Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/dfb94c-fdf4-4972-9ad8-7d697337137b/1/_UavIr-YxKFqsDh9ICe5iLwXgOY.roa
File: _UavIr-YxKFqsDh9ICe5iLwXgOY.roa (raw, json)
Hash identifier: dL1aXV9+pftYjDoAVRtxWHMyPhdzfhLVwS9RaX8edpA=
Subject key identifier: FD:46:AF:22:BF:98:C4:A1:6A:B0:38:7D:20:27:B9:88:BC:17:80:E6
Certificate issuer: /CN=093509e7ec68fe2d943407d5dd126a0f596f2ab5
Certificate serial: 018CC4937F68891F5C59CB6882B1A17E3178
Authority key identifier: 09:35:09:E7:EC:68:FE:2D:94:34:07:D5:DD:12:6A:0F:59:6F:2A:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/dfb94c-fdf4-4972-9ad8-7d697337137b/1/_UavIr-YxKFqsDh9ICe5iLwXgOY.roa
Signing time: Mon 01 Jan 2024 10:30:49 +0000
ROA not before: Mon 01 Jan 2024 10:30:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47959
IP address blocks: 176.57.64.0/24 maxlen: 24
176.57.64.0/22 maxlen: 22
176.57.66.0/24 maxlen: 24
176.57.65.0/24 maxlen: 24
176.57.67.0/24 maxlen: 24
2a00:1b80::/29 maxlen: 29
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:7f:68:89:1f:5c:59:cb:68:82:b1:a1:7e:31:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093509e7ec68fe2d943407d5dd126a0f596f2ab5
Validity
Not Before: Jan 1 10:30:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fd46af22bf98c4a16ab0387d2027b988bc1780e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8d:e8:bb:bc:86:6c:bc:74:e6:7b:95:cb:3f:
77:d6:0c:9a:81:93:66:55:6e:7b:cb:9b:77:80:dd:
af:6f:40:61:9e:1c:bb:e8:86:85:c6:5a:16:e4:e4:
c9:2d:07:37:eb:76:5b:3f:77:a8:11:6f:2b:87:62:
01:ec:a6:90:11:68:be:69:d2:af:4e:64:be:d1:41:
71:e8:c2:c8:4d:dc:c5:a9:79:0c:30:04:3d:aa:7d:
2f:b8:cb:f7:f7:e7:23:11:55:3e:f0:8b:db:82:1e:
58:84:94:33:54:a6:0f:f7:18:ae:5b:97:03:0b:93:
d0:26:65:69:9f:3b:34:89:a7:c9:82:8e:a9:c4:57:
b7:1d:e9:b0:75:ed:4b:6a:fa:c3:2b:2a:7d:80:a8:
d7:36:fb:14:ac:df:37:24:fe:e6:4e:69:3d:dd:42:
cb:1c:25:05:ce:31:2f:4e:aa:b6:4c:3b:10:0b:f0:
5c:e5:1e:21:16:f2:a6:fa:83:d2:73:1f:9f:60:aa:
9a:bd:42:6b:37:a6:39:11:02:47:ed:96:3d:af:c4:
4d:e9:a0:56:75:30:7e:52:d0:55:c1:6e:a8:e6:3a:
93:6e:db:d6:50:21:bc:85:8f:1e:b2:19:33:74:69:
74:fa:fe:9e:85:00:d0:1b:58:c9:b1:ed:44:e3:62:
26:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:46:AF:22:BF:98:C4:A1:6A:B0:38:7D:20:27:B9:88:BC:17:80:E6
X509v3 Authority Key Identifier:
keyid:09:35:09:E7:EC:68:FE:2D:94:34:07:D5:DD:12:6A:0F:59:6F:2A:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/dfb94c-fdf4-4972-9ad8-7d697337137b/1/_UavIr-YxKFqsDh9ICe5iLwXgOY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/dfb94c-fdf4-4972-9ad8-7d697337137b/1/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.57.64.0/22
IPv6:
2a00:1b80::/29
Signature Algorithm: sha256WithRSAEncryption
3a:52:bc:7d:71:05:29:1a:b6:e7:72:9d:6f:c5:80:87:15:06:
63:5f:46:b8:70:25:2e:f4:53:dd:0d:f9:ec:05:4d:b0:94:7c:
7f:e4:f6:65:9f:c8:f5:40:21:75:50:5d:a2:fc:7c:b2:bb:aa:
ab:32:6d:cf:5b:a9:38:10:28:1e:a1:6f:99:a8:4f:b2:0a:23:
4b:fa:2b:25:ec:f1:9e:04:f7:5e:ea:de:3f:ef:23:60:17:3c:
d6:35:6f:cf:2b:62:b7:0b:0a:4f:74:9b:76:d9:f0:4c:64:12:
45:02:ea:ec:9e:db:ec:59:88:f1:32:4b:9d:21:47:a7:75:14:
a3:bb:b6:3d:b4:e7:06:7f:06:8f:f8:85:da:ae:79:f4:c4:d0:
87:21:5c:fc:2b:df:c0:be:56:48:f9:40:f1:7d:3a:ec:9c:21:
df:eb:7b:22:24:1e:f4:f9:71:70:70:58:36:53:3a:f2:25:08:
56:9c:f4:ea:f7:22:b4:8e:64:0d:28:cf:0e:d0:93:49:98:19:
d3:31:97:81:09:8d:5b:37:10:a1:fc:16:e3:cc:9b:2b:a9:73:
39:bc:af:91:b4:ad:f2:62:67:f3:0f:88:3a:cf:e0:9b:d8:5c:
f7:78:5a:8f:91:02:28:af:d3:4f:e1:be:16:61:de:e0:39:fc:
9a:35:72:81
-----BEGIN CERTIFICATE-----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 at Wed May 1 09:52:57 2024 by rpki-client on console-fra.rpki-client.org