Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/6c0e22-fb61-49db-b065-993cd8388fd5/1/TH6Oct_QdX3Vcs2ayKI6iAHaEFM.roa
File: TH6Oct_QdX3Vcs2ayKI6iAHaEFM.roa (raw, json)
Hash identifier: GDI0FQG5/p0uZxSO61r5c8mGYNQWXWIZo/K9WICyHhI=
Subject key identifier: 4C:7E:8E:72:DF:D0:75:7D:D5:72:CD:9A:C8:A2:3A:88:01:DA:10:53
Certificate issuer: /CN=0c6f182804b56e508aa372c03cceb73ef8c2c68b
Certificate serial: 08375AFF
Authority key identifier: 0C:6F:18:28:04:B5:6E:50:8A:A3:72:C0:3C:CE:B7:3E:F8:C2:C6:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DG8YKAS1blCKo3LAPM63PvjCxos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/6c0e22-fb61-49db-b065-993cd8388fd5/1/TH6Oct_QdX3Vcs2ayKI6iAHaEFM.roa
Signing time: Sat 01 Jan 2022 04:59:15 +0000
ROA not before: Sat 01 Jan 2022 04:59:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29061
IP address blocks: 92.62.64.0/21 maxlen: 24
92.62.64.0/20 maxlen: 24
92.62.66.0/23 maxlen: 23
92.62.65.0/24 maxlen: 24
95.87.64.0/19 maxlen: 24
185.53.229.0/24 maxlen: 24
185.53.228.0/22 maxlen: 22
185.53.228.0/24 maxlen: 24
185.53.231.0/24 maxlen: 24
185.53.230.0/24 maxlen: 24
217.29.17.0/24 maxlen: 24
217.29.16.0/24 maxlen: 24
217.29.16.0/21 maxlen: 24
217.29.16.0/20 maxlen: 24
217.29.24.0/24 maxlen: 24
217.29.23.0/24 maxlen: 24
217.29.24.0/21 maxlen: 21
217.29.20.0/24 maxlen: 24
217.29.22.0/24 maxlen: 24
217.29.21.0/24 maxlen: 24
217.29.19.0/24 maxlen: 24
217.29.18.0/24 maxlen: 24
217.29.26.0/24 maxlen: 24
217.29.25.0/24 maxlen: 24
217.29.31.0/24 maxlen: 24
217.29.27.0/24 maxlen: 24
217.29.28.0/24 maxlen: 24
2a02:820::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 137845503 (0x8375aff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c6f182804b56e508aa372c03cceb73ef8c2c68b
Validity
Not Before: Jan 1 04:59:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4c7e8e72dfd0757dd572cd9ac8a23a8801da1053
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e3:40:fc:12:b8:b6:73:16:eb:05:70:ee:71:
04:88:f7:48:90:f1:6b:77:11:aa:ca:b8:d8:87:95:
98:a8:5e:54:aa:04:49:a5:0a:5e:4c:31:fe:67:f3:
b7:70:7f:3d:92:a7:8d:b0:f7:71:cb:6c:c8:0f:ec:
15:82:39:47:20:02:2a:e1:bd:98:ab:0b:0c:1c:63:
ae:f1:26:53:34:2b:d7:04:de:ae:94:14:e4:0d:d9:
a8:b5:cc:0a:e7:f3:a6:0b:ff:6f:e8:db:87:aa:69:
69:cb:96:89:1b:a0:af:db:06:d1:2a:4a:15:64:8e:
76:9b:06:9c:26:96:de:6e:56:28:8a:21:f5:ae:b4:
ca:7b:bf:a7:28:cb:69:0a:f7:13:22:5a:c6:fa:2b:
c8:7a:db:b1:b4:d5:7b:4a:12:01:4b:97:01:91:ce:
6b:41:7f:c0:2b:6f:46:53:5e:21:25:9d:c6:fe:3c:
18:b2:bb:46:5a:49:63:43:08:65:dd:ba:d5:d7:f7:
91:e9:3a:a7:e9:8b:8f:36:d8:19:33:b2:70:3c:b2:
ac:e8:c1:55:df:41:b6:f6:3f:09:84:83:8a:87:22:
b9:69:3b:82:d6:85:c1:d5:0c:b2:dd:aa:41:88:3d:
37:0d:7c:20:17:b0:22:c4:c3:ea:3f:f4:33:28:ec:
e8:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:7E:8E:72:DF:D0:75:7D:D5:72:CD:9A:C8:A2:3A:88:01:DA:10:53
X509v3 Authority Key Identifier:
keyid:0C:6F:18:28:04:B5:6E:50:8A:A3:72:C0:3C:CE:B7:3E:F8:C2:C6:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DG8YKAS1blCKo3LAPM63PvjCxos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/6c0e22-fb61-49db-b065-993cd8388fd5/1/TH6Oct_QdX3Vcs2ayKI6iAHaEFM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/6c0e22-fb61-49db-b065-993cd8388fd5/1/DG8YKAS1blCKo3LAPM63PvjCxos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.62.64.0/20
95.87.64.0/19
185.53.228.0/22
217.29.16.0/20
IPv6:
2a02:820::/32
Signature Algorithm: sha256WithRSAEncryption
76:aa:7d:5e:c8:ad:4d:52:73:88:70:44:58:ea:94:ba:1a:c7:
69:3d:77:38:a6:2c:1c:e8:1e:94:aa:cf:b5:af:ba:ff:3a:3d:
ad:cb:82:94:d4:ec:ba:3b:2c:4c:50:3b:5e:dc:ce:8b:be:13:
c5:c9:14:dd:6c:13:05:d1:ab:82:ab:2c:d9:18:9a:69:8e:60:
0f:a7:b3:15:6b:a5:1b:31:35:4f:22:16:dd:2d:d1:de:8f:ec:
56:a1:0a:f2:1b:22:28:79:4c:5f:37:7f:ec:6e:a7:ad:cb:d9:
f9:dc:bb:99:cc:66:b4:d9:49:97:11:f9:86:9c:fd:e6:bb:a0:
54:17:56:6c:72:cf:03:8d:c9:a9:5c:09:43:c2:12:22:d4:c9:
69:f3:95:ad:22:51:09:8d:17:57:63:79:12:79:35:1e:64:4a:
bd:ad:6f:93:f5:13:c6:d5:99:bd:7c:d3:94:e2:d5:57:9a:df:
41:af:99:01:07:9c:e3:fc:75:71:13:34:c4:10:e1:1d:90:0c:
2b:4b:42:0f:fc:91:58:7b:71:b3:1f:70:fa:4a:7d:0a:79:c6:
f0:5a:f6:f6:93:9e:3c:99:99:66:36:b2:e1:62:58:4e:74:eb:
d8:6d:7a:af:aa:ca:25:fd:5a:36:32:59:48:98:de:d4:de:95:
30:b3:a6:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:28 2024 by rpki-client on console-ams.rpki-client.org