Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/b2XpySNTrM_OLHKIngGtURJVONI.roa
File: b2XpySNTrM_OLHKIngGtURJVONI.roa (raw, json)
Hash identifier: fuOFwSvccn/wPsZ/SDEJvA3PGO55cuw6+MWifKkpbnk=
Subject key identifier: 6F:65:E9:C9:23:53:AC:CF:CE:2C:72:88:9E:01:AD:51:12:55:38:D2
Certificate issuer: /CN=ab71e9b13f5c339a58692eeabe72eaa406bbbd7d
Certificate serial: 0A78F826
Authority key identifier: AB:71:E9:B1:3F:5C:33:9A:58:69:2E:EA:BE:72:EA:A4:06:BB:BD:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/b2XpySNTrM_OLHKIngGtURJVONI.roa
Signing time: Sat 01 Jan 2022 08:57:08 +0000
ROA not before: Sat 01 Jan 2022 08:57:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 213.142.150.0/24 maxlen: 24
213.142.151.0/24 maxlen: 24
213.142.158.0/24 maxlen: 24
80.253.254.0/24 maxlen: 24
80.253.255.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 175700006 (0xa78f826)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab71e9b13f5c339a58692eeabe72eaa406bbbd7d
Validity
Not Before: Jan 1 08:57:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6f65e9c92353accfce2c72889e01ad51125538d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a3:48:a6:83:c3:16:90:0b:93:f5:a6:55:ef:
3c:c0:37:b2:66:11:a8:d4:b1:1f:a7:34:fa:3f:4f:
9e:3b:10:ec:9a:1b:72:aa:1d:37:3f:16:53:12:d9:
12:14:64:c4:16:30:3c:e9:20:ab:bd:c7:0a:c1:31:
3e:63:6e:01:db:1c:ff:52:68:d5:5e:86:f4:73:3e:
e8:d1:c7:0a:05:fb:67:58:00:e4:34:9a:6b:a4:0b:
45:4f:aa:d0:90:be:93:06:d6:bb:3d:8e:41:c0:6a:
52:23:1a:3c:a4:b8:fe:32:8c:24:5c:59:ca:ab:ef:
91:f3:6c:0b:2e:63:8d:fb:b6:df:e5:96:d6:61:eb:
f9:99:f7:8e:22:80:74:bb:15:92:fd:e7:bf:50:50:
58:ed:63:88:ed:51:23:dd:a4:02:ac:5c:ef:c1:44:
4c:13:d5:26:c3:40:88:0e:bb:cd:6f:b1:89:60:54:
04:d4:bb:aa:61:8b:cf:b3:31:c7:6a:39:0f:7b:39:
70:e5:62:e8:fb:70:3d:63:32:e9:67:e0:a7:8a:b7:
ca:67:ad:ec:3c:93:d7:cc:c0:2f:53:cf:ed:51:ed:
9d:a9:9e:4a:7e:77:fd:67:61:17:d0:c2:16:13:09:
61:3c:82:c8:fe:70:f3:5d:5a:5b:68:40:1b:83:8d:
33:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:65:E9:C9:23:53:AC:CF:CE:2C:72:88:9E:01:AD:51:12:55:38:D2
X509v3 Authority Key Identifier:
keyid:AB:71:E9:B1:3F:5C:33:9A:58:69:2E:EA:BE:72:EA:A4:06:BB:BD:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/b2XpySNTrM_OLHKIngGtURJVONI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.253.254.0/23
213.142.150.0/23
213.142.158.0/24
Signature Algorithm: sha256WithRSAEncryption
33:9c:b5:be:77:45:5f:d8:df:a1:51:6d:26:a5:d3:89:5e:3d:
51:5d:16:4f:68:33:f2:09:f3:63:c5:8f:db:cf:fe:61:eb:a4:
30:b0:f3:80:40:6c:9b:68:6f:1d:46:f2:42:ee:a6:0c:9a:b1:
7d:db:1b:ef:95:b2:73:ae:dc:9c:41:a4:02:85:2a:1c:eb:20:
f0:bf:85:9a:66:22:60:23:13:01:4e:89:09:f8:48:df:d4:b6:
25:6a:98:b4:9f:50:18:5e:a8:ad:66:98:74:f2:01:1f:c6:d9:
19:1c:97:14:86:44:b1:cd:7a:b8:99:68:ce:c4:a1:b1:ed:91:
26:f7:29:f4:41:d9:bd:21:9b:4b:ac:70:ef:85:c4:d8:f7:28:
f3:9f:c6:13:13:d0:28:cd:eb:20:4b:2b:58:95:a6:9f:79:2f:
72:dd:49:49:4e:d4:e8:5e:f6:b7:af:2c:21:2b:2f:08:91:ae:
e0:f0:af:22:ae:26:3a:af:af:cd:3a:41:e2:4e:c2:8e:b8:88:
14:62:5a:7b:59:e6:3a:e5:82:15:35:b5:0b:a6:89:83:e6:d1:
c5:8c:7d:5e:6f:2e:5a:ef:41:28:58:a3:5b:6d:85:1d:d5:6e:
d0:cf:76:2e:78:a0:5c:ae:d7:e2:63:5d:42:69:69:01:64:f8:
3f:25:90:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:04 2024 by rpki-client on console-fra.rpki-client.org