Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/9170e3-e9b3-4d6d-8787-e46ea89bf849/1/2M6bGawvSkOq3c9m-a7Y9njSU-Y.roa
File: 2M6bGawvSkOq3c9m-a7Y9njSU-Y.roa (raw, json)
Hash identifier: gcvpuSJdvJx/KCFMkokS0fGgjW5aS0mfl5twp5JckK4=
Subject key identifier: D8:CE:9B:19:AC:2F:4A:43:AA:DD:CF:66:F9:AE:D8:F6:78:D2:53:E6
Certificate issuer: /CN=59a06c187953cfc8133b2beee5f01a15e45da078
Certificate serial: 018CC94BDA8122B6B0777EC593ACBFD94933
Authority key identifier: 59:A0:6C:18:79:53:CF:C8:13:3B:2B:EE:E5:F0:1A:15:E4:5D:A0:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WaBsGHlTz8gTOyvu5fAaFeRdoHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/9170e3-e9b3-4d6d-8787-e46ea89bf849/1/2M6bGawvSkOq3c9m-a7Y9njSU-Y.roa
Signing time: Tue 02 Jan 2024 08:30:40 +0000
ROA not before: Tue 02 Jan 2024 08:30:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210994
IP address blocks: 91.233.120.0/24 maxlen: 24
194.104.235.0/24 maxlen: 24
2a11:6740::/29 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4b:da:81:22:b6:b0:77:7e:c5:93:ac:bf:d9:49:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59a06c187953cfc8133b2beee5f01a15e45da078
Validity
Not Before: Jan 2 08:30:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d8ce9b19ac2f4a43aaddcf66f9aed8f678d253e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:b9:3f:da:7f:95:5b:cc:cb:ab:af:54:3c:0d:
e2:8b:b3:f8:01:07:ea:69:f1:b1:dd:84:ff:cf:74:
b0:3b:ae:82:6b:44:ce:5b:46:3c:a6:4d:9c:c9:b7:
5d:26:27:00:56:99:2c:a8:3f:0d:55:8b:09:4e:ba:
04:89:4b:8b:5a:93:d4:0d:7c:ff:67:80:54:fb:54:
f5:4a:19:1f:ee:cc:28:48:bc:e7:92:63:79:93:07:
af:b2:67:4d:76:53:2a:10:0d:7d:c2:d2:f6:18:40:
6d:93:5d:73:36:33:eb:f5:0b:ef:ae:b7:99:b0:24:
49:b0:78:78:e6:c6:8f:b0:72:7c:4b:0a:99:12:f1:
80:6f:9d:33:e9:55:92:ac:ab:ef:3b:13:0d:62:d8:
02:02:33:ee:53:70:c9:35:19:36:f6:18:e4:8b:51:
54:77:70:3c:f1:25:7c:85:78:3a:42:f1:16:3f:c2:
b7:90:35:f3:55:0b:b7:f4:0f:63:fe:b2:0a:04:f6:
a2:a2:01:6e:d6:c6:3e:81:58:aa:04:06:8b:e8:b4:
d4:bf:54:ac:f6:ac:96:99:c5:32:5d:00:1f:20:ab:
4d:cc:0a:08:fc:7e:5b:a6:3f:69:06:17:5c:f1:84:
8f:27:4a:e2:11:7d:7c:a0:a7:e1:1d:03:b6:76:95:
d1:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:CE:9B:19:AC:2F:4A:43:AA:DD:CF:66:F9:AE:D8:F6:78:D2:53:E6
X509v3 Authority Key Identifier:
keyid:59:A0:6C:18:79:53:CF:C8:13:3B:2B:EE:E5:F0:1A:15:E4:5D:A0:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WaBsGHlTz8gTOyvu5fAaFeRdoHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9170e3-e9b3-4d6d-8787-e46ea89bf849/1/2M6bGawvSkOq3c9m-a7Y9njSU-Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9170e3-e9b3-4d6d-8787-e46ea89bf849/1/WaBsGHlTz8gTOyvu5fAaFeRdoHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.233.120.0/24
194.104.235.0/24
IPv6:
2a11:6740::/29
Signature Algorithm: sha256WithRSAEncryption
0c:d0:7b:62:99:2c:d3:98:a6:ad:72:1f:e5:0c:e6:85:ed:be:
43:1f:11:51:cb:b7:81:ce:2e:38:ff:d9:de:91:19:b8:d8:1b:
1d:34:cc:35:db:e1:da:2b:c0:c3:ea:b1:cf:51:b4:f9:32:da:
54:a0:b8:f6:8f:68:93:69:bf:7d:31:be:ed:01:77:8c:94:5a:
ec:ec:58:f5:2c:d1:3c:f8:be:89:dc:df:5a:6b:e7:f0:67:75:
e1:db:66:ed:a4:b8:f0:8e:41:c3:f2:9d:27:04:bd:25:5d:10:
dd:0f:94:33:e5:c1:0a:52:26:e7:07:60:4a:cb:60:5f:a2:ab:
13:2d:fd:c7:bf:60:6a:5d:65:6a:d2:78:d5:4d:36:a4:7d:52:
00:a0:fd:df:07:ee:6e:58:be:4f:ca:66:a5:b4:9e:2b:af:56:
c9:18:e8:88:7c:03:49:43:ef:d9:b3:8d:92:69:e0:69:8a:1f:
55:3b:ee:82:4b:83:9d:c1:f8:aa:8a:8c:3e:bb:58:dd:49:3e:
97:79:7a:d3:c8:fe:fe:c5:46:f7:ff:7f:09:3e:79:2f:d8:06:
b2:71:70:d9:1a:71:6d:9f:66:ff:8d:db:c6:42:b2:ee:5e:81:
fe:c7:fb:73:1e:54:e6:ab:b6:89:7d:a8:72:c3:a2:2f:72:95:
4e:4d:01:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:22:22 2025 by rpki-client