Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/7a39b1-1d1c-4919-b19c-3eebe7196972/1/dIHmrEGVHqzFwfRoLtD9p8xsiFg.roa
File: dIHmrEGVHqzFwfRoLtD9p8xsiFg.roa (raw, json)
Hash identifier: lLOhnuN4J98ZWLGoItKXN1AcHrRG4AYoKZUFBIh+p/c=
Subject key identifier: 74:81:E6:AC:41:95:1E:AC:C5:C1:F4:68:2E:D0:FD:A7:CC:6C:88:58
Certificate issuer: /CN=679a75debd65359a45317f203f11a321e14b2f2c
Certificate serial: 065ABACB
Authority key identifier: 67:9A:75:DE:BD:65:35:9A:45:31:7F:20:3F:11:A3:21:E1:4B:2F:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5p13r1lNZpFMX8gPxGjIeFLLyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/7a39b1-1d1c-4919-b19c-3eebe7196972/1/dIHmrEGVHqzFwfRoLtD9p8xsiFg.roa
Signing time: Thu 07 Apr 2022 23:39:32 +0000
ROA not before: Thu 07 Apr 2022 23:39:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49999
IP address blocks: 93.113.31.0/24 maxlen: 24
93.114.129.0/24 maxlen: 24
86.106.135.0/24 maxlen: 24
86.104.228.0/24 maxlen: 24
89.32.127.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106609355 (0x65abacb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=679a75debd65359a45317f203f11a321e14b2f2c
Validity
Not Before: Apr 7 23:39:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7481e6ac41951eacc5c1f4682ed0fda7cc6c8858
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f9:01:e7:bb:a3:d3:c6:e9:9f:f7:f1:3a:f1:
7c:ea:e1:b7:a0:03:6f:b8:e4:b3:54:cd:a7:f6:c7:
c4:3c:90:81:e9:cb:ce:06:88:b7:b8:f7:82:d9:01:
da:d0:ec:a9:21:bb:8c:0f:2c:6f:b8:76:ff:c3:47:
e8:d8:70:95:ec:56:7c:38:cf:78:a7:b5:fe:74:b2:
f3:f1:30:a7:f1:63:16:d5:a8:fc:aa:15:27:ec:84:
76:ad:b9:9c:47:ef:fa:fc:c0:c9:cb:8b:af:cc:99:
71:c3:71:44:41:27:20:71:7d:ae:22:72:35:c2:15:
bc:c1:1d:fa:a7:cf:f3:f9:19:df:48:bf:36:74:de:
30:9f:49:9a:63:90:1b:e5:a0:c6:7d:25:7a:e5:3b:
a6:05:fa:79:92:9c:9c:0a:b5:cb:aa:0d:66:8b:30:
23:34:ae:3c:a5:e4:ee:57:0a:1a:8a:31:bd:88:bf:
68:88:91:e4:a3:aa:87:21:d7:56:29:87:12:e3:66:
4c:69:d7:d9:da:5d:3d:6f:fa:1d:ec:fc:bf:bc:c1:
af:19:e9:b3:da:cc:8e:24:46:e8:47:2b:2b:db:7c:
91:9d:e4:b6:74:24:c4:5b:a2:f9:3b:52:38:1c:b4:
ee:9b:d6:0d:7d:b3:d8:68:ab:01:cd:19:ff:d1:15:
9d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:81:E6:AC:41:95:1E:AC:C5:C1:F4:68:2E:D0:FD:A7:CC:6C:88:58
X509v3 Authority Key Identifier:
keyid:67:9A:75:DE:BD:65:35:9A:45:31:7F:20:3F:11:A3:21:E1:4B:2F:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5p13r1lNZpFMX8gPxGjIeFLLyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7a39b1-1d1c-4919-b19c-3eebe7196972/1/dIHmrEGVHqzFwfRoLtD9p8xsiFg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7a39b1-1d1c-4919-b19c-3eebe7196972/1/Z5p13r1lNZpFMX8gPxGjIeFLLyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.104.228.0/24
86.106.135.0/24
89.32.127.0/24
93.113.31.0/24
93.114.129.0/24
Signature Algorithm: sha256WithRSAEncryption
66:1f:77:d2:34:af:4f:30:26:52:19:ef:41:9b:30:d2:59:f8:
2d:6e:c6:7b:02:03:bc:7a:26:a1:7e:8c:73:47:3f:e6:04:f1:
41:67:5d:8d:57:f4:aa:44:2a:bd:21:88:84:ff:5e:8c:c1:e4:
16:f7:50:2b:e9:e1:c4:4e:39:0c:17:d1:00:4b:93:32:0f:44:
a5:b1:38:a2:3a:14:4f:cd:b7:d0:af:fe:d2:b4:41:85:e2:9e:
3f:b0:df:a1:de:a5:5a:8c:e7:56:0b:38:1b:03:36:9b:42:76:
7e:51:e3:da:19:18:18:62:2b:8f:35:48:8d:b2:f9:3b:e5:76:
5c:3e:8c:89:8c:fd:28:19:0b:71:8f:cd:79:4b:7a:38:61:29:
d6:c2:cf:cd:35:4b:bc:0a:d9:2e:71:2d:99:22:39:94:eb:9a:
d8:13:bf:19:dc:82:23:47:ad:cd:78:7c:5f:ad:e8:39:cd:e9:
bd:d2:0e:57:b7:0f:e9:a1:ca:dc:e0:e7:0d:6c:89:41:18:bf:
4c:40:fc:f8:39:08:54:b0:04:e8:2c:7d:dc:a3:de:c8:1a:a7:
2a:08:ab:14:bf:9d:5b:a7:fe:09:59:0a:37:dd:25:d3:85:ce:
1e:f3:fb:88:c3:62:a4:98:40:85:aa:7c:9f:7e:94:cd:90:68:
ad:a9:7e:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:30 2023 by rpki-client on console-ams.rpki-client.org