Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/3xK9VYzR7Qf_MPw8G-5ZmcUQh90.roa
File: 3xK9VYzR7Qf_MPw8G-5ZmcUQh90.roa (raw, json)
Hash identifier: 1+5KIgdBDp0KcfrgcX31GjPnPlfrCGgRodvJ/c8jSHs=
Subject key identifier: DF:12:BD:55:8C:D1:ED:07:FF:30:FC:3C:1B:EE:59:99:C5:10:87:DD
Certificate issuer: /CN=ab71e9b13f5c339a58692eeabe72eaa406bbbd7d
Certificate serial: 018CC79590CE502D14DD49B08CABA008906B
Authority key identifier: AB:71:E9:B1:3F:5C:33:9A:58:69:2E:EA:BE:72:EA:A4:06:BB:BD:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/3xK9VYzR7Qf_MPw8G-5ZmcUQh90.roa
Signing time: Tue 02 Jan 2024 00:31:57 +0000
ROA not before: Tue 02 Jan 2024 00:31:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207633
IP address blocks: 213.142.150.0/24 maxlen: 24
213.142.156.0/24 maxlen: 24
213.142.132.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:90:ce:50:2d:14:dd:49:b0:8c:ab:a0:08:90:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab71e9b13f5c339a58692eeabe72eaa406bbbd7d
Validity
Not Before: Jan 2 00:31:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=df12bd558cd1ed07ff30fc3c1bee5999c51087dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:25:ae:20:f9:4c:7a:fe:64:78:88:e6:3a:ef:
4d:67:4c:67:2d:ba:f1:38:0b:33:18:11:fe:93:c3:
1e:77:8a:1d:b2:ba:11:61:0c:15:46:e1:90:df:96:
dc:46:eb:53:b0:53:4a:3c:67:0a:03:f5:3c:b3:6e:
4c:97:af:1a:8f:cb:98:98:c2:45:49:1f:c8:02:98:
48:10:36:03:69:4e:c3:8d:d9:4d:b6:0a:e7:e8:ec:
6b:75:c2:bb:15:ba:13:52:c0:de:b1:00:54:ab:de:
ce:77:d2:82:56:c4:59:d4:a1:fc:9c:d1:35:dd:2a:
14:1d:7b:b1:cb:0a:e1:2e:77:1f:e1:b3:9c:4b:2c:
ad:aa:dd:e8:dd:3a:ab:39:7b:61:46:1c:ea:63:4b:
96:e6:d5:10:03:61:5d:64:06:2d:a9:95:a6:cb:8b:
2f:02:77:e9:00:bc:18:c0:c5:d9:95:d3:c4:68:14:
ee:94:6e:c4:3e:2c:29:26:95:c2:d6:39:96:36:3c:
d7:27:d3:f5:43:b6:4b:0c:bb:2d:fc:50:99:f4:b2:
01:0b:9d:98:7a:3c:6e:dd:23:e9:57:80:93:60:7f:
fd:ff:9b:9f:5a:a0:13:aa:ce:00:1e:67:76:2a:df:
29:d4:aa:8d:13:8a:18:c6:36:97:a1:51:6c:8a:f6:
ac:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:12:BD:55:8C:D1:ED:07:FF:30:FC:3C:1B:EE:59:99:C5:10:87:DD
X509v3 Authority Key Identifier:
keyid:AB:71:E9:B1:3F:5C:33:9A:58:69:2E:EA:BE:72:EA:A4:06:BB:BD:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/3xK9VYzR7Qf_MPw8G-5ZmcUQh90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.142.132.0/24
213.142.150.0/24
213.142.156.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:5a:2d:3e:fb:1e:49:94:5d:1a:22:2d:2a:2a:b9:b7:c7:c1:
97:84:21:71:a7:24:2d:a8:c5:15:6b:b5:fa:4d:af:c5:04:2c:
23:86:7a:f4:e2:d3:2b:12:3c:8c:08:5e:fa:6c:1e:e3:3a:ad:
cb:65:f0:2a:b7:d3:a1:88:53:2f:9a:4a:f0:67:c8:43:11:d7:
bd:aa:8c:96:cf:d9:bd:ad:e2:b3:03:af:7a:d9:5c:06:c0:2d:
54:7e:08:d1:36:69:bf:ce:58:6a:85:0c:44:a1:b0:40:5f:59:
4e:e6:a4:82:b2:6b:80:5d:57:8a:2d:ad:47:e8:7b:7b:fa:3b:
d7:5f:5c:16:a7:ec:13:58:87:8d:ed:53:8d:c7:92:b2:c8:16:
05:ac:cb:40:83:7b:44:5c:69:eb:02:af:47:3d:bc:da:07:8c:
fa:c1:53:64:a9:9d:4c:20:f3:5b:9a:fd:a9:0f:61:da:41:79:
01:71:01:48:6e:fc:bf:51:b8:da:ce:71:50:90:04:9e:9b:6f:
06:c2:65:23:3a:8f:1a:1d:70:3f:28:72:d3:e0:21:11:81:ea:
a2:8d:59:de:46:58:57:21:06:39:fc:fe:8d:b6:e1:e9:83:6e:
cd:48:66:c9:c3:91:9d:a5:b7:a8:2c:50:05:59:c0:56:37:21:
fd:70:89:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 2 16:18:55 2024 by rpki-client on console-fra.rpki-client.org