Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/RbElG1Dn66ckxvG8CYaTochr_DM.roa
File: RbElG1Dn66ckxvG8CYaTochr_DM.roa (raw, json)
Hash identifier: nyQFljQ5YJV3m5hLBrr4Dj3iLZ7X60W26Ur2W8eCh7I=
Subject key identifier: 45:B1:25:1B:50:E7:EB:A7:24:C6:F1:BC:09:86:93:A1:C8:6B:FC:33
Certificate issuer: /CN=0620eadb2e1562b4e2e4f480772c36887a777f24
Certificate serial: 3154FC1E
Authority key identifier: 06:20:EA:DB:2E:15:62:B4:E2:E4:F4:80:77:2C:36:88:7A:77:7F:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/RbElG1Dn66ckxvG8CYaTochr_DM.roa
Signing time: Fri 03 Jun 2022 11:54:20 +0000
ROA not before: Fri 03 Jun 2022 11:54:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 217.195.197.0/24 maxlen: 24
217.195.195.0/24 maxlen: 24
80.93.220.0/24 maxlen: 24
217.195.202.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 827653150 (0x3154fc1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0620eadb2e1562b4e2e4f480772c36887a777f24
Validity
Not Before: Jun 3 11:54:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=45b1251b50e7eba724c6f1bc098693a1c86bfc33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:59:5b:96:30:ea:6f:8c:fe:fc:8f:b1:23:41:
0b:62:3d:ea:7e:be:41:e0:b6:e7:2d:f8:78:04:7d:
c5:b5:bd:42:be:9f:ee:54:29:33:d8:2c:20:e0:b3:
d4:1e:5b:c9:cc:28:b2:02:8b:5c:5d:ad:d4:c1:c0:
0a:f3:d7:1f:40:88:73:a8:c6:5e:99:e2:49:6c:37:
fe:6e:ce:54:10:de:8b:63:4e:e2:c6:eb:58:2d:b0:
0b:02:81:b3:4a:e5:68:45:2a:64:4b:b4:96:bc:c3:
44:ea:3f:7b:60:8d:e0:a1:d2:38:d5:c0:3b:84:87:
17:18:b7:e8:e0:4a:7c:a1:92:ac:bd:1d:65:c9:51:
84:f5:4e:ac:ef:a8:20:b0:b3:af:6a:0f:21:b0:2f:
80:d7:44:86:da:9d:f6:fe:51:4d:5d:a5:8b:a5:79:
86:1d:41:50:8b:54:b7:f3:0b:10:b2:0c:8b:02:a9:
c2:1e:4a:e7:81:30:d0:1f:44:dc:0f:5f:28:99:d1:
87:29:d2:9a:90:01:8b:15:eb:25:a5:e7:af:96:b2:
c3:7b:0d:81:c6:50:86:b6:40:41:22:63:fd:b9:0e:
f6:09:a1:67:73:0a:8e:27:54:d2:9a:56:5f:78:cd:
a2:69:6b:8a:a5:00:68:ac:03:5d:00:6f:d9:b6:91:
5f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:B1:25:1B:50:E7:EB:A7:24:C6:F1:BC:09:86:93:A1:C8:6B:FC:33
X509v3 Authority Key Identifier:
keyid:06:20:EA:DB:2E:15:62:B4:E2:E4:F4:80:77:2C:36:88:7A:77:7F:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/RbElG1Dn66ckxvG8CYaTochr_DM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.93.220.0/24
217.195.195.0/24
217.195.197.0/24
217.195.202.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:1b:95:f0:57:e4:0d:f1:9e:9f:46:71:ee:ab:b1:19:8d:e3:
87:d1:28:0c:15:e6:3c:69:75:b2:5b:f9:e4:8b:73:64:99:ab:
01:34:95:25:09:9e:1b:b2:08:e7:da:ed:87:a3:d8:28:18:5d:
5f:d4:d1:fa:15:61:19:08:89:3f:dd:47:da:07:c4:6e:be:a0:
b2:f5:fd:3c:8b:c8:d5:60:a7:90:53:d3:f8:d8:31:ec:30:6c:
0f:92:a9:68:20:b5:0d:1d:98:9a:30:42:6d:e5:82:05:47:a4:
25:b9:66:2e:eb:2f:ae:ee:d0:a2:5c:29:f6:cb:ac:87:4a:87:
75:c8:17:a4:7b:0c:b8:3e:86:73:f7:d4:db:52:e9:9e:a5:26:
fb:c6:90:f9:88:3c:9e:d8:38:d4:e2:98:8a:a9:4d:fe:7e:04:
c5:0c:46:bf:18:9f:dd:af:b5:d6:fc:43:0d:1b:41:65:64:64:
fb:d2:18:ab:75:23:0b:37:3b:00:a2:23:64:6b:f3:23:ac:d8:
26:e8:28:b0:df:02:41:b0:37:2f:7a:40:1c:28:a3:30:0f:ce:
65:80:13:71:ec:35:96:cc:76:9c:bf:20:7b:ec:49:20:7e:0a:
db:d7:7a:ab:0b:33:45:b9:ea:a1:73:64:0e:bb:54:45:c3:44:
ed:c1:80:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:33 2024 by rpki-client on console-ams.rpki-client.org