Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/7BrsJVkq7HfcEUlrPLQuw7EfauA.roa
File: 7BrsJVkq7HfcEUlrPLQuw7EfauA.roa (raw, json)
Hash identifier: k1eKo0/ei+2jxNDiqL8kJc1MpqrL4zZ96cvXSI6sVrc=
Subject key identifier: EC:1A:EC:25:59:2A:EC:77:DC:11:49:6B:3C:B4:2E:C3:B1:1F:6A:E0
Certificate issuer: /CN=6bc5de7d7255b7d58260c65a120b164ef10ef903
Certificate serial: 01856D8AC511A2F97AC4EC85ED11A3C06E4C
Authority key identifier: 6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/7BrsJVkq7HfcEUlrPLQuw7EfauA.roa
Signing time: Sun 01 Jan 2023 13:34:49 +0000
ROA not before: Sun 01 Jan 2023 13:34:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202636
IP address blocks: 158.255.232.0/24 maxlen: 24
185.100.90.0/23 maxlen: 23
185.100.88.0/23 maxlen: 23
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:8a:c5:11:a2:f9:7a:c4:ec:85:ed:11:a3:c0:6e:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bc5de7d7255b7d58260c65a120b164ef10ef903
Validity
Not Before: Jan 1 13:34:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ec1aec25592aec77dc11496b3cb42ec3b11f6ae0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:f0:11:5a:62:12:82:0a:6a:b5:dd:93:2b:de:
1f:87:6a:a3:45:03:95:a4:69:af:9c:b6:ca:0d:a6:
da:76:0e:06:63:ba:25:d0:d1:ac:a8:64:ab:26:ee:
04:58:d4:0d:7a:c0:30:e8:13:c4:34:92:82:13:ae:
2c:b0:f7:ec:ff:39:9b:69:17:b4:07:35:2e:ae:ef:
00:98:57:67:ec:55:e4:74:87:c9:71:0b:25:0a:83:
89:03:9c:67:4c:1a:fc:09:6d:6a:81:c5:e3:d2:87:
39:3f:80:00:87:28:d2:99:50:de:c4:d8:ca:c5:ba:
73:14:ed:65:33:71:fe:50:c9:06:80:56:cf:28:3f:
73:85:82:f8:f1:db:92:61:95:e9:11:65:bc:2f:29:
66:46:f4:53:e8:96:40:c7:96:e0:c2:fe:aa:3d:f5:
7b:ab:17:0e:92:c5:ab:21:09:4b:63:1b:39:37:d7:
a5:5f:5d:b4:3f:96:60:5a:89:0c:55:d4:d8:ca:c2:
6a:ea:b2:86:9c:a9:0e:58:3a:69:2f:ba:57:48:82:
be:ad:01:43:11:db:4d:b5:40:da:67:78:6b:27:6d:
26:aa:68:24:2e:75:e7:1f:85:a6:bd:cf:dc:bf:3b:
3a:16:27:ec:42:cb:bd:ee:13:62:ba:c0:74:ab:cd:
dd:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:1A:EC:25:59:2A:EC:77:DC:11:49:6B:3C:B4:2E:C3:B1:1F:6A:E0
X509v3 Authority Key Identifier:
keyid:6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/7BrsJVkq7HfcEUlrPLQuw7EfauA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.255.232.0/24
185.100.88.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:64:4f:5d:5b:74:bf:85:a1:b8:39:c9:c3:44:df:b1:f3:24:
a8:80:44:35:9d:94:c0:6e:cb:4d:11:1c:02:ed:2c:3d:ba:e9:
76:63:e0:f2:58:ca:b9:a3:86:90:36:68:a8:f6:a3:27:66:02:
98:bb:cb:50:4d:48:c3:e0:43:b3:af:ff:d1:4c:dc:fd:63:6c:
7f:ab:4a:95:ae:8a:8a:5a:d0:2b:5c:9b:db:61:1d:46:2c:25:
28:20:59:8d:e8:5d:57:c2:a6:d3:c6:f7:a0:0c:e1:fc:f7:d9:
a3:90:52:28:b7:59:52:04:9b:f2:78:d0:19:3b:25:f8:f4:5d:
b7:65:b8:0b:8e:4f:a6:45:91:f5:cc:0f:22:59:a0:42:6b:8b:
50:ee:81:5b:57:27:fa:7a:46:6b:27:d0:5e:fb:21:9c:e1:7f:
4e:18:45:fc:12:de:a2:11:63:57:b1:c5:ff:e4:12:84:6c:28:
aa:b1:c8:6b:48:04:f1:aa:2d:c7:f7:3d:a6:75:a8:a2:7d:00:
5a:8e:ee:47:09:70:e5:aa:bd:ed:75:24:24:c4:ea:a5:36:61:
e5:cb:2a:42:23:b3:b7:ac:ec:d1:ac:9f:8d:3a:ef:88:97:43:
91:9c:ea:79:9b:cd:36:17:95:00:be:dc:46:7d:a4:23:9f:d5:
f2:a9:2a:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:54 2024 by rpki-client on console-ams.rpki-client.org