Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/c6d984-6bfc-4602-9d58-ab2d5e7d4a7b/1/B8zJMrqptUME6WTWKgRlSVRZ3PA.roa
File: B8zJMrqptUME6WTWKgRlSVRZ3PA.roa (raw, json)
Hash identifier: c98kr/OFI4uaEpsps5AcxkboMPuSJfGkJRKNF/CZJAQ=
Subject key identifier: 07:CC:C9:32:BA:A9:B5:43:04:E9:64:D6:2A:04:65:49:54:59:DC:F0
Certificate issuer: /CN=9a393ef16027fc03bc5c045ff9289d4bbb7ff364
Certificate serial: 018CC6B92BFA82D3203ED77D721B56F50555
Authority key identifier: 9A:39:3E:F1:60:27:FC:03:BC:5C:04:5F:F9:28:9D:4B:BB:7F:F3:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mjk-8WAn_AO8XARf-SidS7t_82Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/c6d984-6bfc-4602-9d58-ab2d5e7d4a7b/1/B8zJMrqptUME6WTWKgRlSVRZ3PA.roa
Signing time: Mon 01 Jan 2024 20:31:13 +0000
ROA not before: Mon 01 Jan 2024 20:31:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2269
IP address blocks: 160.228.0.0/16 maxlen: 16
138.195.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:2b:fa:82:d3:20:3e:d7:7d:72:1b:56:f5:05:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a393ef16027fc03bc5c045ff9289d4bbb7ff364
Validity
Not Before: Jan 1 20:31:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=07ccc932baa9b54304e964d62a0465495459dcf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:b9:f2:ff:03:57:d8:54:a6:c2:94:cd:60:d4:
56:28:bb:8e:cf:42:73:86:cb:db:2f:3d:02:c3:ff:
b2:59:27:69:b3:43:ee:54:89:ca:99:1d:6e:f7:a8:
72:a6:7d:91:37:c7:fd:16:e1:1d:fb:58:d7:76:bb:
1b:e5:8e:e5:3b:25:12:62:42:df:5b:f1:8f:4b:5a:
04:31:fb:2a:16:cd:40:d5:29:48:5f:75:2c:46:b3:
b3:79:4e:5b:ce:b1:27:b7:9a:59:9a:27:d8:01:dd:
8a:d4:f2:03:f5:9a:e2:43:46:c1:3d:de:54:a7:01:
7e:3f:bd:91:0a:d1:96:32:80:a8:76:d0:cd:d7:8c:
7a:d1:40:08:77:2f:dc:38:2b:36:d2:36:40:ec:9a:
ab:b8:71:94:a0:4d:d7:8e:54:6f:63:18:f1:ec:a7:
23:36:33:c8:49:26:84:d5:bf:ed:66:75:7b:11:33:
60:64:ff:a7:70:91:32:aa:d4:0e:c0:f3:58:11:d2:
93:61:da:74:6f:56:12:92:1b:38:44:a7:db:2f:9d:
66:e1:95:e4:87:d6:27:01:65:c6:75:c2:e6:a2:1a:
59:50:1f:14:fa:9d:86:4e:09:72:e6:b5:db:7d:63:
03:56:00:9d:89:c8:c3:76:d5:d2:4f:df:bd:e6:05:
e6:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:CC:C9:32:BA:A9:B5:43:04:E9:64:D6:2A:04:65:49:54:59:DC:F0
X509v3 Authority Key Identifier:
keyid:9A:39:3E:F1:60:27:FC:03:BC:5C:04:5F:F9:28:9D:4B:BB:7F:F3:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mjk-8WAn_AO8XARf-SidS7t_82Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c6d984-6bfc-4602-9d58-ab2d5e7d4a7b/1/B8zJMrqptUME6WTWKgRlSVRZ3PA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c6d984-6bfc-4602-9d58-ab2d5e7d4a7b/1/mjk-8WAn_AO8XARf-SidS7t_82Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.195.0.0/16
160.228.0.0/16
Signature Algorithm: sha256WithRSAEncryption
d2:a3:c2:15:9b:ed:e6:50:6b:83:17:1f:f9:3b:e8:4d:8b:4a:
b6:e7:02:12:14:7d:4a:4b:a6:8d:49:2a:d9:70:67:12:b7:aa:
f5:53:64:bb:aa:aa:33:90:87:34:00:39:5d:a4:50:de:00:fb:
39:ad:e6:06:e5:8c:f2:e2:2f:6d:02:73:1e:f1:9a:e1:9c:fd:
f7:69:73:e4:44:6d:bf:db:c6:d3:cc:93:16:8c:fe:7a:85:22:
e3:ac:5d:9b:31:3c:ab:4d:a2:a6:26:4f:d2:37:df:13:3d:ff:
b2:8a:89:75:56:f3:ef:cb:a6:0d:ee:d7:92:a8:15:33:3e:fa:
4a:94:32:57:84:4d:bd:50:b7:3a:4d:b3:db:f1:26:30:0a:ff:
ea:c3:1c:3c:69:e4:d2:57:87:b3:12:56:68:1a:37:82:b2:d5:
ad:e7:54:16:bf:98:04:62:84:5a:ee:28:69:48:c7:f2:5a:c9:
a6:54:eb:ab:1c:79:7b:12:7f:ca:a3:bc:72:45:6d:9e:c3:3a:
97:57:c3:18:79:28:c4:48:92:2e:74:0e:96:87:2f:c7:fb:5b:
cc:b9:cd:34:cb:3e:8a:fe:95:9f:2a:8a:8a:5a:d8:be:41:75:
3e:ab:73:27:16:9c:fb:3e:24:50:dd:e4:c0:61:7f:c7:59:07:
b9:5c:56:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:21 2024 by rpki-client on console-fra.rpki-client.org