Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/cda958-3cab-4b23-916c-35de384c0982/1/vQHdGBUKTNNDc5Mo2Ouhn6iUZhw.roa
File: vQHdGBUKTNNDc5Mo2Ouhn6iUZhw.roa (raw, json)
Hash identifier: SE5oiZX+dD5oS1+vrQGzVm0VTNBAZF0GyJa9ABDQdNQ=
Subject key identifier: BD:01:DD:18:15:0A:4C:D3:43:73:93:28:D8:EB:A1:9F:A8:94:66:1C
Certificate issuer: /CN=98241aac9eda7bef69089f647b5d8f774ff43a26
Certificate serial: E09A
Authority key identifier: 98:24:1A:AC:9E:DA:7B:EF:69:08:9F:64:7B:5D:8F:77:4F:F4:3A:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCQarJ7ae-9pCJ9ke12Pd0_0OiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/cda958-3cab-4b23-916c-35de384c0982/1/vQHdGBUKTNNDc5Mo2Ouhn6iUZhw.roa
Signing time: Thu 31 Mar 2022 09:14:28 +0000
ROA not before: Thu 31 Mar 2022 09:14:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 33972
IP address blocks: 87.242.66.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57498 (0xe09a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98241aac9eda7bef69089f647b5d8f774ff43a26
Validity
Not Before: Mar 31 09:14:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bd01dd18150a4cd343739328d8eba19fa894661c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:61:8a:51:ba:df:26:d8:f8:84:cf:cd:3b:67:
08:49:d7:69:5a:33:0d:d4:fb:2f:28:62:09:1d:c3:
03:7f:7c:03:fd:51:84:9b:57:df:23:b6:06:f6:ef:
6c:09:fd:e8:0e:c3:c6:f3:5d:64:2f:f7:22:d3:13:
5c:c9:4b:40:30:4d:44:af:d6:5c:5f:1a:56:31:87:
7a:d8:e4:04:b3:f2:21:ec:7f:d5:da:e6:28:2c:8c:
9f:13:cf:84:2e:26:7f:7b:16:91:0d:14:bd:9d:91:
dd:2e:11:4c:68:20:bc:bb:37:2d:a7:ca:07:60:4b:
54:d1:19:49:8b:92:a7:ce:5c:84:f4:3a:ce:c2:86:
27:48:dc:a2:89:8a:b6:fd:0a:59:bb:e6:fb:0c:d4:
55:1e:06:2e:c2:e4:6f:9a:58:ab:9b:50:73:91:33:
8c:fa:99:30:04:44:5b:9b:68:d8:79:72:98:a4:d2:
e9:1f:88:ab:fc:1d:73:a7:ea:77:a7:e0:ce:42:71:
20:47:e9:f7:cd:d8:ef:81:2c:dc:bb:c2:1d:ae:19:
d6:86:78:be:5a:4f:ad:36:1f:c0:aa:ca:45:a6:b8:
89:ae:74:3a:99:7b:fa:fa:69:b1:4c:5b:01:a6:98:
5a:84:35:f9:da:c9:90:e6:d3:cb:d9:4a:9f:97:4d:
67:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:01:DD:18:15:0A:4C:D3:43:73:93:28:D8:EB:A1:9F:A8:94:66:1C
X509v3 Authority Key Identifier:
keyid:98:24:1A:AC:9E:DA:7B:EF:69:08:9F:64:7B:5D:8F:77:4F:F4:3A:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCQarJ7ae-9pCJ9ke12Pd0_0OiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/cda958-3cab-4b23-916c-35de384c0982/1/vQHdGBUKTNNDc5Mo2Ouhn6iUZhw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/cda958-3cab-4b23-916c-35de384c0982/1/mCQarJ7ae-9pCJ9ke12Pd0_0OiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.242.66.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:f8:19:41:5a:82:20:07:43:51:ee:a3:2a:08:e5:a1:c7:4d:
65:31:18:84:62:d3:6c:b0:51:f0:fb:5c:e3:6f:e2:6e:29:72:
9e:7e:22:2c:de:29:f0:ef:2e:9a:48:74:84:d7:2f:1f:47:90:
80:85:1e:0c:8a:c0:c0:5e:44:a5:a2:99:04:99:bf:ae:af:88:
a6:53:00:67:eb:c7:38:2b:e9:69:3b:75:64:93:85:1b:bd:41:
4f:b6:f8:bd:05:ac:86:f6:69:90:a1:f2:c8:db:87:6a:49:41:
b0:0d:cb:98:b3:d8:9d:ab:fd:84:ad:40:fb:88:8f:5e:ce:a3:
0d:02:aa:81:64:75:64:03:31:82:b8:21:9f:b1:98:d5:06:b7:
2c:09:2f:30:ef:c6:d1:45:23:50:c4:a7:91:68:de:04:f0:c1:
c6:c1:65:95:3f:c6:92:00:de:23:d2:a8:3d:cc:ef:0e:73:71:
27:7f:08:0b:57:12:e3:4b:84:8e:24:14:4e:92:f8:bf:76:a0:
45:d0:55:f9:37:78:81:e9:c7:e4:0f:17:8b:91:04:72:35:4b:
a0:b2:5a:41:b8:be:a5:bb:f8:45:5b:08:dc:9b:bf:bc:89:3f:
e6:a5:92:22:05:1a:c9:fb:99:03:49:f1:1b:df:bd:6c:3b:e1:
59:bb:c9:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:04 2024 by rpki-client on console-fra.rpki-client.org