Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/7koFe5UVhrdnjpUKhCro4JT1rF8.roa
File: 7koFe5UVhrdnjpUKhCro4JT1rF8.roa (raw, json)
Hash identifier: wgsSXcXxSMqQ8E1PX9ZGbKKHtsLKDC3wZLblpYGi8PE=
Subject key identifier: EE:4A:05:7B:95:15:86:B7:67:8E:95:0A:84:2A:E8:E0:94:F5:AC:5F
Certificate issuer: /CN=542f633f76e8d8aaeaa32b5ace16a3db3943d80c
Certificate serial: 37FBFA8E
Authority key identifier: 54:2F:63:3F:76:E8:D8:AA:EA:A3:2B:5A:CE:16:A3:DB:39:43:D8:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VC9jP3bo2Krqoytazhaj2zlD2Aw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/7koFe5UVhrdnjpUKhCro4JT1rF8.roa
Signing time: Fri 25 Mar 2022 14:02:23 +0000
ROA not before: Fri 25 Mar 2022 14:02:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34984
IP address blocks: 188.125.162.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 939260558 (0x37fbfa8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=542f633f76e8d8aaeaa32b5ace16a3db3943d80c
Validity
Not Before: Mar 25 14:02:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ee4a057b951586b7678e950a842ae8e094f5ac5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:47:f4:95:68:83:1a:01:bf:e0:6e:87:a5:b3:
48:c6:b1:ab:b7:13:0c:a5:dd:59:e8:38:a6:53:40:
0b:ef:53:be:a2:95:6d:ed:8d:5f:4b:98:5a:29:e2:
dd:48:41:77:cc:17:bf:7c:a5:76:2c:4d:87:b1:e0:
6f:a4:8f:89:a5:ca:4c:ef:89:a9:76:56:de:10:02:
74:ac:ea:e9:89:bb:12:bb:4b:70:e7:ef:e6:1e:75:
10:3c:c5:7c:17:ba:40:25:56:56:85:06:17:a0:a3:
f5:8c:0f:94:33:8b:6a:0d:96:fb:c4:47:17:ba:de:
43:40:20:1d:4c:20:2b:6d:6b:26:70:be:43:19:28:
5c:5b:f8:31:83:6d:94:79:83:7b:49:78:91:32:61:
e5:c7:ef:3b:d2:e7:0b:3d:6f:b3:cc:8c:97:7f:21:
d6:d1:bc:2f:4e:c0:d4:b3:b0:4c:ec:fc:71:62:0f:
87:8e:c8:3f:1d:03:1f:56:db:c3:c9:c7:2c:93:95:
bc:c8:17:f8:58:46:38:25:88:34:15:73:b4:36:98:
6f:a0:5b:a0:63:a0:4d:9b:40:8f:83:50:a2:f5:ff:
4d:c3:b1:49:dc:11:47:17:fa:d9:9f:83:35:b6:37:
67:5b:a3:fe:51:b5:4f:66:0d:e0:e1:bf:c2:a0:30:
9a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:4A:05:7B:95:15:86:B7:67:8E:95:0A:84:2A:E8:E0:94:F5:AC:5F
X509v3 Authority Key Identifier:
keyid:54:2F:63:3F:76:E8:D8:AA:EA:A3:2B:5A:CE:16:A3:DB:39:43:D8:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VC9jP3bo2Krqoytazhaj2zlD2Aw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/7koFe5UVhrdnjpUKhCro4JT1rF8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.125.162.0/24
Signature Algorithm: sha256WithRSAEncryption
21:de:b3:1f:ab:f6:c6:48:88:66:17:2a:b9:0c:b7:aa:34:34:
5e:59:62:8b:44:e6:3e:80:98:c4:8e:ec:22:0c:94:cf:63:31:
4c:f6:4b:fd:89:3c:ac:26:57:95:2c:1b:79:62:3d:6e:fe:a8:
0a:eb:d8:b4:71:6c:55:c8:ed:df:93:6f:a5:7a:9e:4e:27:37:
98:b2:52:6f:80:73:f1:ff:f8:60:20:1b:1e:7f:ed:ea:31:aa:
64:02:9a:7f:85:4e:d2:f1:cb:f3:f3:c3:50:f1:16:ef:92:0f:
a6:58:43:fd:62:fc:ba:d8:fd:e9:35:32:0f:99:54:ee:00:f7:
96:75:55:91:98:23:90:11:c1:6b:2c:59:2c:01:fb:5a:85:94:
1f:0e:0c:88:fd:aa:4d:7b:4e:2c:1e:2b:15:6f:1a:d9:62:63:
fd:1e:6c:83:aa:59:9e:41:c4:43:ce:7c:d5:af:10:8f:37:67:
06:74:42:23:6a:20:e9:4d:e4:bd:0a:54:f5:de:92:8a:da:9b:
9f:98:da:3e:d1:d8:ce:73:d1:6f:74:ca:09:61:be:43:28:1b:
b5:e7:41:71:15:11:10:ab:c2:e3:0c:ec:96:3c:45:a2:15:cc:
8a:2a:af:ae:20:c1:7a:0f:9d:78:99:5b:ae:5b:d9:07:56:25:
18:34:f5:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:47 2024 by rpki-client on console-fra.rpki-client.org