Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/fCVTTONr_ufIL76RtnYtKYRTQXY.roa
File: fCVTTONr_ufIL76RtnYtKYRTQXY.roa (raw, json)
Hash identifier: ZpvoV3TVXQzSaBBu+Q8a1ZUv528wZwafh+3KW7oC3yg=
Subject key identifier: 7C:25:53:4C:E3:6B:FE:E7:C8:2F:BE:91:B6:76:2D:29:84:53:41:76
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0186BC3342169CC8E383729545A6DA89BF27
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/fCVTTONr_ufIL76RtnYtKYRTQXY.roa
Signing time: Tue 07 Mar 2023 13:12:01 +0000
ROA not before: Tue 07 Mar 2023 13:12:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 139660
IP address blocks: 89.33.14.0/24 maxlen: 24
185.245.239.0/24 maxlen: 24
103.205.26.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:bc:33:42:16:9c:c8:e3:83:72:95:45:a6:da:89:bf:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Mar 7 13:12:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7c25534ce36bfee7c82fbe91b6762d2984534176
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2f:f4:93:14:95:a9:a7:30:6d:11:ba:0d:61:
4f:22:7b:2e:1a:69:2a:28:84:15:62:a3:99:19:dd:
d4:0e:d9:14:69:ba:c7:d8:ca:b3:16:8f:4c:f8:ba:
83:ca:5d:50:3a:f4:f0:75:a9:9f:d6:0a:0f:bb:d7:
8d:c8:1e:95:0a:85:2c:a5:4f:46:be:50:9f:93:2f:
90:08:30:3e:a8:09:d4:c7:8e:b1:7c:9d:e5:9d:11:
22:4b:26:c6:0e:92:dc:20:75:fc:b3:46:80:ee:f7:
29:de:57:b7:be:1d:88:d0:e7:5e:f1:15:06:0c:0d:
42:c7:c5:ee:57:8d:79:36:84:26:e6:8d:d4:fc:36:
b5:32:a5:da:96:c3:ab:cb:58:0b:4f:a1:13:ee:d8:
1a:7b:1a:37:b4:6c:36:96:d6:4d:3a:9c:ed:7c:b2:
98:a8:39:17:0d:46:7e:81:b3:28:1f:9b:e7:45:62:
43:c6:84:dc:73:a7:ae:48:99:09:2e:a0:e4:9c:96:
04:a1:f9:77:51:e3:e2:68:94:67:ad:47:d6:0a:e8:
c4:c4:9b:59:77:c5:ee:e6:2d:64:d3:91:39:1f:4e:
f1:bf:fa:75:37:a9:3b:48:38:ef:88:83:e7:85:db:
3b:00:32:f3:51:5a:34:55:3e:b2:96:3d:ef:0f:4b:
81:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:25:53:4C:E3:6B:FE:E7:C8:2F:BE:91:B6:76:2D:29:84:53:41:76
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/fCVTTONr_ufIL76RtnYtKYRTQXY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.33.14.0/24
103.205.26.0/24
185.245.239.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:78:63:f3:e6:37:15:a1:16:50:8c:27:ca:2d:18:7f:96:08:
b0:f3:17:dc:07:ed:81:de:e3:00:27:05:4d:43:82:94:8f:c1:
8e:89:7f:67:bc:92:09:62:b9:2c:a2:68:4c:a5:e7:44:c0:9e:
fd:79:d1:ba:4e:f5:df:a3:43:c2:c1:f5:09:f1:12:a4:64:3c:
2d:b4:0e:22:19:4f:58:61:ac:a6:2e:a2:d5:f8:51:4e:22:cc:
a2:e6:41:0c:c7:84:95:32:8e:4a:da:15:94:f8:e3:f2:f4:ed:
12:98:3a:c0:8b:f7:17:9a:a9:e2:a7:95:92:48:9a:dd:2c:3f:
69:c9:8f:e9:68:bd:fc:5b:d4:47:71:51:24:b0:91:72:22:f4:
67:0d:73:c7:b8:86:9d:ce:27:2e:b3:4e:3e:9f:29:e5:c6:14:
7f:b9:c3:bc:cf:e1:03:f7:a3:2a:38:c1:b4:0b:9b:34:5a:23:
ab:44:fb:c3:e4:2a:e3:22:42:82:62:94:20:89:f6:a1:b5:8b:
6c:ef:dc:74:d5:14:38:ab:9b:d4:b5:52:df:3e:99:3e:a2:a6:
fd:8b:73:91:79:f1:f2:bb:5d:10:bc:a0:c8:d8:16:e1:44:90:
57:df:e2:ee:27:d3:f6:69:6e:04:9c:00:3a:c7:a0:73:76:c2:
b2:bd:06:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:47 2024 by rpki-client on console-fra.rpki-client.org