Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/tGYm5IGSi_SyUoW2RnfGWguo8L4.roa
File: tGYm5IGSi_SyUoW2RnfGWguo8L4.roa (raw, json)
Hash identifier: 7L15YeTK+6Ylw8yXLabg6TlZVnfHPl/zSESlb/xs2g0=
Subject key identifier: B4:66:26:E4:81:92:8B:F4:B2:52:85:B6:46:77:C6:5A:0B:A8:F0:BE
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 01877E3AE4FAD6351A8B20EAD73C22696858
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/tGYm5IGSi_SyUoW2RnfGWguo8L4.roa
Signing time: Fri 14 Apr 2023 05:26:41 +0000
ROA not before: Fri 14 Apr 2023 05:26:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207459
IP address blocks: 188.240.68.0/24 maxlen: 24
188.212.132.0/24 maxlen: 24
188.212.159.0/24 maxlen: 24
213.32.249.0/24 maxlen: 24
91.188.207.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:7e:3a:e4:fa:d6:35:1a:8b:20:ea:d7:3c:22:69:68:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Apr 14 05:26:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b46626e481928bf4b25285b64677c65a0ba8f0be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:a0:5d:6e:7e:a4:88:fd:4a:0a:50:f9:8d:04:
d5:62:3d:ab:15:ed:18:75:10:17:5d:fa:eb:d2:f5:
4a:d5:2d:5f:94:a1:48:90:00:1f:6a:7c:1d:bf:2b:
9c:c6:dc:45:53:9d:d2:45:6e:c6:03:c3:5f:c1:25:
50:4e:30:92:ff:3d:c3:2d:88:c7:c6:84:ee:55:f0:
6e:02:e1:e4:41:8c:8b:df:e1:17:05:7e:a3:0b:81:
fd:2d:c3:51:71:85:77:75:c0:87:d5:86:f5:b2:b6:
82:61:14:cb:7c:7a:d9:89:39:63:87:c6:6c:19:73:
a6:2f:a3:d8:3e:64:06:25:6f:76:54:5d:69:76:56:
2b:78:e7:f5:39:8c:73:2c:a3:c3:9f:e5:b3:ec:0d:
d2:b5:99:1b:71:12:60:0a:ea:1d:4d:f4:be:21:a2:
33:a4:07:b3:b3:16:c5:c0:c4:a8:e8:9e:65:38:8a:
e1:13:27:17:19:23:07:d7:d1:62:05:ed:a9:73:8f:
d1:65:47:55:9a:1e:34:e7:8e:af:b3:48:f1:05:56:
eb:f9:f1:f8:9a:78:e5:75:af:ac:7f:55:c3:c1:8e:
a0:7e:1d:cd:07:72:58:07:c9:4d:89:89:a4:3b:b1:
09:ff:04:a9:70:eb:d5:9e:05:1a:57:cc:71:6f:2c:
17:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:66:26:E4:81:92:8B:F4:B2:52:85:B6:46:77:C6:5A:0B:A8:F0:BE
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/tGYm5IGSi_SyUoW2RnfGWguo8L4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.188.207.0/24
188.212.132.0/24
188.212.159.0/24
188.240.68.0/24
213.32.249.0/24
Signature Algorithm: sha256WithRSAEncryption
13:d3:88:f0:65:f7:30:78:1b:7b:bd:38:aa:20:0d:5e:5a:95:
35:cc:b4:18:2c:23:81:12:08:22:83:bf:07:9c:0e:be:27:c3:
ea:8f:55:ea:0c:bb:ad:ef:23:ab:46:cc:13:7b:8f:cf:80:21:
97:3c:ff:ac:6c:13:32:e2:ea:7f:8e:8f:3b:e6:43:a1:0e:db:
5c:33:17:cb:b0:fe:94:fe:5b:88:62:39:d1:15:b1:57:82:14:
0e:20:42:65:45:25:bf:9d:b2:49:51:5f:b6:e9:95:12:60:b5:
ed:34:4f:6a:e3:e5:7d:c7:e4:27:26:77:22:bc:7d:b5:d9:0b:
95:aa:b4:b2:09:8e:31:2c:a1:42:a3:2d:03:c5:1a:18:81:39:
81:85:79:6a:10:d6:65:f4:9f:d1:b3:f4:b3:84:5c:67:c3:f1:
52:3e:21:e4:c6:5a:8b:45:07:e4:20:4b:50:91:f0:e7:42:c5:
b8:8a:79:50:71:25:41:bd:2b:89:ba:7d:02:a9:e4:ea:c3:ee:
fd:6a:b0:27:62:98:3f:bb:f0:76:58:3b:1f:2f:da:aa:14:c1:
51:9f:c3:9b:55:36:cb:58:4b:c0:ab:91:78:c6:96:66:e2:d6:
ba:f6:51:c2:99:06:f2:c5:2a:af:64:63:91:ad:2d:51:4c:da:
54:6d:07:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:14 2024 by rpki-client on console-ams.rpki-client.org