Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/tvGFQLP_PF7WfJSGngwZ-sOyE8I.roa
File: tvGFQLP_PF7WfJSGngwZ-sOyE8I.roa (raw, json)
Hash identifier: ogntGIRF3JedUed+MiaBHJ7f7uaeGQdnqNAoRkulhdw=
Subject key identifier: B6:F1:85:40:B3:FF:3C:5E:D6:7C:94:86:9E:0C:19:FA:C3:B2:13:C2
Certificate issuer: /CN=2ebb3624b82f0e1e538b00919f442d200c7e3cd2
Certificate serial: 18CF3FC4
Authority key identifier: 2E:BB:36:24:B8:2F:0E:1E:53:8B:00:91:9F:44:2D:20:0C:7E:3C:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/tvGFQLP_PF7WfJSGngwZ-sOyE8I.roa
Signing time: Sat 01 Jan 2022 15:04:09 +0000
ROA not before: Sat 01 Jan 2022 15:04:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57146
IP address blocks: 37.44.8.0/21 maxlen: 21
185.127.12.0/23 maxlen: 23
185.127.12.0/22 maxlen: 22
185.127.14.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 416235460 (0x18cf3fc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ebb3624b82f0e1e538b00919f442d200c7e3cd2
Validity
Not Before: Jan 1 15:04:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b6f18540b3ff3c5ed67c94869e0c19fac3b213c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:07:40:21:d1:a7:46:7a:b0:6d:e9:f2:c3:81:
20:09:6f:b1:d5:ea:47:2d:3e:9f:c4:1d:35:1f:61:
dd:1b:94:99:13:8c:1a:6f:78:7a:79:48:8d:1a:c7:
20:fa:06:ca:45:51:64:33:eb:68:38:73:7c:67:44:
78:f2:51:43:e8:f4:f6:50:ee:1a:3e:da:59:a4:54:
82:2f:db:c9:15:8c:ea:24:a7:f5:33:c2:75:66:c4:
51:62:14:e5:5a:83:dd:02:bb:85:28:b6:55:30:b8:
2e:a7:b6:b9:b4:00:6e:f9:63:e0:7d:47:96:4d:b6:
91:14:7a:9f:2d:66:83:90:cc:4b:09:25:18:d5:d7:
44:6c:71:5e:83:23:b0:e8:2b:6b:31:33:e7:dc:64:
49:21:8c:dd:21:e2:54:aa:19:2e:1e:28:f1:df:96:
0f:e1:28:04:cb:dd:d1:b9:bf:f8:75:2b:e8:3c:e7:
99:3e:d2:7f:c9:48:d9:d1:4d:28:af:52:f1:1a:d1:
b5:fe:f0:2a:1e:9b:7e:eb:fd:38:c2:7c:7d:a4:ca:
5d:65:f7:1a:00:e5:87:c2:aa:cf:b8:a9:19:90:c0:
06:1b:af:42:91:17:d5:93:80:f6:70:b0:b7:bf:8d:
1c:b8:be:d0:41:22:41:07:80:35:76:84:5e:b3:42:
63:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:F1:85:40:B3:FF:3C:5E:D6:7C:94:86:9E:0C:19:FA:C3:B2:13:C2
X509v3 Authority Key Identifier:
keyid:2E:BB:36:24:B8:2F:0E:1E:53:8B:00:91:9F:44:2D:20:0C:7E:3C:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/tvGFQLP_PF7WfJSGngwZ-sOyE8I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.44.8.0/21
185.127.12.0/22
Signature Algorithm: sha256WithRSAEncryption
9b:fc:bc:63:2e:eb:a7:d1:9e:56:1c:cc:39:a6:e3:7b:32:a6:
b2:16:ed:34:6e:c0:94:4d:e7:ce:38:10:38:80:e4:96:95:ff:
80:cf:97:e7:d5:b7:27:3e:77:c4:39:de:f6:16:9c:e8:f8:34:
f2:5e:7f:99:b3:50:d6:80:50:79:fa:c1:3d:7d:07:ab:24:15:
32:5b:f5:39:36:b3:37:0a:dd:2b:fb:17:96:cf:2a:6d:4d:10:
ac:ec:f4:a2:33:c8:87:ff:d5:aa:b8:d8:48:18:9a:b5:8b:5e:
a9:07:4b:3b:cf:05:20:92:26:f0:96:ed:ce:fb:7d:48:1a:52:
ff:ae:59:12:69:68:61:66:33:f1:32:1f:02:df:66:95:fb:a3:
f4:12:26:4b:1f:2c:69:ca:7b:30:9a:16:b7:56:11:11:72:1f:
7b:62:4f:6f:1f:5b:23:b7:e1:e4:de:43:0b:74:71:86:77:9b:
5a:62:d0:94:71:fd:e1:d4:9e:93:d2:ba:a1:71:4c:7f:09:3a:
9b:24:54:20:22:a7:db:a2:c2:1d:9e:96:74:d0:8b:85:96:cf:
c0:66:c5:46:ef:39:53:06:7b:8d:78:7a:46:d1:d2:55:0b:b8:
97:db:df:e2:e7:6f:10:57:9b:47:38:6a:db:96:57:59:bc:27:
eb:57:54:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:44 2024 by rpki-client on console-ams.rpki-client.org