Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/Q652hputLFSSDJhjlZRmMXe2Xb0.roa
File: Q652hputLFSSDJhjlZRmMXe2Xb0.roa (raw, json)
Hash identifier: SIJ7ehvTF/sTjr6r3mtCldV37rzDmNzWjGB06rTwODg=
Subject key identifier: 43:AE:76:86:9B:AD:2C:54:92:0C:98:63:95:94:66:31:77:B6:5D:BD
Certificate issuer: /CN=0620eadb2e1562b4e2e4f480772c36887a777f24
Certificate serial: 01856E5D59790E23E53A0C9FEFF357EA14AA
Authority key identifier: 06:20:EA:DB:2E:15:62:B4:E2:E4:F4:80:77:2C:36:88:7A:77:7F:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/Q652hputLFSSDJhjlZRmMXe2Xb0.roa
Signing time: Sun 01 Jan 2023 17:24:49 +0000
ROA not before: Sun 01 Jan 2023 17:24:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20649
IP address blocks: 78.111.97.0/24 maxlen: 24
78.111.98.0/24 maxlen: 24
78.111.111.0/24 maxlen: 24
78.111.106.0/24 maxlen: 24
80.93.212.0/24 maxlen: 24
80.93.208.0/24 maxlen: 24
80.93.213.0/24 maxlen: 24
217.195.192.0/24 maxlen: 24
80.93.216.0/24 maxlen: 24
217.195.198.0/24 maxlen: 24
217.195.196.0/24 maxlen: 24
217.195.206.0/24 maxlen: 24
217.195.204.0/24 maxlen: 24
217.195.203.0/24 maxlen: 24
217.195.207.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:5d:59:79:0e:23:e5:3a:0c:9f:ef:f3:57:ea:14:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0620eadb2e1562b4e2e4f480772c36887a777f24
Validity
Not Before: Jan 1 17:24:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=43ae76869bad2c54920c98639594663177b65dbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5f:b9:14:81:4f:35:44:2e:4d:c4:be:5e:90:
7f:8d:f9:3b:50:a2:0b:c3:7f:e7:45:8d:6e:f1:48:
15:47:11:fb:59:56:b7:77:10:5f:17:2b:3c:36:d6:
b2:09:0e:39:2f:9d:3d:82:7f:2e:d3:b0:33:01:d1:
40:ca:6a:97:4d:da:5f:79:16:48:eb:d0:b0:0e:e1:
cd:7d:f2:a9:0c:5d:5d:24:45:00:07:56:06:33:d7:
f5:61:fa:2c:b1:a6:83:2f:25:cb:4f:cd:20:e1:1a:
0b:f3:9a:69:78:02:96:2e:8a:41:47:d2:81:9e:ed:
42:ec:a7:dd:7d:71:f1:9c:77:55:7e:69:6c:09:7a:
00:f0:e9:d3:f6:14:5b:f6:ab:a5:c3:21:04:15:b2:
fb:3c:d6:4d:76:ed:48:b1:6b:21:5c:92:2a:af:f4:
09:25:9e:33:68:c7:ee:e8:70:91:35:fe:7a:10:1f:
45:44:b9:4f:11:4a:9f:e0:aa:0d:69:b0:ee:ac:c4:
64:63:8b:a6:63:a5:e0:fc:93:3c:22:ea:c1:3f:ba:
f8:07:36:72:d4:9f:14:09:05:81:32:00:6d:c6:32:
51:df:74:65:ce:32:b1:30:ec:24:59:87:f7:0d:f0:
08:3b:e9:0f:e4:d9:32:80:f2:59:21:5e:87:3e:99:
65:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:AE:76:86:9B:AD:2C:54:92:0C:98:63:95:94:66:31:77:B6:5D:BD
X509v3 Authority Key Identifier:
keyid:06:20:EA:DB:2E:15:62:B4:E2:E4:F4:80:77:2C:36:88:7A:77:7F:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/Q652hputLFSSDJhjlZRmMXe2Xb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.111.97.0-78.111.98.255
78.111.106.0/24
78.111.111.0/24
80.93.208.0/24
80.93.212.0/23
80.93.216.0/24
217.195.192.0/24
217.195.196.0/24
217.195.198.0/24
217.195.203.0-217.195.204.255
217.195.206.0/23
Signature Algorithm: sha256WithRSAEncryption
4c:0a:d1:1b:9b:6f:9d:90:e1:66:51:51:08:64:5c:26:ae:12:
93:9c:8e:16:65:49:e8:7c:97:87:11:c9:47:f5:1a:fe:10:4f:
aa:ea:1b:50:68:ef:43:47:77:5f:37:81:e7:c2:f2:93:e3:33:
e5:96:4c:6c:37:df:bf:d0:65:23:f3:3a:d9:47:9c:be:5a:d0:
99:ff:a2:6f:4a:9e:9f:91:20:2f:6c:8d:a4:a7:b8:b0:b1:a7:
1d:8a:d7:1f:f4:f4:35:b2:1a:40:33:e8:53:48:d1:de:50:26:
08:b3:bd:47:7a:d4:99:c5:9e:b0:42:70:1e:04:5a:27:ec:9b:
d5:7d:09:ce:5f:80:0c:39:82:f0:9d:10:1b:34:06:94:40:bf:
93:7e:fa:1a:5a:d7:78:8c:03:32:f9:f2:8f:18:f8:4c:e2:c5:
bf:34:d1:a2:ef:97:b6:21:d5:5b:5f:24:48:3a:7e:26:88:dc:
0d:ed:2d:99:3b:4f:a9:eb:d2:06:3f:a5:09:b3:84:fe:b5:96:
1f:6d:17:61:2c:06:79:ae:bc:5d:41:79:54:3c:74:c7:29:cc:
20:ac:5b:82:b5:6c:f8:da:5c:5c:5c:74:13:fa:4f:9b:ac:17:
4d:b7:9d:29:42:f0:39:15:a4:a8:54:e6:3b:46:a7:36:bc:ec:
6c:8f:ff:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:33 2024 by rpki-client on console-ams.rpki-client.org