Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/Ro23QBucfTpe3TVQPY5t3w9wVw8.roa
File: Ro23QBucfTpe3TVQPY5t3w9wVw8.roa (raw, json)
Hash identifier: jW3tVRD1SbLVzEW2eiFkCJ0D7cetvew+m98URNPzdHc=
Subject key identifier: 46:8D:B7:40:1B:9C:7D:3A:5E:DD:35:50:3D:8E:6D:DF:0F:70:57:0F
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0187512B73F445D7C7B5F59E16452E9CBD14
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/Ro23QBucfTpe3TVQPY5t3w9wVw8.roa
Signing time: Wed 05 Apr 2023 11:26:54 +0000
ROA not before: Wed 05 Apr 2023 11:26:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 178.239.202.0/24 maxlen: 24
178.239.201.0/24 maxlen: 24
93.114.195.0/24 maxlen: 24
185.230.250.0/24 maxlen: 24
185.229.107.0/24 maxlen: 24
89.43.209.0/24 maxlen: 24
89.46.92.0/24 maxlen: 24
193.42.54.0/23 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:51:2b:73:f4:45:d7:c7:b5:f5:9e:16:45:2e:9c:bd:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Apr 5 11:26:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=468db7401b9c7d3a5edd35503d8e6ddf0f70570f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:9e:0a:a7:6d:3c:45:6c:3e:9b:37:a4:3e:a3:
37:84:3c:0e:46:e9:b8:6a:9b:7c:bd:29:7b:2d:db:
20:2a:8f:a1:91:a6:07:3c:7a:e2:df:9e:b9:ed:f2:
9c:f2:29:58:76:bc:83:a1:e6:34:ee:cd:c6:3d:3b:
6b:eb:56:ae:3b:bb:3d:81:07:16:b3:69:68:69:d4:
89:6c:81:fa:c5:2b:89:f6:87:3b:66:9e:47:06:3b:
dc:b1:58:0f:64:ef:c2:b7:9b:42:2f:71:67:e0:1b:
45:29:19:8e:36:bd:ef:6d:27:f1:03:30:72:04:a5:
58:78:95:6e:f7:c6:e4:d9:1e:40:11:05:a1:84:ca:
82:be:9a:e7:bd:68:8b:ee:5d:dc:53:02:2c:14:ce:
62:ce:e0:dd:5d:26:3f:7c:05:65:ea:63:8a:15:4b:
c3:c5:8a:44:9a:8e:23:20:68:29:61:8a:cf:b7:e2:
71:1b:e4:80:cc:11:44:1f:9c:c3:99:52:86:f5:a6:
55:d1:a5:ba:2d:31:bc:aa:da:38:1f:86:fc:ac:65:
aa:97:5d:e8:40:d5:b6:47:1b:75:02:29:3c:d1:33:
88:7c:c8:dd:aa:f3:a8:60:7c:98:50:c7:c5:2e:c5:
b3:f2:c5:f9:2b:72:67:85:0e:a1:f6:58:35:bc:e7:
75:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:8D:B7:40:1B:9C:7D:3A:5E:DD:35:50:3D:8E:6D:DF:0F:70:57:0F
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/Ro23QBucfTpe3TVQPY5t3w9wVw8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.43.209.0/24
89.46.92.0/24
93.114.195.0/24
178.239.201.0-178.239.202.255
185.229.107.0/24
185.230.250.0/24
193.42.54.0/23
Signature Algorithm: sha256WithRSAEncryption
29:f0:45:54:08:81:6a:74:5f:16:6f:f7:77:68:61:88:8f:e3:
90:aa:33:59:94:53:2c:60:41:0c:57:41:f8:ac:0f:21:f8:0f:
7e:8c:4f:48:ae:d8:89:d8:f1:3f:76:b2:7b:e8:9f:91:e2:31:
9c:80:5f:b7:cf:df:b2:65:53:85:5c:4d:96:8d:21:be:0c:7a:
70:0e:42:7e:db:7a:ae:e8:3b:79:bb:e3:ce:38:7b:54:de:f2:
1b:c2:24:50:81:54:dd:4f:fc:f2:ab:ec:32:d5:fa:73:3b:0c:
0e:72:f4:8a:ba:b5:59:87:1d:ef:7d:18:ed:fe:76:44:66:62:
e7:6a:03:e8:79:5c:26:0c:58:af:e1:90:a1:87:ff:c8:5a:60:
04:8f:9e:0e:14:77:3a:a4:69:61:62:75:6f:49:d6:a0:1c:aa:
2b:fc:1a:f9:de:56:81:1c:7c:f4:11:0e:67:fd:03:2b:91:5c:
45:d6:e9:8d:fe:be:b8:a2:37:2d:f5:6b:07:0c:62:d4:4f:c2:
15:22:d8:67:90:d3:e8:bb:2a:29:c4:97:26:36:5d:2c:38:ac:
44:3a:d9:ff:dc:7a:59:6b:77:59:4e:3e:a9:38:5f:e7:41:ba:
cf:89:76:7b:dd:4a:11:7d:16:ae:d4:5b:b4:ab:3a:98:c3:a9:
ec:c2:9f:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:11 2024 by rpki-client on console-ams.rpki-client.org