Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/3626dc-221f-4b9a-bb68-3e3812ffa147/1/aUdfVfCKrDBwo_AMeXC1TalHOfU.roa
File: aUdfVfCKrDBwo_AMeXC1TalHOfU.roa (raw, json)
Hash identifier: J9LxyNyiL3kct4Aqby9j8bxuTe4W7aYPc6+X7qrowZI=
Subject key identifier: 69:47:5F:55:F0:8A:AC:30:70:A3:F0:0C:79:70:B5:4D:A9:47:39:F5
Certificate issuer: /CN=3d92bc045ab9cc9f017e8bf7ffe423da804a614f
Certificate serial: 0191313ECBA9BC9957FB628EC4123680382F
Authority key identifier: 3D:92:BC:04:5A:B9:CC:9F:01:7E:8B:F7:FF:E4:23:DA:80:4A:61:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PZK8BFq5zJ8Bfov3_-Qj2oBKYU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/3626dc-221f-4b9a-bb68-3e3812ffa147/1/aUdfVfCKrDBwo_AMeXC1TalHOfU.roa
Signing time: Thu 08 Aug 2024 09:08:04 +0000
ROA not before: Thu 08 Aug 2024 09:08:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14445
IP address blocks: 80.73.247.0/24 maxlen: 24
164.152.216.0/24 maxlen: 24
2a11:1680::/29 maxlen: 29
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:31:3e:cb:a9:bc:99:57:fb:62:8e:c4:12:36:80:38:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d92bc045ab9cc9f017e8bf7ffe423da804a614f
Validity
Not Before: Aug 8 09:08:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=69475f55f08aac3070a3f00c7970b54da94739f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d9:ea:50:22:52:3d:59:a4:05:77:4d:07:58:
56:6c:e2:49:b1:0d:34:3b:b3:a4:f0:b4:a6:e7:d5:
54:7c:3f:48:e6:33:7c:4c:43:94:3d:ad:4d:d8:e1:
7d:f8:6d:3f:30:aa:39:bd:bb:5d:71:b2:1e:49:79:
79:1e:72:81:f9:9b:77:2c:f4:70:40:77:ef:74:ba:
fb:80:e5:e9:47:07:41:1b:92:19:ca:1d:cf:8e:93:
72:1c:95:96:4b:27:05:39:9b:2c:0f:a7:08:a3:6c:
42:ea:74:62:97:56:6a:95:81:e7:9b:1f:cb:2c:ab:
9c:15:1f:d0:99:82:1f:3f:4c:0a:31:f4:43:9b:8f:
39:4a:b0:50:a3:4e:21:dd:49:c6:22:c8:89:a5:9e:
14:7e:ec:82:a5:2f:39:b6:67:81:44:c9:e6:bd:d4:
a4:a6:a3:f9:95:a5:3b:15:25:ae:ac:cf:d0:9f:c5:
96:21:b6:88:67:31:d0:35:fa:0b:e7:14:74:03:fb:
fa:4a:f2:d7:11:95:4a:b6:88:42:98:c2:0f:76:92:
2f:f5:dd:14:d0:d0:3f:bf:7f:86:f8:1f:02:8a:e9:
29:9c:8c:39:18:9a:31:8a:76:98:58:40:85:10:f0:
ac:bd:6c:18:38:18:0e:f5:e4:b6:1f:a7:36:85:84:
89:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:47:5F:55:F0:8A:AC:30:70:A3:F0:0C:79:70:B5:4D:A9:47:39:F5
X509v3 Authority Key Identifier:
keyid:3D:92:BC:04:5A:B9:CC:9F:01:7E:8B:F7:FF:E4:23:DA:80:4A:61:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PZK8BFq5zJ8Bfov3_-Qj2oBKYU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/3626dc-221f-4b9a-bb68-3e3812ffa147/1/aUdfVfCKrDBwo_AMeXC1TalHOfU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/3626dc-221f-4b9a-bb68-3e3812ffa147/1/PZK8BFq5zJ8Bfov3_-Qj2oBKYU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.73.247.0/24
164.152.216.0/24
IPv6:
2a11:1680::/29
Signature Algorithm: sha256WithRSAEncryption
2d:d6:0b:a8:c7:84:ae:b5:7c:e6:45:af:c2:d9:3f:24:6c:4d:
3d:c7:ad:f0:80:4f:db:86:9d:de:ae:15:eb:65:57:84:7c:ad:
95:5f:6a:d4:04:ca:c4:ee:47:3e:13:7e:03:20:db:f4:b2:ad:
b9:82:05:32:f8:07:ae:73:bb:81:60:e8:be:f1:0c:8c:3d:f5:
8a:6d:87:76:c5:8e:f3:af:47:d2:36:75:76:34:7a:e2:91:18:
86:0f:0b:0f:8a:22:8e:82:03:18:e5:64:f0:4d:77:a1:e8:e4:
b2:3c:3d:48:68:fb:f3:8d:47:3e:44:dd:28:a1:aa:a1:c6:94:
cc:60:07:c0:2b:01:bc:a5:41:fe:13:f2:38:cc:c4:76:d4:d0:
7d:73:2e:23:04:30:e9:1f:c5:5a:50:b1:7d:0f:92:66:a9:7f:
d1:97:52:b4:4b:cc:08:9f:72:9b:19:e3:30:f1:4b:50:1e:b2:
18:2f:91:7a:71:4f:05:86:c7:a6:d9:0e:f8:52:1a:14:7a:27:
7c:61:1a:46:f9:4e:40:90:a8:23:fc:57:05:cb:d5:87:76:97:
e4:20:1e:cd:d6:56:25:46:36:ea:ed:d2:e7:7c:58:22:d0:d5:
40:45:63:99:1f:11:0a:44:0c:50:b9:fd:3d:e1:5f:d5:06:e2:
48:3d:4d:ba
-----BEGIN CERTIFICATE-----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Generated at Fri Aug 9 13:56:30 2024 by rpki-client on console-fra.rpki-client.org