Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/vn_fvhUFB1zB3cERqncomGZDNfA.roa
File: vn_fvhUFB1zB3cERqncomGZDNfA.roa (raw, json)
Hash identifier: Fj3afgDf/jH9hKlZJd8kWuuGA8vhMVCxGV4nTKplss8=
Subject key identifier: BE:7F:DF:BE:15:05:07:5C:C1:DD:C1:11:AA:77:28:98:66:43:35:F0
Certificate issuer: /CN=91d8c32a703972aaea093a01f8dedf57f9675575
Certificate serial: 0185729ED00904DFDA00670F2C8E82B12649
Authority key identifier: 91:D8:C3:2A:70:39:72:AA:EA:09:3A:01:F8:DE:DF:57:F9:67:55:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kdjDKnA5cqrqCToB-N7fV_lnVXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/vn_fvhUFB1zB3cERqncomGZDNfA.roa
Signing time: Mon 02 Jan 2023 13:14:48 +0000
ROA not before: Mon 02 Jan 2023 13:14:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41887
IP address blocks: 81.23.231.0/24 maxlen: 24
81.23.230.0/24 maxlen: 24
81.23.230.0/23 maxlen: 23
81.173.34.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:9e:d0:09:04:df:da:00:67:0f:2c:8e:82:b1:26:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91d8c32a703972aaea093a01f8dedf57f9675575
Validity
Not Before: Jan 2 13:14:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=be7fdfbe1505075cc1ddc111aa772898664335f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:60:d4:6f:af:0d:4d:9f:48:8f:bc:34:2a:35:
aa:64:97:cb:d7:0a:2f:17:4b:30:80:93:1d:8e:ff:
88:61:e3:e8:46:0e:29:34:5c:f9:5d:8f:28:9b:13:
cd:51:db:2f:1b:ff:11:b2:2d:8a:50:32:22:82:8b:
fe:07:fd:bd:79:08:b5:06:22:0a:09:a5:32:b5:5f:
9c:9d:e8:4b:e5:f3:c9:2c:d4:fd:53:ff:cd:6d:d3:
42:4d:bf:a9:3b:2d:6e:cd:f7:95:33:df:82:f5:a7:
c3:90:99:8c:8a:79:7e:5c:1f:59:20:da:55:7b:9d:
ba:2e:02:bf:9d:1a:af:d7:49:d7:89:8a:d9:27:ab:
99:27:5b:66:02:7e:fd:40:ed:4c:69:af:2e:cd:ba:
03:79:d6:d6:95:60:7f:ab:45:49:16:a1:cc:b8:6d:
1e:75:0d:07:fe:b9:0f:3f:70:e2:cb:a9:b2:ea:32:
b4:84:c6:01:88:12:65:17:85:0e:40:87:2a:17:0b:
1c:8a:3d:9e:31:a2:7a:3b:5f:9c:fb:cd:c2:ad:45:
4d:7a:50:c0:67:41:e4:93:92:7c:e9:75:7b:d8:48:
6a:dc:1e:6d:76:ee:5b:3e:3c:ab:50:6c:76:ed:b1:
37:01:85:64:fc:65:d9:cd:e5:d7:3d:2f:16:f8:36:
5f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:7F:DF:BE:15:05:07:5C:C1:DD:C1:11:AA:77:28:98:66:43:35:F0
X509v3 Authority Key Identifier:
keyid:91:D8:C3:2A:70:39:72:AA:EA:09:3A:01:F8:DE:DF:57:F9:67:55:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kdjDKnA5cqrqCToB-N7fV_lnVXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/vn_fvhUFB1zB3cERqncomGZDNfA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.23.230.0/23
81.173.34.0/24
Signature Algorithm: sha256WithRSAEncryption
98:eb:8d:81:2d:40:f4:66:f5:86:b5:6e:b6:35:58:22:ac:44:
27:30:0e:21:1e:5f:ae:3c:e5:89:bc:a9:3f:41:63:81:1a:89:
bd:23:91:f5:b9:14:ba:bc:ba:9b:fd:11:e5:4a:f5:f8:92:f8:
ae:33:4e:9a:e8:d6:0d:a4:fd:ea:7e:53:8f:af:13:a0:5e:91:
84:4d:19:ce:6c:73:2e:d9:7a:48:17:12:63:78:d1:e6:c2:53:
b9:c7:b4:7a:b4:fd:59:a3:b9:86:51:2f:96:bc:03:8e:e0:d5:
21:04:7c:cf:b8:9b:02:3e:aa:c0:63:18:72:24:4a:15:4e:3a:
8b:5e:77:06:4d:42:e3:6a:1d:a7:17:23:6f:d5:86:e0:3d:99:
7d:e6:7e:06:1b:37:28:f4:18:58:79:e5:fc:74:a6:93:04:77:
ef:c2:4e:a6:6b:6e:f6:1f:07:53:9c:52:84:68:97:4f:0e:0e:
74:64:7e:54:4d:ad:ff:b4:b6:b4:12:3a:7d:62:10:25:10:30:
a3:f6:f5:75:3d:5d:97:08:1d:ad:0d:ae:e1:58:fb:37:e6:58:
3d:10:15:22:fb:5b:57:26:08:ca:62:9a:7c:f4:f8:3b:31:8f:
51:30:23:6b:2f:15:17:7f:73:51:de:1f:2c:7a:62:10:43:40:
4a:ad:6f:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:18 2024 by rpki-client on console-fra.rpki-client.org