Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/4c8Bfnq2lZ4UvYpZoH5anExL0u0.roa
File: 4c8Bfnq2lZ4UvYpZoH5anExL0u0.roa (raw, json)
Hash identifier: 5der8Qj3Ar0mDIl62hat5etU5Z/QZ2xNNBuXBS7vqZs=
Subject key identifier: E1:CF:01:7E:7A:B6:95:9E:14:BD:8A:59:A0:7E:5A:9C:4C:4B:D2:ED
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0186B636A9BED5CDFDE607F85A06C99A8FAD
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/4c8Bfnq2lZ4UvYpZoH5anExL0u0.roa
Signing time: Mon 06 Mar 2023 09:18:00 +0000
ROA not before: Mon 06 Mar 2023 09:18:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200017
IP address blocks: 89.43.199.0/24 maxlen: 24
87.247.148.0/24 maxlen: 24
213.32.251.0/24 maxlen: 24
91.188.206.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:b6:36:a9:be:d5:cd:fd:e6:07:f8:5a:06:c9:9a:8f:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Mar 6 09:18:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e1cf017e7ab6959e14bd8a59a07e5a9c4c4bd2ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:1d:60:bb:d0:39:d2:2b:ad:ce:1b:49:23:82:
3f:e8:83:18:14:db:cd:6d:ba:c4:5e:02:de:3e:c3:
13:43:3b:ad:f1:27:53:da:b3:ba:ea:0d:92:59:f6:
9c:62:4f:79:f6:47:ff:99:9e:a5:b7:fc:06:c9:17:
8e:1f:f4:57:ef:e9:8d:b8:3e:71:b4:26:79:2e:38:
c8:22:d2:30:3a:80:f6:73:ee:21:fb:c7:29:b7:65:
1e:7a:b3:79:59:48:c2:bf:a5:d9:e5:f2:a2:40:71:
05:33:18:0d:63:82:45:02:89:df:c9:11:78:3d:19:
02:e5:e1:29:78:c6:cc:5a:6a:10:50:56:2d:ac:dc:
83:51:ac:30:b9:71:d7:a2:84:19:56:d8:56:3a:c9:
f4:35:55:45:f0:9f:28:d9:e1:1a:19:31:f8:20:db:
4b:b8:87:83:77:4b:3e:44:67:16:63:e3:3d:27:72:
68:cd:4a:53:cc:f4:af:07:1f:dc:ce:f1:55:25:d7:
c3:1d:a3:c3:68:9c:09:23:36:97:c0:c7:c8:3e:76:
d9:22:1d:25:a8:1f:e0:a9:ee:ac:8b:f2:e6:f9:88:
ce:57:1f:48:72:e1:7a:c0:da:4b:1b:ef:de:11:f9:
9b:5c:fb:e7:50:88:ca:e7:1d:af:2e:88:99:e9:ad:
d4:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:CF:01:7E:7A:B6:95:9E:14:BD:8A:59:A0:7E:5A:9C:4C:4B:D2:ED
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/4c8Bfnq2lZ4UvYpZoH5anExL0u0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.247.148.0/24
89.43.199.0/24
91.188.206.0/24
213.32.251.0/24
Signature Algorithm: sha256WithRSAEncryption
89:61:95:01:ee:fb:2c:07:9e:c0:04:61:1b:01:e3:f1:77:bc:
03:10:ac:4a:68:c7:43:03:6e:f6:90:f7:f9:6b:70:10:6f:45:
86:51:b7:8c:99:d8:85:f8:7e:9f:c6:fd:24:ab:ec:9f:20:64:
52:04:a6:f2:fc:20:11:5e:62:06:a5:7e:d4:49:fe:fe:85:bd:
26:f8:e6:96:ae:52:b8:33:f3:44:ac:60:0f:61:b5:4b:a0:d8:
c6:e8:ff:f9:73:cb:e7:3a:05:1f:a1:7b:a4:bd:1a:ce:9c:9c:
81:b5:3d:12:80:2e:f1:46:69:85:a3:15:9b:72:97:11:25:97:
ff:e5:19:5e:db:c0:cf:90:eb:a5:13:c8:12:9f:08:db:fb:7f:
e9:61:84:11:b9:8f:32:89:62:f7:71:11:45:0f:ed:25:20:0d:
17:77:19:6f:6e:25:16:87:17:59:da:52:90:ad:78:4e:75:eb:
f9:42:05:bc:3f:24:5d:4f:63:bf:8d:50:a2:a2:64:3f:92:03:
98:aa:f7:06:ba:1c:2b:e7:48:6b:76:55:8f:db:17:da:fe:0f:
3e:3b:1c:04:0f:27:73:7a:bc:ed:05:f8:23:83:21:36:25:9a:
1e:7d:fa:f3:b1:40:b7:6f:ea:c2:2e:55:af:fa:9e:42:a1:d5:
96:79:c6:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:44 2024 by rpki-client on console-fra.rpki-client.org