Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/rnkyRb-fDZlR-LXTt5GniH3hLFw.roa
File: rnkyRb-fDZlR-LXTt5GniH3hLFw.roa (raw, json)
Hash identifier: D18ne5xyhmlyjCGYmiubeMDHVILWcUQJ1aRhrziRLkA=
Subject key identifier: AE:79:32:45:BF:9F:0D:99:51:F8:B5:D3:B7:91:A7:88:7D:E1:2C:5C
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 01875FD058F117C3F717A426C583C5397411
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/rnkyRb-fDZlR-LXTt5GniH3hLFw.roa
Signing time: Sat 08 Apr 2023 07:41:42 +0000
ROA not before: Sat 08 Apr 2023 07:41:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61138
IP address blocks: 93.115.255.0/24 maxlen: 24
188.213.202.0/24 maxlen: 24
213.232.95.0/24 maxlen: 24
62.197.135.0/24 maxlen: 24
188.214.209.0/24 maxlen: 24
188.214.208.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:5f:d0:58:f1:17:c3:f7:17:a4:26:c5:83:c5:39:74:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Apr 8 07:41:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ae793245bf9f0d9951f8b5d3b791a7887de12c5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:68:74:b3:8a:e5:e2:93:70:78:ea:df:68:95:
67:f9:e9:67:96:8f:98:a4:0a:35:33:fb:f4:5e:78:
8c:8d:b1:a1:32:9a:c9:ac:30:ea:5a:39:a9:44:0a:
52:9e:b6:1a:58:74:1a:c9:8c:d3:35:a3:71:76:5e:
ad:ca:bc:16:09:b7:92:7b:a6:f6:1b:82:db:4b:b1:
4f:35:76:3f:74:9c:1c:cb:6a:ad:60:d5:9b:d2:40:
82:e8:02:5e:a6:1d:46:73:08:6d:00:94:3b:9d:fe:
03:d2:d2:c8:96:77:b7:f8:93:ca:84:74:bf:b9:84:
95:11:61:72:1a:c0:de:88:a6:5d:0d:c5:1d:a7:ca:
1a:7a:9a:dc:14:95:eb:f6:20:50:da:ca:68:c0:ea:
48:73:a7:00:ef:ff:ae:39:09:f0:6c:02:c7:af:2c:
88:6d:58:66:04:3f:fc:f5:6f:6d:5c:77:17:4e:fe:
e4:59:8f:55:b3:03:e9:6d:96:be:25:1b:1a:78:73:
97:10:96:ea:a2:55:c4:78:48:f3:0d:cc:4b:72:d8:
19:47:cf:9f:59:42:b8:f8:81:0b:39:8e:84:13:22:
ae:94:ac:47:a8:ac:c5:54:11:a4:c9:b3:d9:3e:dc:
c5:14:7e:50:94:f6:28:1a:28:f2:a7:c6:a2:e4:58:
9a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:79:32:45:BF:9F:0D:99:51:F8:B5:D3:B7:91:A7:88:7D:E1:2C:5C
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/rnkyRb-fDZlR-LXTt5GniH3hLFw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.197.135.0/24
93.115.255.0/24
188.213.202.0/24
188.214.208.0/23
213.232.95.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:5b:06:85:05:23:1e:63:60:6e:2a:02:c1:42:93:31:e3:ad:
a5:b5:c7:ac:73:7b:40:f0:76:5b:b3:f1:e7:ec:6d:0e:fe:2d:
1a:9d:98:97:7d:75:a4:ad:9b:0a:94:af:61:75:5b:29:ed:3a:
37:d6:c4:22:3b:59:10:bf:bb:d8:7b:57:0e:e1:73:23:af:f9:
c7:9b:b2:33:f2:28:1b:e4:21:64:ce:19:28:6f:74:70:5c:82:
01:bf:df:b5:d0:ae:b3:21:c4:52:fc:37:6e:11:9e:87:76:ba:
a7:d5:ff:dc:8b:7a:19:0e:16:08:24:32:05:5f:ac:ec:62:1e:
65:90:41:e3:58:91:bc:68:0a:29:58:4b:36:e5:8d:6c:f6:1c:
32:06:70:b1:d1:60:ac:36:bd:29:08:f6:ec:7d:a5:96:51:b2:
0a:92:6e:00:b1:fa:2a:cc:51:fa:af:8c:6c:cc:69:b7:b3:64:
96:27:d6:04:b8:98:6a:74:33:e5:0f:5b:a0:67:00:c3:59:49:
ac:cb:5f:99:da:41:f7:e6:ce:75:ba:e9:3b:a5:31:a7:ba:02:
38:0c:c4:ca:b4:dc:f7:8b:09:c7:34:69:be:aa:0a:15:3c:07:
71:01:07:c7:be:6c:fb:40:ed:ba:88:39:91:52:af:90:c8:fc:
d3:99:18:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:48 2024 by rpki-client on console-fra.rpki-client.org