Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wi25pIkkVT0mx-BCYW4-VjziXDw.roa
File: wi25pIkkVT0mx-BCYW4-VjziXDw.roa (raw, json)
Hash identifier: eLFYR4iaXarVOI3AgvYu8aT0fHUqF+sG605hjmXGkvM=
Subject key identifier: C2:2D:B9:A4:89:24:55:3D:26:C7:E0:42:61:6E:3E:56:3C:E2:5C:3C
Certificate issuer: /CN=c04db7623241d7e6678fc25751fa4e0b6665186b
Certificate serial: 018E3DCE2975905794130DE8F3D7A10B76D9
Authority key identifier: C0:4D:B7:62:32:41:D7:E6:67:8F:C2:57:51:FA:4E:0B:66:65:18:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wE23YjJB1-Znj8JXUfpOC2ZlGGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wi25pIkkVT0mx-BCYW4-VjziXDw.roa
Signing time: Thu 14 Mar 2024 16:31:44 +0000
ROA not before: Thu 14 Mar 2024 16:31:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12325
IP address blocks: 176.223.167.0/24 maxlen: 24
194.8.80.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:3d:ce:29:75:90:57:94:13:0d:e8:f3:d7:a1:0b:76:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c04db7623241d7e6678fc25751fa4e0b6665186b
Validity
Not Before: Mar 14 16:31:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c22db9a48924553d26c7e042616e3e563ce25c3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8c:23:5d:2e:d7:9d:83:2c:aa:73:85:f8:1d:
66:4d:ab:c6:99:2c:e9:0e:51:ba:56:50:c9:2e:a6:
f2:c4:43:ee:ac:ab:f1:da:9f:23:dd:4a:a0:e6:67:
bc:bb:bc:76:6b:8d:fa:6c:d1:34:55:fa:09:9f:97:
06:e9:3b:31:0e:aa:68:10:1d:23:9a:37:d4:68:5e:
c9:b8:2c:7d:99:22:8d:c5:79:a9:46:41:93:00:c8:
02:9b:c8:78:ee:3f:72:1b:ea:05:ff:e9:f5:8f:03:
8b:7f:12:66:cf:92:63:8d:45:8b:86:f2:ea:9e:c5:
41:1c:48:3a:c8:de:ca:24:d4:06:e1:ca:5a:4f:e0:
72:cf:f0:fd:b4:da:4c:00:e0:34:45:82:53:1b:15:
1a:a8:97:40:5b:0c:9a:24:fe:25:21:67:9b:af:dc:
a8:80:1c:2d:5f:bb:9c:b3:71:1d:48:13:bd:dc:75:
59:28:fb:44:51:cf:84:e1:49:66:5f:56:eb:28:38:
e0:33:a0:75:89:40:b3:34:06:6c:56:77:12:58:13:
c9:7f:70:60:dd:4e:0e:ee:51:d1:db:e8:b5:94:c1:
e8:8e:f9:58:28:1d:f3:48:f2:29:23:c9:15:b2:6f:
b8:5a:bc:c6:72:ee:e8:11:55:00:8e:0c:f3:46:a0:
cd:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:2D:B9:A4:89:24:55:3D:26:C7:E0:42:61:6E:3E:56:3C:E2:5C:3C
X509v3 Authority Key Identifier:
keyid:C0:4D:B7:62:32:41:D7:E6:67:8F:C2:57:51:FA:4E:0B:66:65:18:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wE23YjJB1-Znj8JXUfpOC2ZlGGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wi25pIkkVT0mx-BCYW4-VjziXDw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.223.167.0/24
194.8.80.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:7b:26:d8:33:c0:09:83:12:3e:2a:f9:bd:fa:2b:4f:27:68:
37:ee:a8:da:09:72:e7:f6:e5:69:4b:31:ea:20:a8:8e:d5:57:
4d:e2:46:15:10:18:a2:13:9b:e7:72:3d:8f:18:d9:8e:05:35:
d0:8f:a0:28:c4:a7:bf:4f:4c:38:a0:6f:a7:80:8f:92:46:40:
a9:0f:26:31:37:3a:ce:15:ee:9b:9f:cb:80:a8:65:59:d4:61:
57:c9:f5:53:62:5b:6a:b1:62:72:f2:4c:99:31:39:c1:6f:d2:
c0:b0:c7:c8:c7:10:73:ed:b6:21:f0:b9:94:0b:60:1a:0a:28:
ac:40:aa:cf:01:b6:36:8d:98:27:30:b1:31:48:8f:6e:09:ae:
f0:86:40:0d:6b:c0:78:0f:42:81:10:ea:c3:85:96:17:be:87:
4d:af:9f:da:e2:22:8a:79:28:ab:e2:45:b9:0c:42:22:8d:ad:
e7:a5:23:cb:eb:b9:4d:af:0f:5c:0b:f0:72:34:39:dc:26:fc:
39:1c:6d:f8:f9:d7:e3:8a:3d:f8:19:24:ca:6d:04:c7:00:89:
0c:68:83:ad:ff:3e:b8:18:fd:8a:2f:ae:51:51:c1:97:0a:a2:
1f:54:d9:b6:77:3e:24:3c:b3:04:fd:3e:20:4a:7a:47:55:94:
89:d0:55:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:46 2024 by rpki-client on console-fra.rpki-client.org