Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/cda958-3cab-4b23-916c-35de384c0982/1/3S6Bj1oFcEocBChie7iX9mQ5jAI.roa
File: 3S6Bj1oFcEocBChie7iX9mQ5jAI.roa (raw, json)
Hash identifier: oGyY8baZ4N/2hS0H6YeoBJdzHI5wiMMLq9Z1ekvy/xw=
Subject key identifier: DD:2E:81:8F:5A:05:70:4A:1C:04:28:62:7B:B8:97:F6:64:39:8C:02
Certificate issuer: /CN=98241aac9eda7bef69089f647b5d8f774ff43a26
Certificate serial: 018570B06CCD16A2B8BC90ED484C65B16F59
Authority key identifier: 98:24:1A:AC:9E:DA:7B:EF:69:08:9F:64:7B:5D:8F:77:4F:F4:3A:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCQarJ7ae-9pCJ9ke12Pd0_0OiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/cda958-3cab-4b23-916c-35de384c0982/1/3S6Bj1oFcEocBChie7iX9mQ5jAI.roa
Signing time: Mon 02 Jan 2023 04:14:48 +0000
ROA not before: Mon 02 Jan 2023 04:14:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 33972
IP address blocks: 87.242.66.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:b0:6c:cd:16:a2:b8:bc:90:ed:48:4c:65:b1:6f:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98241aac9eda7bef69089f647b5d8f774ff43a26
Validity
Not Before: Jan 2 04:14:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dd2e818f5a05704a1c0428627bb897f664398c02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3e:33:d9:7b:a7:2b:c7:5a:9b:45:ad:38:1d:
bb:7b:d2:b9:ec:ed:17:0d:ee:4d:c3:d1:df:73:e8:
90:8f:4e:21:52:12:c8:be:69:47:5d:5f:8f:a1:33:
ff:e2:14:e5:6f:a0:f9:32:c3:a7:95:d5:12:ad:41:
75:bb:89:c7:df:de:00:e9:d5:e0:e3:fc:dc:0e:07:
6b:89:7a:14:77:7a:95:b7:01:10:3e:df:cd:bb:de:
b3:4c:a1:9d:d7:e3:cf:b0:27:36:ef:12:25:73:4e:
11:03:83:7d:93:ea:38:2b:f0:3a:1a:8a:fd:d7:f3:
99:b7:8e:22:7b:48:ce:b7:2b:5b:71:d6:68:c2:8b:
40:4f:79:0e:5a:ae:b5:dd:eb:71:58:88:73:22:ce:
73:13:75:04:ca:ca:b5:1d:19:0c:b8:0c:bb:af:a6:
df:02:f9:58:c0:d3:43:96:6a:9f:b3:1b:5e:5f:ee:
5b:ff:27:ee:9e:15:0e:ad:be:7a:58:6f:c4:a5:9d:
a2:0a:fb:1c:a4:a7:e6:32:44:34:0d:9c:57:f2:ff:
ae:fb:81:9a:6b:ca:1c:a8:d3:ed:5d:ca:33:7e:f8:
eb:c2:c8:3d:46:96:21:7f:2b:56:29:31:cd:69:c5:
f5:89:f8:27:2b:f7:8d:d4:36:75:12:93:09:83:d2:
77:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:2E:81:8F:5A:05:70:4A:1C:04:28:62:7B:B8:97:F6:64:39:8C:02
X509v3 Authority Key Identifier:
keyid:98:24:1A:AC:9E:DA:7B:EF:69:08:9F:64:7B:5D:8F:77:4F:F4:3A:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCQarJ7ae-9pCJ9ke12Pd0_0OiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/cda958-3cab-4b23-916c-35de384c0982/1/3S6Bj1oFcEocBChie7iX9mQ5jAI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/cda958-3cab-4b23-916c-35de384c0982/1/mCQarJ7ae-9pCJ9ke12Pd0_0OiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.242.66.0/24
Signature Algorithm: sha256WithRSAEncryption
88:75:d9:58:0d:c5:6a:11:43:40:40:8f:a6:1d:ab:9b:bc:40:
94:d1:d9:99:ce:05:5f:45:c0:34:5f:55:f4:fa:d4:26:f6:eb:
c0:15:48:f4:17:1e:23:24:b0:96:5f:13:0f:14:53:5e:6e:d2:
4d:31:ac:8c:b1:29:cc:7b:7d:fb:83:38:0b:35:7b:eb:1a:93:
a8:b3:ef:7d:9c:2b:18:b7:75:2b:16:02:e9:70:48:c8:23:de:
55:84:a8:48:0e:4f:c9:e4:8c:78:b9:ec:30:e2:f6:3a:f0:64:
9c:57:18:70:80:2a:80:b0:37:6b:4c:5e:c6:d6:58:1b:dd:3d:
bd:c9:19:b2:26:a8:fc:45:12:0f:d9:2d:89:a2:0d:93:37:07:
34:30:7a:82:30:21:98:d4:cf:b5:81:ac:ac:1f:8f:46:f7:e6:
08:d2:ea:93:e2:dd:d8:15:fb:80:5c:d7:37:2a:c5:2e:e7:49:
1a:b2:61:53:36:42:4c:4d:ca:ab:73:a8:35:c7:b1:7d:cd:ea:
fd:be:c7:56:83:43:d0:41:51:20:a1:7f:37:24:04:0f:7a:8d:
be:60:00:5e:c5:8f:5b:af:72:fe:8e:76:b9:cb:b0:3a:19:ac:
ce:10:42:d1:82:0a:c9:82:84:dd:24:97:ae:64:ab:28:05:36:
65:6a:2c:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:04 2024 by rpki-client on console-fra.rpki-client.org