Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/8ee1b7-b145-4f1b-9847-3e881f53499f/1/8Qy1UjseZCr8yhDwX-awlMCSTmk.roa
File: 8Qy1UjseZCr8yhDwX-awlMCSTmk.roa (raw, json)
Hash identifier: m3jvdUURkLHUO0xcy0c16axEepRtzjvdx2EBBb9hCbg=
Subject key identifier: F1:0C:B5:52:3B:1E:64:2A:FC:CA:10:F0:5F:E6:B0:94:C0:92:4E:69
Certificate issuer: /CN=d0a4cae70f72621d109fee0f08e2c0c3a0d87d25
Certificate serial: 01856C9CC207C70ECC6475FB6EE968D442FB
Authority key identifier: D0:A4:CA:E7:0F:72:62:1D:10:9F:EE:0F:08:E2:C0:C3:A0:D8:7D:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0KTK5w9yYh0Qn-4PCOLAw6DYfSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/8ee1b7-b145-4f1b-9847-3e881f53499f/1/8Qy1UjseZCr8yhDwX-awlMCSTmk.roa
Signing time: Sun 01 Jan 2023 09:14:50 +0000
ROA not before: Sun 01 Jan 2023 09:14:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198484
IP address blocks: 141.226.132.0/24 maxlen: 24
141.226.134.0/24 maxlen: 24
37.26.144.0/21 maxlen: 24
147.161.8.0/21 maxlen: 24
2a03:c5c0:2100::/40 maxlen: 40
2a03:c5c0:2000::/40 maxlen: 40
2a03:c5c0:1100::/40 maxlen: 40
2a03:c5c0:1000::/40 maxlen: 40
2a03:c5c0::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:9c:c2:07:c7:0e:cc:64:75:fb:6e:e9:68:d4:42:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0a4cae70f72621d109fee0f08e2c0c3a0d87d25
Validity
Not Before: Jan 1 09:14:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f10cb5523b1e642afcca10f05fe6b094c0924e69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:23:be:17:27:a3:90:d1:f0:a0:35:6e:dc:5a:
49:c7:c9:ad:1b:35:fd:11:7e:6e:da:a6:f0:12:44:
cf:50:5a:59:2e:e7:a6:ea:8a:3f:a6:b1:b3:67:fc:
95:e5:f8:82:66:7b:8f:c2:0f:a0:66:95:fb:33:d3:
12:63:a5:cc:60:f4:a0:0f:1f:0e:a7:de:b8:4f:9c:
19:c7:bc:2e:ec:33:cc:8c:6a:d1:c9:80:22:aa:5f:
94:e0:df:65:6c:e5:b2:36:92:88:fa:6c:e7:e5:40:
fe:5e:7c:a6:3f:9c:cf:3f:aa:a4:c3:2a:e3:63:15:
38:ae:04:04:0f:b2:87:c1:9b:40:2c:64:b3:51:4b:
7d:95:27:22:62:23:ac:10:47:1e:c9:09:2c:d2:d7:
bb:0a:05:6a:80:21:d8:d0:c8:a5:88:6d:6c:a5:23:
a6:ae:c2:da:87:80:26:db:20:2e:70:9d:60:ea:39:
4b:d3:80:10:29:4e:ab:d8:8c:0b:73:3d:f8:65:0a:
39:cf:05:63:41:f1:78:1d:45:be:64:b5:0e:70:c0:
7a:5f:0e:19:66:db:b7:91:ae:52:ae:35:ec:e5:20:
22:03:23:ef:26:59:41:83:f3:a1:de:15:e0:d7:59:
4c:45:e5:3f:dd:06:f7:3d:d7:e6:f3:b5:e0:11:8c:
e0:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:0C:B5:52:3B:1E:64:2A:FC:CA:10:F0:5F:E6:B0:94:C0:92:4E:69
X509v3 Authority Key Identifier:
keyid:D0:A4:CA:E7:0F:72:62:1D:10:9F:EE:0F:08:E2:C0:C3:A0:D8:7D:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KTK5w9yYh0Qn-4PCOLAw6DYfSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/8ee1b7-b145-4f1b-9847-3e881f53499f/1/8Qy1UjseZCr8yhDwX-awlMCSTmk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/8ee1b7-b145-4f1b-9847-3e881f53499f/1/0KTK5w9yYh0Qn-4PCOLAw6DYfSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.26.144.0/21
141.226.132.0/24
141.226.134.0/24
147.161.8.0/21
IPv6:
2a03:c5c0::/32
Signature Algorithm: sha256WithRSAEncryption
61:c1:c3:be:f0:62:ed:40:07:a2:12:57:cc:6b:0f:77:bc:a7:
a5:68:24:97:c8:d7:7b:35:5d:13:1f:ba:ad:d4:49:7b:c2:e2:
28:ab:6b:19:66:74:3a:98:23:c6:b5:27:de:6a:a7:b6:21:f5:
d3:f4:f2:b1:e5:49:2e:da:76:a5:c6:47:b0:bf:34:bf:c7:ea:
71:42:11:b7:64:2b:b7:02:7b:7f:22:44:db:4f:f2:14:59:03:
42:e7:03:88:4a:c3:9d:9b:7e:c2:ad:e0:b3:14:e0:f3:15:85:
76:0b:0d:8c:02:b0:bc:5c:f6:c4:33:b2:56:69:b3:d0:22:e3:
a4:51:d5:74:1f:93:da:c7:c1:2d:f1:c5:e7:12:b4:25:ce:6e:
d9:93:6c:6a:ed:00:f7:a0:b7:c5:36:ba:2b:3b:3c:44:f3:38:
5e:7c:f7:71:9f:0c:f8:55:4b:7b:79:bc:51:c8:7c:db:78:f8:
6c:df:a1:e0:51:ac:e7:ba:f3:b4:7a:6d:7f:94:ca:4d:87:00:
63:1b:c9:14:72:bf:87:e8:ce:81:8b:8d:9f:44:50:d9:b9:00:
19:fa:85:43:18:aa:b2:d3:e6:63:69:80:12:5a:c1:53:43:1f:
19:8c:3b:52:2f:b1:2b:16:0d:e8:df:4f:d5:61:15:64:ca:04:
5c:a4:06:4e
-----BEGIN CERTIFICATE-----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Generated at Wed Nov 15 15:57:03 2023 by rpki-client on console-fra.rpki-client.org