:72:ee:47:19:a2:0d:06:ab:e8:36:b2:
0a:03:91:16:78:b0:53:d0:af:18:1d:20:6f:76:36:e6:de:9a:
16:18:48:89:bf:77:7e:50:77:5c:9a:26:ab:8c:8e:a4:f9:2b:
dd:b8:84:08:ac:13:92:96:94:46:a7:72:ac:fd:81:93:68:bd:
c2:63:af:52:16:1c:01:6e:8c:7e:c2:03:fc:0f:76:d0:b8:43:
e0:84:fb:ab:f1:33:93:2c:da:38:2b:df:c2:6d:d4:50:59:d3:
7a:46:9c:68:b2:6a:1f:0a:fc:ae:30:3d:72:66:55:68:f5:9d:
56:b4:46:e3:11:dd:ec:95:e1:f4:95:e5:db:ce:b1:fa:d8:91:
48:29:47:58:a8:be:4c:2f:f0:03:08:7c:d8:c4:ba:84:84:44:
c2:50:21:d2:95:e3:c7:db:42:b9:1e:7d:1a:82:26:c7:b6:75:
d5:4d:35:4e:73:80:9b:47:a3:91:b6:48:80:af:71:c0:42:89:
33:af:7b:32:97:9a:65:55:6c:f6:f6:d1:8e:07:9f:f2:b1:ec:
0a:7d:49:0f:ee:b6:d9:1b:20:3a:9d:a9:8f:26:51:dc:76:34:
68:04:44:54:cb:ea:29:76:8a:ec:22:78:11:c7:c4:12:cc:d5:
f9:e4:4f:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:11 2024 by rpki-client on console-fra.rpki-client.org