Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/9cb6b5-7a53-406f-af7a-17c38d9c3768/1/sRUuEjzoQqQGEx8-2qWJ-k-0nUc.roa
File: sRUuEjzoQqQGEx8-2qWJ-k-0nUc.roa (raw, json)
Hash identifier: RtbUL1sd/OU8RFaAw6zqT6N4Fikj4JFL86AmYkTy6eM=
Subject key identifier: B1:15:2E:12:3C:E8:42:A4:06:13:1F:3E:DA:A5:89:FA:4F:B4:9D:47
Certificate issuer: /CN=ffff0fa51e6939d01dcaa2bb3d5dcaa6d0043da2
Certificate serial: 0191F022A869CF01084FCE4BFA229D5EBB33
Authority key identifier: FF:FF:0F:A5:1E:69:39:D0:1D:CA:A2:BB:3D:5D:CA:A6:D0:04:3D:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/__8PpR5pOdAdyqK7PV3KptAEPaI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/9cb6b5-7a53-406f-af7a-17c38d9c3768/1/sRUuEjzoQqQGEx8-2qWJ-k-0nUc.roa
Signing time: Sat 14 Sep 2024 10:44:48 +0000
ROA not before: Sat 14 Sep 2024 10:44:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199659
IP address blocks: 185.8.92.0/24 maxlen: 24
185.8.95.0/24 maxlen: 24
185.26.240.0/22 maxlen: 22
2a02:d540::/29 maxlen: 29
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:f0:22:a8:69:cf:01:08:4f:ce:4b:fa:22:9d:5e:bb:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffff0fa51e6939d01dcaa2bb3d5dcaa6d0043da2
Validity
Not Before: Sep 14 10:44:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b1152e123ce842a406131f3edaa589fa4fb49d47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:79:49:20:2a:b8:06:08:9f:54:fa:d6:e2:0f:
2e:fb:c8:c8:30:49:26:e3:c2:76:58:aa:aa:b0:79:
77:a3:bf:23:7b:6e:24:d5:77:ed:c7:bb:89:e1:b7:
76:24:57:e6:de:bb:26:c0:4a:11:e0:ab:f4:21:65:
d9:e6:67:54:f9:0d:c5:2e:af:2e:52:8e:4f:80:3b:
6d:53:3d:a9:ad:88:fa:db:be:76:50:ff:bd:16:d1:
06:31:21:2a:e5:4c:52:4e:78:5d:75:07:2c:04:63:
16:e2:c8:10:c6:08:e8:bc:ad:50:55:f2:a9:a6:da:
68:49:9d:36:8b:e9:b2:7e:a9:4c:4a:83:7d:08:c5:
ff:b9:fd:67:b6:a9:7c:4b:81:63:23:8b:26:a2:2a:
31:1d:c9:e7:2b:ce:07:44:36:12:f7:39:be:07:50:
0a:03:34:d3:65:9a:84:44:85:50:22:21:0e:62:d8:
a8:69:cd:f4:8c:77:ff:82:0f:2b:c4:87:db:4e:0a:
69:63:51:72:0c:2e:f2:91:d2:98:9c:5b:43:f5:4b:
02:e3:d2:7d:9e:b3:83:7e:18:71:a8:26:78:8b:d2:
94:b9:da:7a:45:9a:dd:1e:74:2a:49:de:b2:90:27:
06:c0:5a:c5:55:ca:02:c8:b2:5f:86:18:06:54:83:
c7:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:15:2E:12:3C:E8:42:A4:06:13:1F:3E:DA:A5:89:FA:4F:B4:9D:47
X509v3 Authority Key Identifier:
keyid:FF:FF:0F:A5:1E:69:39:D0:1D:CA:A2:BB:3D:5D:CA:A6:D0:04:3D:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/__8PpR5pOdAdyqK7PV3KptAEPaI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/9cb6b5-7a53-406f-af7a-17c38d9c3768/1/sRUuEjzoQqQGEx8-2qWJ-k-0nUc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/9cb6b5-7a53-406f-af7a-17c38d9c3768/1/__8PpR5pOdAdyqK7PV3KptAEPaI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.8.92.0/24
185.8.95.0/24
185.26.240.0/22
IPv6:
2a02:d540::/29
Signature Algorithm: sha256WithRSAEncryption
05:da:e4:70:41:ad:35:a4:fb:72:d2:ba:b0:5f:b5:72:b2:11:
8d:02:5d:92:6e:8a:c7:34:f3:f1:6d:bf:87:63:48:d5:fb:eb:
16:d6:f0:a8:d1:10:84:f6:00:ee:06:05:9e:fa:fc:63:b4:69:
9e:d2:f4:2b:09:a1:17:11:13:22:02:59:dd:e0:a7:e8:08:53:
78:07:eb:9d:a4:3e:6b:9c:ee:13:d1:c6:a4:85:c4:08:1c:00:
c6:50:e8:1b:c4:3c:bc:5a:56:90:57:d6:ee:c7:1e:b4:49:82:
49:2a:7f:cd:13:29:67:b3:27:5d:92:42:79:28:ca:05:03:56:
c6:80:c2:22:6a:2d:74:8e:94:2c:4b:72:dd:24:76:40:43:9f:
28:f9:e4:f0:02:76:0e:2c:e1:c1:d4:3f:af:52:38:9f:a1:e4:
0d:23:11:f9:14:61:90:51:a4:62:0f:4d:9f:ad:c5:db:6e:4f:
4d:34:48:97:1b:9e:ac:40:ce:d5:9b:66:8b:21:26:30:ba:26:
20:ca:f1:22:94:fa:0b:d5:c5:42:3c:08:4d:7a:3a:e1:b2:7d:
42:d6:c0:8d:7c:65:13:5a:e5:df:8b:92:29:8c:89:40:ea:2f:
de:80:26:78:32:c2:28:21:ea:70:ef:5e:bc:75:b7:be:cf:89:
26:5c:5a:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 24 15:05:54 2024 by rpki-client on console-fra.rpki-client.org