Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/qUQch4sCSK6A7Rfb7X7rpOOt9TE.roa
File: qUQch4sCSK6A7Rfb7X7rpOOt9TE.roa (raw, json)
Hash identifier: LVpVQgkS9RqrLYZgc/B0Zw8oSf44Z7oZASwJk4DFslc=
Subject key identifier: A9:44:1C:87:8B:02:48:AE:80:ED:17:DB:ED:7E:EB:A4:E3:AD:F5:31
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0186F8823318FD9BF90D99E15D6093BAF226
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/qUQch4sCSK6A7Rfb7X7rpOOt9TE.roa
Signing time: Sun 19 Mar 2023 06:15:27 +0000
ROA not before: Sun 19 Mar 2023 06:15:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208068
IP address blocks: 62.197.134.0/24 maxlen: 24
193.42.52.0/24 maxlen: 24
185.103.72.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:f8:82:33:18:fd:9b:f9:0d:99:e1:5d:60:93:ba:f2:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Mar 19 06:15:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a9441c878b0248ae80ed17dbed7eeba4e3adf531
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:8e:52:b4:94:48:dc:0d:d8:11:c8:ea:65:6f:
a8:d0:e2:55:07:e1:03:62:da:b9:6c:82:37:0c:7c:
5c:63:0d:0f:7d:bb:aa:14:24:ad:de:a8:b2:d6:3e:
cd:8e:03:79:1c:36:a4:14:0f:b4:35:78:da:2c:5f:
4e:84:72:c8:cd:0c:bf:e2:5a:ea:82:b5:9a:ed:35:
9c:10:e9:dd:a8:f6:5f:f4:8a:95:67:7a:14:a1:b2:
2f:38:07:b9:96:60:83:7d:e2:6c:58:c0:d8:2a:88:
2d:a7:cf:42:21:73:8f:40:5b:ff:95:45:72:f8:83:
d1:59:bd:4a:1c:04:ea:79:08:32:f4:9a:57:55:ef:
03:4c:e7:b5:57:29:05:25:19:f3:f0:31:fd:04:b3:
4d:bf:fd:c5:58:45:4b:01:59:63:bd:4f:a7:f0:fa:
9a:05:85:e2:77:c5:e3:70:df:b3:8f:43:a7:20:ee:
16:80:26:52:a9:2c:b2:69:c3:51:77:4b:53:1c:5d:
5b:4a:c7:58:6e:8d:5a:e6:cb:7c:11:10:17:bb:8a:
67:44:f0:20:36:60:ce:29:8e:fb:2a:88:a2:3b:3d:
2c:5b:00:b5:f7:f7:1d:bb:aa:32:b0:eb:29:6a:a9:
71:1a:c9:1a:85:9b:ef:99:aa:a8:ed:f1:d3:4e:77:
29:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:44:1C:87:8B:02:48:AE:80:ED:17:DB:ED:7E:EB:A4:E3:AD:F5:31
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/qUQch4sCSK6A7Rfb7X7rpOOt9TE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.197.134.0/24
185.103.72.0/24
193.42.52.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:43:d4:79:94:60:a7:29:c1:4e:80:1d:0b:da:f6:4d:9c:47:
78:5b:50:ba:33:25:7c:c2:24:e1:92:0c:a5:13:3f:d5:5b:0b:
06:63:02:86:ee:7d:40:e4:02:72:8b:ed:26:55:fa:4a:c4:22:
70:ac:55:ba:d8:83:5c:82:01:12:81:08:d5:e0:54:c0:dd:66:
be:91:15:a8:29:6f:92:41:69:3d:43:c3:3c:70:a0:38:bf:9d:
86:3d:08:9a:b9:49:44:49:fb:95:b6:a5:6a:48:ac:c1:e6:fd:
26:06:0d:c9:ca:a6:98:60:6f:96:93:93:b1:0e:93:43:5d:05:
b3:6a:8a:14:e7:af:17:96:9f:b8:5c:2b:41:b0:c4:39:8a:8d:
58:70:24:e1:de:d3:ae:7c:9e:f3:68:d3:b3:d6:bb:aa:4d:b7:
8c:5e:04:a9:c9:b4:81:67:44:c2:d6:b8:35:e5:c2:60:6c:0b:
81:26:cd:94:63:fd:0d:43:60:d7:25:27:56:9b:40:fd:ed:b9:
93:a0:13:2d:bb:38:cc:59:11:42:aa:9c:1e:77:5d:d6:05:20:
0a:e0:54:5c:6d:99:80:e7:df:82:b8:f8:5c:ec:cb:28:76:d4:
55:5b:73:68:9a:ab:8b:8f:e1:65:47:3e:38:c6:e3:4a:00:51:
9c:d7:fb:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:48 2024 by rpki-client on console-fra.rpki-client.org