Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/FQYvWiLU_AvmQNrORxPb8jy0k9U.roa
File: FQYvWiLU_AvmQNrORxPb8jy0k9U.roa (raw, json)
Hash identifier: lHwZYAZrMPfFFWkhNHs5/JtGcZhfSxWQTX6VZc0Hfmw=
Subject key identifier: 15:06:2F:5A:22:D4:FC:0B:E6:40:DA:CE:47:13:DB:F2:3C:B4:93:D5
Certificate issuer: /CN=632cd87feabe407522e06553f2eb05a0c1602fbf
Certificate serial: 018FA07EC7134F7A68D31795F59598FBA1F2
Authority key identifier: 63:2C:D8:7F:EA:BE:40:75:22:E0:65:53:F2:EB:05:A0:C1:60:2F:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YyzYf-q-QHUi4GVT8usFoMFgL78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/FQYvWiLU_AvmQNrORxPb8jy0k9U.roa
Signing time: Wed 22 May 2024 13:30:14 +0000
ROA not before: Wed 22 May 2024 13:30:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62240
IP address blocks: 146.19.51.0/24 maxlen: 24
185.94.67.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:a0:7e:c7:13:4f:7a:68:d3:17:95:f5:95:98:fb:a1:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=632cd87feabe407522e06553f2eb05a0c1602fbf
Validity
Not Before: May 22 13:30:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=15062f5a22d4fc0be640dace4713dbf23cb493d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:5d:ad:e1:13:6c:4d:93:d2:3a:9a:e3:1d:cd:
e8:69:b1:e4:de:e3:c1:08:1d:75:4e:09:2a:0a:d7:
d6:ea:0c:bc:da:ac:2a:ee:0f:5a:ea:9a:46:42:a5:
d4:6f:fb:ab:2b:56:ad:86:ca:09:c2:c1:39:ef:97:
1d:c1:41:d0:6a:53:e7:c8:26:e0:93:7b:2b:c6:ce:
37:1f:76:16:84:e7:1e:f8:98:24:09:46:84:db:46:
a8:12:5c:cd:cb:d5:f0:93:68:00:d5:55:c4:46:1d:
1e:56:fb:e4:e9:59:9e:38:3c:62:53:49:a0:b8:ab:
c1:50:16:d8:aa:1f:5d:3f:ef:05:41:32:40:e8:46:
d7:61:f8:c0:2b:8b:6c:f6:44:5f:06:33:c4:8e:fb:
16:50:68:ce:10:62:1c:b0:24:6d:7a:c4:49:2c:98:
22:1f:d8:a4:36:f6:e2:23:f0:61:b6:64:be:d4:7c:
3d:ae:f9:61:02:26:ca:60:8b:b0:73:de:d7:c5:f9:
76:c9:ce:1d:3a:21:8f:12:9c:74:7a:2d:de:b2:ca:
00:33:ca:9c:83:40:61:f3:07:8d:4c:1a:7e:16:c2:
d1:e5:b6:3f:eb:21:84:7f:90:ba:6b:a2:fb:f3:e4:
f1:b8:49:37:03:08:34:cb:e4:a3:33:42:4e:b9:b2:
ef:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:06:2F:5A:22:D4:FC:0B:E6:40:DA:CE:47:13:DB:F2:3C:B4:93:D5
X509v3 Authority Key Identifier:
keyid:63:2C:D8:7F:EA:BE:40:75:22:E0:65:53:F2:EB:05:A0:C1:60:2F:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YyzYf-q-QHUi4GVT8usFoMFgL78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/FQYvWiLU_AvmQNrORxPb8jy0k9U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.51.0/24
185.94.67.0/24
Signature Algorithm: sha256WithRSAEncryption
79:47:3b:8a:3f:12:67:82:93:11:e7:ca:7e:da:7c:0c:79:27:
c4:1f:76:a2:0c:d8:e9:04:11:8b:e8:98:f7:71:14:33:4d:a7:
a4:d8:ca:1c:02:d7:e9:5e:3c:10:6d:55:b1:47:e3:f6:ff:2c:
2a:f0:44:17:68:e4:d0:07:51:7d:d8:b9:1e:92:c9:03:e7:f2:
af:b2:e6:fb:52:6d:2e:70:e7:c2:1e:d4:86:57:ab:60:5e:00:
94:77:17:54:c9:4a:00:45:54:72:1e:58:47:c8:1a:ce:f1:17:
03:39:d6:90:b7:d7:fa:4e:b3:8b:75:a1:6f:0a:25:d1:43:2c:
bc:f5:4b:d2:2a:e0:97:b1:19:95:da:20:89:95:4a:07:10:d7:
e0:6d:a5:d1:6e:9d:05:d4:86:1a:4d:95:22:6d:75:a3:d8:93:
25:cf:9a:81:31:b2:bd:fd:31:33:1f:3a:db:28:34:e1:23:99:
e5:2e:9f:01:ad:8b:4a:43:cb:68:40:b6:c2:2f:f1:1d:34:f0:
58:be:1c:4d:ac:a5:95:da:5a:f6:39:fa:e7:c1:21:e7:e7:f4:
19:c7:fe:3a:a3:23:16:0c:08:93:4f:a5:33:20:b6:96:93:40:
3f:df:af:63:18:a5:9e:73:12:7d:63:81:9f:ef:f3:02:3d:b2:
7c:02:bb:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:21:30 2025 by rpki-client