Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/eS6YuzZOPlgxdyd0CZA0yFihnbs.roa
File: eS6YuzZOPlgxdyd0CZA0yFihnbs.roa (raw, json)
Hash identifier: 3APA1gfv35iqUcxKu/c3iQvGTHNui7ZxJxhdeJVUFwc=
Subject key identifier: 79:2E:98:BB:36:4E:3E:58:31:77:27:74:09:90:34:C8:58:A1:9D:BB
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0185710316EF1D8239D07440A2AA965A1720
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/eS6YuzZOPlgxdyd0CZA0yFihnbs.roa
Signing time: Mon 02 Jan 2023 05:45:05 +0000
ROA not before: Mon 02 Jan 2023 05:45:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205544
IP address blocks: 192.159.99.0/24 maxlen: 24
192.159.100.0/22 maxlen: 22
95.214.184.0/22 maxlen: 22
171.22.104.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:03:16:ef:1d:82:39:d0:74:40:a2:aa:96:5a:17:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 2 05:45:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=792e98bb364e3e5831772774099034c858a19dbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:6d:cf:c6:a1:1b:72:80:77:84:0c:3f:17:d4:
2a:dc:e1:6a:ec:1e:51:99:dc:e4:5f:b5:57:72:5f:
20:dc:7f:f1:36:e3:f1:66:5b:b5:58:c6:7a:69:df:
e1:04:ea:3f:2e:c8:30:6b:b7:58:40:47:77:9c:f3:
45:08:44:52:07:d8:52:86:08:c1:6a:86:81:30:b5:
b3:b3:c2:bb:4d:44:41:15:9e:f0:3d:1a:76:47:3b:
a1:4d:94:45:65:15:00:7f:49:06:e3:a9:31:8f:85:
0a:5f:c6:fa:a6:57:55:e4:4f:a9:46:3e:e0:9c:98:
96:4e:76:71:ac:7c:0d:46:bc:ee:65:a7:7c:6c:cb:
fa:6b:92:1c:b1:7f:6c:9c:a0:57:ef:c9:c5:91:a4:
6e:2b:59:d9:17:13:ab:b0:5e:cd:65:58:fa:22:ca:
eb:7d:43:1e:dc:d0:ff:0a:57:02:b1:44:9a:f7:eb:
b7:42:ce:d0:9d:6b:f3:14:3f:d5:27:94:86:2d:bc:
0a:42:db:99:0e:9b:51:3c:2a:ba:2c:ca:cb:66:20:
40:ab:64:ad:63:47:62:b8:37:28:17:79:91:41:f0:
a7:9a:7d:4c:f7:a0:93:43:ea:99:58:a7:fa:c5:12:
90:2a:de:82:c5:34:be:bc:ab:10:14:ca:2e:f7:cc:
90:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:2E:98:BB:36:4E:3E:58:31:77:27:74:09:90:34:C8:58:A1:9D:BB
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/eS6YuzZOPlgxdyd0CZA0yFihnbs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.184.0/22
171.22.104.0/22
192.159.99.0-192.159.103.255
Signature Algorithm: sha256WithRSAEncryption
4f:9f:db:af:ff:60:0b:04:19:71:e0:6e:92:7d:b6:65:4a:3d:
d7:17:ab:72:57:c6:10:19:8c:a3:fc:f4:cb:81:5d:e0:e0:e4:
d6:25:9d:bb:62:cf:40:ad:8d:00:79:5f:4e:08:54:be:e1:15:
6f:63:af:86:81:4a:0c:8c:a6:c5:5f:2b:4d:1e:34:4f:97:3a:
c2:5d:a6:45:a4:b8:5a:d5:07:e3:49:bf:c4:41:05:17:fb:26:
7b:1d:02:51:2d:3c:9c:58:cf:81:de:aa:64:36:71:4d:bd:e2:
27:04:72:11:dd:1c:b6:29:27:ba:4d:26:30:f9:ef:33:53:d0:
26:dc:0a:9c:02:2f:2a:c2:11:17:1f:82:63:29:f5:ca:d0:b9:
d4:c0:95:e3:1e:74:bd:6a:85:1d:b4:20:aa:d5:1f:ef:93:cf:
52:35:bb:36:41:5b:ad:09:9b:44:e2:61:19:d0:e2:57:d0:19:
c2:2b:10:91:40:78:7f:62:12:86:27:30:ac:3e:4f:64:f3:fb:
7e:db:f1:c6:52:47:3b:84:91:c6:b3:c5:2d:8e:10:05:57:83:
eb:e5:9d:b1:9d:e1:36:ca:7c:95:d9:52:e7:56:b0:05:8d:e2:
d5:41:79:bd:95:0a:b2:0d:25:9b:1c:53:05:40:6d:2d:7d:b3:
68:73:26:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:02 2023 by rpki-client on console-fra.rpki-client.org