Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/90aa1e-0098-4fda-9829-a15ccf5b413e/1/3OYQGEZKCysh4jcOX0eg7CWd0w8.roa
File: 3OYQGEZKCysh4jcOX0eg7CWd0w8.roa (raw, json)
Hash identifier: Dm54dc6KJ8h5KPf9pmb8N/m+rcnPp+AjOQp7Gtl7ae8=
Subject key identifier: DC:E6:10:18:46:4A:0B:2B:21:E2:37:0E:5F:47:A0:EC:25:9D:D3:0F
Certificate issuer: /CN=7242a13715fc5578cdc05aaaa68c6a413cdbc9f5
Certificate serial: 07EF35F6
Authority key identifier: 72:42:A1:37:15:FC:55:78:CD:C0:5A:AA:A6:8C:6A:41:3C:DB:C9:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckKhNxX8VXjNwFqqpoxqQTzbyfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/90aa1e-0098-4fda-9829-a15ccf5b413e/1/3OYQGEZKCysh4jcOX0eg7CWd0w8.roa
Signing time: Sat 01 Jan 2022 12:57:17 +0000
ROA not before: Sat 01 Jan 2022 12:57:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47568
IP address blocks: 94.100.32.0/20 maxlen: 20
185.122.24.0/23 maxlen: 23
185.122.27.0/24 maxlen: 24
185.122.26.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 133117430 (0x7ef35f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7242a13715fc5578cdc05aaaa68c6a413cdbc9f5
Validity
Not Before: Jan 1 12:57:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dce61018464a0b2b21e2370e5f47a0ec259dd30f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:e1:f1:b2:ef:44:5d:3b:c5:7d:d2:4d:f3:1c:
c6:ef:c2:e4:b5:36:62:b8:d3:7c:6e:1c:ad:ca:df:
d8:b5:4e:ce:53:d3:ca:20:a4:ce:47:73:1e:bc:6f:
d6:d3:ac:a0:89:c7:b2:dc:fa:f4:40:b3:c5:80:33:
45:af:6a:bf:0b:44:33:e2:b1:cd:ba:45:a0:8a:a1:
70:1c:eb:ad:17:75:21:75:fb:a1:39:64:60:74:ba:
9d:90:73:95:96:89:85:73:50:3a:1b:fa:25:fa:86:
c6:d8:9d:5f:e8:81:87:64:04:6c:22:2d:80:30:5c:
78:cf:d1:eb:ea:2e:ec:be:fc:f7:74:70:de:96:75:
51:9e:16:1f:df:bc:a7:9d:8b:5c:85:01:c9:b6:10:
70:af:70:da:9a:73:1b:fa:e1:26:95:0d:2a:93:d7:
5e:a9:82:f9:c2:c4:4b:23:88:23:82:4c:52:f3:47:
aa:85:4c:6b:49:76:24:3e:83:f4:b5:c7:10:20:70:
ff:72:31:28:05:cb:de:96:1a:27:14:48:88:4f:c3:
ba:68:db:fb:99:43:26:99:df:39:a4:33:74:2a:64:
30:51:41:dd:14:34:54:d5:d7:e8:fe:ea:ab:55:8a:
0b:d6:a7:7b:23:76:13:31:0b:c5:7a:56:04:ea:4a:
79:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:E6:10:18:46:4A:0B:2B:21:E2:37:0E:5F:47:A0:EC:25:9D:D3:0F
X509v3 Authority Key Identifier:
keyid:72:42:A1:37:15:FC:55:78:CD:C0:5A:AA:A6:8C:6A:41:3C:DB:C9:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckKhNxX8VXjNwFqqpoxqQTzbyfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/90aa1e-0098-4fda-9829-a15ccf5b413e/1/3OYQGEZKCysh4jcOX0eg7CWd0w8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/90aa1e-0098-4fda-9829-a15ccf5b413e/1/ckKhNxX8VXjNwFqqpoxqQTzbyfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.100.32.0/20
185.122.24.0/22
Signature Algorithm: sha256WithRSAEncryption
93:f7:48:be:36:2e:e0:3b:cb:ed:5c:e1:5f:32:48:f3:8a:75:
68:41:cc:bd:ba:c0:e7:2a:f2:7e:85:56:1e:af:a9:fd:fd:7c:
28:4b:be:91:00:8d:9b:a4:63:c1:4a:1d:2d:95:2e:d4:c7:4b:
5f:50:7e:b8:83:c9:c7:ee:ac:d5:be:96:4b:44:c7:dc:92:5c:
0a:14:0b:99:59:73:1b:88:a0:6c:da:96:cc:74:87:5a:d3:e3:
cf:f5:b0:3d:7e:66:79:11:bb:82:62:34:62:a1:92:16:18:88:
e7:2f:9c:17:13:9f:33:1c:2e:45:a8:0e:2a:39:1c:2d:4b:ee:
33:10:28:db:ed:c8:d0:01:ee:7c:3b:94:46:0c:79:ec:fd:b4:
a5:61:1d:d4:db:ad:bc:3c:f9:28:b6:74:57:46:1b:01:07:be:
78:4d:76:11:b3:13:d3:6d:2f:8f:35:f6:2d:a5:ef:51:49:19:
5c:d6:3d:10:85:e1:01:98:22:59:fa:e3:52:5e:bf:09:bb:bd:
cf:5b:19:1e:ad:90:8f:cb:b0:f2:2e:ee:ac:9c:36:89:2d:26:
e0:9b:25:ad:7c:01:f0:d9:e4:e3:ad:97:b8:22:19:3f:cf:b7:
3b:3b:8b:fe:df:99:1e:d0:42:c3:cd:52:a2:37:81:d7:b8:a8:
bd:d5:77:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:27 2024 by rpki-client on console-ams.rpki-client.org