Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/axj_sN8eA5qFxrWBIFCLmrv2hSc.roa
File: axj_sN8eA5qFxrWBIFCLmrv2hSc.roa (raw, json)
Hash identifier: VEH8AygN5B0iTPUgyTNvwUJPdCqMHdNDSo4aI7YO+F0=
Subject key identifier: 6B:18:FF:B0:DF:1E:03:9A:85:C6:B5:81:20:50:8B:9A:BB:F6:85:27
Certificate issuer: /CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Certificate serial: 04F0EE9D
Authority key identifier: FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/axj_sN8eA5qFxrWBIFCLmrv2hSc.roa
Signing time: Thu 12 May 2022 05:59:02 +0000
ROA not before: Thu 12 May 2022 05:59:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 92.53.188.0/22 maxlen: 24
176.52.140.0/22 maxlen: 22
92.53.168.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82898589 (0x4f0ee9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Validity
Not Before: May 12 05:59:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6b18ffb0df1e039a85c6b58120508b9abbf68527
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d8:f3:55:fe:43:97:12:05:6c:9e:19:50:ef:
89:4f:a0:fa:40:08:0f:f5:64:c0:4e:48:ad:a9:47:
56:75:c7:1d:83:4f:2a:e9:53:43:0d:fc:4c:c6:84:
ea:5b:d6:c4:c9:94:c9:e4:e0:3c:c8:3e:cb:93:45:
ee:3c:56:53:0a:9f:0a:54:52:ce:14:1b:28:f9:bc:
fd:dc:8e:a6:f5:08:d2:f1:db:fd:ea:fe:58:0a:4a:
0a:88:a0:ab:62:f6:37:85:a0:d1:42:6e:0f:34:c3:
cb:b1:0c:a3:f7:fe:fd:90:cc:9e:d0:cc:cb:3e:36:
1b:60:1b:e6:33:b0:2a:8e:45:4a:26:18:f8:ed:92:
e9:07:3b:fb:0d:16:89:66:b9:1e:be:d3:e2:85:b0:
1d:4c:7d:2a:dd:bd:9e:26:3c:cc:13:a5:97:b9:8e:
b5:20:0a:b3:85:db:e0:4f:aa:86:be:bf:8c:15:70:
87:57:ee:f7:d6:b5:df:53:ec:e0:ac:81:7f:82:be:
eb:57:93:f4:8b:82:d0:5a:a7:43:f7:78:3b:f1:5c:
4c:b1:b4:08:da:74:5f:71:19:2e:16:47:f1:1b:5b:
8e:08:88:d7:f2:74:a5:5a:ce:fa:72:2b:1c:b5:d0:
4a:4c:b9:28:d4:0a:c8:b1:20:96:7d:cf:ac:34:51:
6e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:18:FF:B0:DF:1E:03:9A:85:C6:B5:81:20:50:8B:9A:BB:F6:85:27
X509v3 Authority Key Identifier:
keyid:FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/axj_sN8eA5qFxrWBIFCLmrv2hSc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/_neeViOLby6gaO3k4grvAMkEEys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.53.168.0/22
92.53.188.0/22
176.52.140.0/22
Signature Algorithm: sha256WithRSAEncryption
65:bd:41:fa:b0:c2:0e:3d:b3:17:a4:2d:e3:57:6f:80:4b:0a:
cb:ba:c7:93:b6:e5:5a:7c:71:9f:2b:49:3b:47:b5:db:8a:a1:
4a:4e:9a:db:32:c0:29:08:7b:c7:c3:1c:80:01:6a:c7:d5:31:
9d:16:24:2c:f2:97:db:c2:91:e6:f3:43:b3:13:a9:0e:4a:cf:
32:10:87:b0:48:7d:ad:a9:36:be:29:27:2b:ca:04:f2:66:20:
43:c2:71:43:d4:7c:b1:41:3a:47:07:c1:8b:22:c7:c8:3a:c9:
b6:5e:df:6b:56:be:08:e6:38:da:7d:9e:34:50:3d:d0:61:28:
ca:c1:be:2b:b5:96:a2:1e:19:12:4b:00:87:b6:63:fc:87:f8:
68:c5:80:80:ec:5f:7d:66:dd:f3:80:0a:c3:70:66:27:c8:df:
cb:ae:f3:06:82:e0:5d:4e:df:5a:7b:79:4a:75:b2:07:84:19:
eb:f5:dc:8c:5b:b6:79:96:96:27:10:e1:70:7b:b7:26:5b:c8:
e8:ac:56:60:ee:a8:a0:47:ca:17:53:0f:3d:85:bb:56:81:05:
e4:64:f6:b8:64:dc:61:a3:0e:1e:85:23:c0:f4:69:3a:0f:12:
cc:41:17:c5:0e:8b:7b:87:27:d1:69:ab:8b:5e:3f:90:03:8d:
aa:d7:9a:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:13 2024 by rpki-client on console-fra.rpki-client.org