Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/caf5ea-626e-455a-8708-f5ca8fa7270d/1/Y2EmQ0W0PwdE--bVWZmzEfIORS4.roa
File: Y2EmQ0W0PwdE--bVWZmzEfIORS4.roa (raw, json)
Hash identifier: ujal25qWVJwVAR1HZOE8dyrQP9Wu4R/k/uY7ZmgxwKw=
Subject key identifier: 63:61:26:43:45:B4:3F:07:44:FB:E6:D5:59:99:B3:11:F2:0E:45:2E
Certificate issuer: /CN=b9f1d5b06f5701555ff5888154dd141b48896117
Certificate serial: 018466B7F745D452812D17837670CBD09AF2
Authority key identifier: B9:F1:D5:B0:6F:57:01:55:5F:F5:88:81:54:DD:14:1B:48:89:61:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ufHVsG9XAVVf9YiBVN0UG0iJYRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/caf5ea-626e-455a-8708-f5ca8fa7270d/1/Y2EmQ0W0PwdE--bVWZmzEfIORS4.roa
Signing time: Fri 11 Nov 2022 12:44:03 +0000
ROA not before: Fri 11 Nov 2022 12:44:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 52000
IP address blocks: 176.114.69.0/24 maxlen: 24
176.114.71.0/24 maxlen: 24
176.114.76.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:66:b7:f7:45:d4:52:81:2d:17:83:76:70:cb:d0:9a:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9f1d5b06f5701555ff5888154dd141b48896117
Validity
Not Before: Nov 11 12:44:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6361264345b43f0744fbe6d55999b311f20e452e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:68:41:36:ff:7e:c3:af:6a:61:ea:61:0f:15:
10:96:aa:f1:a1:6c:69:d6:c7:f9:07:6d:4b:db:ee:
9a:36:65:8a:4f:b2:7c:15:6e:ad:3e:75:c3:e0:ed:
a9:36:ad:35:6c:58:63:5b:c2:57:c8:7c:9f:f7:35:
ab:e1:d1:ae:6c:f6:19:a0:24:52:b4:b3:f4:04:92:
0f:ed:16:01:3c:fb:1d:5f:24:0f:49:18:4c:e1:da:
43:19:96:b0:86:1f:63:eb:13:52:fb:3a:e4:27:53:
a6:b0:d3:f5:d5:10:4d:9c:c4:24:95:9f:b1:14:77:
55:1c:9b:de:55:92:8f:8e:72:03:58:62:ec:88:87:
71:66:33:d7:cc:d3:57:65:8e:ea:c9:ea:0f:da:e5:
60:d9:6a:ce:ea:5f:f6:d3:f9:5c:aa:a1:e8:e7:0d:
6c:ab:92:61:e0:67:2b:ce:d9:be:61:07:4e:d8:f2:
04:9e:48:e3:1b:76:b8:35:f8:19:e0:ab:fc:9e:3a:
30:5b:64:ac:c1:bb:81:cc:b9:93:07:01:35:f5:22:
1a:18:4d:3e:9c:dc:65:64:9b:5f:0c:c7:49:10:34:
56:c9:5d:3f:c0:81:7b:f4:ea:97:c0:2c:c5:91:6c:
a4:25:51:9b:01:3f:f6:ec:a5:70:47:4a:ba:54:23:
90:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:61:26:43:45:B4:3F:07:44:FB:E6:D5:59:99:B3:11:F2:0E:45:2E
X509v3 Authority Key Identifier:
keyid:B9:F1:D5:B0:6F:57:01:55:5F:F5:88:81:54:DD:14:1B:48:89:61:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ufHVsG9XAVVf9YiBVN0UG0iJYRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/caf5ea-626e-455a-8708-f5ca8fa7270d/1/Y2EmQ0W0PwdE--bVWZmzEfIORS4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/caf5ea-626e-455a-8708-f5ca8fa7270d/1/ufHVsG9XAVVf9YiBVN0UG0iJYRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.114.69.0/24
176.114.71.0/24
176.114.76.0/22
Signature Algorithm: sha256WithRSAEncryption
13:92:25:32:9f:3a:8e:e0:ee:66:dc:78:df:f9:56:92:48:31:
ec:8d:66:2c:dd:c1:be:a3:67:31:fe:10:f3:38:bb:e7:8a:cb:
5a:86:d9:fe:c4:68:56:44:30:85:f2:0a:20:a0:dc:ac:c5:73:
2a:2b:63:1a:eb:7f:87:cc:ba:45:25:80:46:7b:d9:94:ff:b0:
92:fb:86:04:cd:21:38:70:43:d5:a3:1f:0f:81:26:b4:5d:5d:
79:4b:9b:14:cd:ac:d2:2d:3d:6d:f8:15:4b:e8:0b:5e:22:08:
44:7d:48:f3:9d:91:89:84:ad:ae:e9:0e:3a:21:26:d0:0e:b2:
cf:ac:2a:a1:24:6c:07:f4:b1:a4:d0:2a:15:f7:1a:bb:5e:0c:
f6:b1:72:7f:15:8e:96:88:bf:e5:19:f9:57:de:37:70:96:bb:
1b:49:46:89:c3:70:ed:c4:25:1e:f5:50:ac:d1:f2:69:eb:b8:
8d:34:4d:02:55:5e:7a:90:26:95:6a:ce:7c:1e:ce:86:0c:f1:
20:00:59:0a:67:a8:a5:21:ef:57:a9:a7:fd:5f:40:05:0b:f6:
8e:d3:f0:24:e0:76:61:59:fd:a8:db:2b:4b:f4:7c:93:75:3f:
5e:da:e3:98:1b:0e:57:a9:fa:f3:73:00:30:a4:16:e5:84:91:
ca:3f:1a:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:49 2024 by rpki-client on console-ams.rpki-client.org