Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/7a39b1-1d1c-4919-b19c-3eebe7196972/1/dACPXxXh_lzCFepO8tfL2BB_fWI.roa
File: dACPXxXh_lzCFepO8tfL2BB_fWI.roa (raw, json)
Hash identifier: 2/SSCLue+DMZfmdLlFfivnlWXV4j71ByoQMjPmMUl/E=
Subject key identifier: 74:00:8F:5F:15:E1:FE:5C:C2:15:EA:4E:F2:D7:CB:D8:10:7F:7D:62
Certificate issuer: /CN=679a75debd65359a45317f203f11a321e14b2f2c
Certificate serial: 05EDAEB2
Authority key identifier: 67:9A:75:DE:BD:65:35:9A:45:31:7F:20:3F:11:A3:21:E1:4B:2F:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5p13r1lNZpFMX8gPxGjIeFLLyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/7a39b1-1d1c-4919-b19c-3eebe7196972/1/dACPXxXh_lzCFepO8tfL2BB_fWI.roa
Signing time: Tue 01 Mar 2022 19:42:42 +0000
ROA not before: Tue 01 Mar 2022 19:42:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49999
IP address blocks: 94.177.17.0/24 maxlen: 24
93.114.129.0/24 maxlen: 24
86.106.135.0/24 maxlen: 24
86.104.228.0/24 maxlen: 24
89.32.127.0/24 maxlen: 24
89.21.64.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99462834 (0x5edaeb2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=679a75debd65359a45317f203f11a321e14b2f2c
Validity
Not Before: Mar 1 19:42:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=74008f5f15e1fe5cc215ea4ef2d7cbd8107f7d62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:db:ef:c2:9f:a9:be:21:96:c1:11:01:f0:dc:
ae:14:76:66:9d:e2:35:75:90:dd:4d:75:52:6c:1d:
af:85:db:e7:c4:02:3e:4b:5c:00:c9:8e:ab:9a:5f:
81:1a:dc:32:7b:23:4a:ae:12:c2:5a:1e:b5:5d:26:
68:d2:f7:de:87:63:7c:ee:58:79:b2:5f:46:62:a7:
05:de:b9:df:20:bd:df:27:e9:d1:f7:7c:02:a1:79:
bc:2c:42:5b:5d:53:e6:b5:3a:d9:5c:87:d8:df:65:
0c:af:41:62:36:33:3c:c6:1c:83:c0:56:1d:a9:56:
b8:0a:42:fc:cc:62:b6:82:8c:c7:9f:23:58:3a:ad:
36:ce:4b:e8:1b:6b:12:9b:7f:fe:2e:80:72:b4:fd:
f1:23:1e:a0:98:47:a2:31:16:0c:f5:42:b2:51:37:
1d:e5:d9:ff:1c:1a:3d:4b:1f:be:c4:6a:1c:3e:94:
0e:4c:18:99:48:10:c0:e4:06:ec:bd:42:31:4b:02:
89:9a:70:49:95:3c:ab:8b:77:e5:71:2b:05:b0:03:
05:17:5b:e8:fd:1c:da:33:bc:d1:75:cf:75:b7:29:
e9:5d:2a:47:9b:1c:fb:d4:b4:48:d5:d0:81:50:6a:
db:2a:9a:af:a6:7e:6d:de:fd:7e:76:08:c5:e8:9a:
e2:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:00:8F:5F:15:E1:FE:5C:C2:15:EA:4E:F2:D7:CB:D8:10:7F:7D:62
X509v3 Authority Key Identifier:
keyid:67:9A:75:DE:BD:65:35:9A:45:31:7F:20:3F:11:A3:21:E1:4B:2F:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5p13r1lNZpFMX8gPxGjIeFLLyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7a39b1-1d1c-4919-b19c-3eebe7196972/1/dACPXxXh_lzCFepO8tfL2BB_fWI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7a39b1-1d1c-4919-b19c-3eebe7196972/1/Z5p13r1lNZpFMX8gPxGjIeFLLyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.104.228.0/24
86.106.135.0/24
89.21.64.0/22
89.32.127.0/24
93.114.129.0/24
94.177.17.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:e6:03:d4:e8:d8:03:eb:37:7e:aa:78:84:d8:b4:bf:ef:c8:
5d:a9:71:d0:8a:a4:d5:8c:58:67:78:03:06:9b:4e:0d:33:82:
da:d3:e2:8d:0a:28:da:97:46:c1:78:aa:3a:d2:9c:94:ee:01:
4d:57:e8:c8:2e:6c:d4:a8:53:94:ab:40:ab:91:01:68:1d:7a:
73:44:9b:a2:14:b4:f2:ff:f2:3a:9b:43:b5:f9:40:2b:17:71:
ae:8f:fa:38:bc:87:97:66:ea:c7:f2:75:40:a6:61:0c:04:d2:
9d:d8:f7:10:42:e6:9c:04:22:1f:b3:17:e7:2b:f1:97:a5:6d:
e7:ad:fa:a3:8f:7a:aa:db:c9:f4:58:5d:5f:9e:ed:22:c2:4f:
67:67:34:7f:f8:ff:ef:49:5e:84:9d:da:d1:ff:69:7d:3d:b5:
71:bc:51:7d:9e:9a:6a:6f:a7:e5:10:8f:ed:b8:e0:ab:7c:b3:
4f:b7:bf:af:c5:93:8a:32:05:18:c0:7d:3c:33:ab:24:42:dc:
97:ce:31:1e:f2:b2:5e:eb:7a:50:19:6f:7f:e2:19:ec:8b:6d:
de:53:63:c3:3c:5e:7f:6b:d5:6e:f1:7e:04:77:8b:b3:af:8a:
1c:38:39:9a:8a:85:d6:88:9a:26:37:fa:cb:ba:97:94:b2:26:
da:39:45:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:30 2023 by rpki-client on console-ams.rpki-client.org