Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/ci1cufxj9CqMO1REsbzp22reeAM.roa
File: ci1cufxj9CqMO1REsbzp22reeAM.roa (raw, json)
Hash identifier: EhuhZQzGhRDXMpvOKmXk5fT1c4eY+TZB2HgSS8Yb8m8=
Subject key identifier: 72:2D:5C:B9:FC:63:F4:2A:8C:3B:54:44:B1:BC:E9:DB:6A:DE:78:03
Certificate issuer: /CN=c04db7623241d7e6678fc25751fa4e0b6665186b
Certificate serial: 018AEA39EF0F5F8CB49AE892B2F7FB901D86
Authority key identifier: C0:4D:B7:62:32:41:D7:E6:67:8F:C2:57:51:FA:4E:0B:66:65:18:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wE23YjJB1-Znj8JXUfpOC2ZlGGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/ci1cufxj9CqMO1REsbzp22reeAM.roa
Signing time: Sun 01 Oct 2023 07:52:59 +0000
ROA not before: Sun 01 Oct 2023 07:52:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20668
IP address blocks: 193.169.142.0/23 maxlen: 23
185.206.53.0/24 maxlen: 24
185.206.52.0/24 maxlen: 24
193.36.89.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ea:39:ef:0f:5f:8c:b4:9a:e8:92:b2:f7:fb:90:1d:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c04db7623241d7e6678fc25751fa4e0b6665186b
Validity
Not Before: Oct 1 07:52:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=722d5cb9fc63f42a8c3b5444b1bce9db6ade7803
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:df:11:82:cb:80:4b:de:4a:b4:85:67:1b:c2:
28:13:73:57:1f:f4:ae:50:ce:25:ac:e3:dc:63:65:
3e:c1:48:de:8b:5b:6f:be:ca:28:9e:4b:d8:e0:9d:
ab:cb:0b:1a:0f:7f:c9:f9:26:6c:39:eb:b3:21:81:
18:20:0f:da:9e:52:7e:0d:0b:98:d6:24:b6:f7:01:
be:2b:7f:3d:53:26:46:75:db:b2:ce:b8:36:50:3a:
b1:af:26:d9:f8:b6:14:80:0b:5d:78:2b:a3:67:56:
2f:99:5f:6b:b0:a2:e6:e7:be:35:74:a1:89:85:b7:
05:a7:b2:f4:dc:66:9b:37:ff:b8:18:45:7b:77:55:
86:e1:44:e8:d0:51:30:d3:7d:aa:7a:db:9a:da:f7:
c4:f5:38:d9:4b:c4:50:10:25:f2:c9:af:2b:ea:6e:
54:48:fb:30:97:e3:76:a0:e0:c9:51:0a:cd:5d:4a:
d5:fb:6a:d0:88:4b:2b:fb:e0:ca:44:85:82:74:bf:
ba:fc:bc:88:12:83:17:2d:67:3d:ca:2f:44:76:9c:
32:8c:03:b1:b6:26:37:b0:c5:6e:e4:39:2b:f7:21:
b0:86:47:3b:67:d2:da:79:26:0f:e2:38:ea:fe:76:
bd:fe:1a:22:90:0c:df:a8:6e:c2:1d:2f:59:71:b0:
98:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:2D:5C:B9:FC:63:F4:2A:8C:3B:54:44:B1:BC:E9:DB:6A:DE:78:03
X509v3 Authority Key Identifier:
keyid:C0:4D:B7:62:32:41:D7:E6:67:8F:C2:57:51:FA:4E:0B:66:65:18:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wE23YjJB1-Znj8JXUfpOC2ZlGGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/ci1cufxj9CqMO1REsbzp22reeAM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.206.52.0/23
193.36.89.0/24
193.169.142.0/23
Signature Algorithm: sha256WithRSAEncryption
9f:ba:15:38:61:ae:0e:64:d6:70:0a:d1:ea:d0:42:00:78:08:
6d:85:1d:c3:7a:99:46:b8:42:92:0e:90:e3:cf:9e:78:fb:5b:
74:0c:1e:a2:a5:a0:0d:76:7d:c5:d3:2e:68:b5:5e:39:e7:f1:
19:5f:16:a4:c1:4f:a8:c3:5e:fa:f5:3e:71:bc:7a:de:eb:53:
45:d3:fe:44:0c:62:b4:ef:7a:7c:8c:cb:18:64:e1:3c:c4:20:
b4:1b:97:41:dc:4d:9c:41:95:56:03:70:58:0d:d7:5a:06:01:
da:3d:67:0d:f6:84:6c:f0:8f:33:c6:4d:ba:87:76:dc:08:9f:
ea:c7:49:35:e8:22:df:4d:ae:d0:70:e8:d9:97:eb:cf:15:d2:
25:41:25:f7:05:a4:02:62:7e:1a:55:26:bf:59:a5:07:f4:f1:
24:4e:09:85:b3:a1:b4:03:00:f6:be:8d:b9:80:28:8b:6f:fc:
a6:13:92:1f:7a:57:21:20:91:ad:87:24:69:c6:58:b4:83:d1:
cc:93:49:4b:30:07:86:35:cd:e3:f3:2d:cf:11:74:9a:9f:90:
ea:b1:3d:ba:28:3b:4d:2c:8a:88:65:ce:7b:11:fe:27:77:39:
1a:55:d2:cf:76:d7:84:2f:5b:48:54:cc:c5:e2:2e:cc:c1:80:
76:49:ca:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:46 2024 by rpki-client on console-fra.rpki-client.org