Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/Eii12rH8sYuKAqurU9lhJyJ_oms.roa
File: Eii12rH8sYuKAqurU9lhJyJ_oms.roa (raw, json)
Hash identifier: FRzW6HbsRPhEvts7BL4yoturDw41NiDsjClt6PzM8lw=
Subject key identifier: 12:28:B5:DA:B1:FC:B1:8B:8A:02:AB:AB:53:D9:61:27:22:7F:A2:6B
Certificate issuer: /CN=af801984cc38f0a4fc5afe1adeab680c1b89e95b
Certificate serial: 018E40F179BDB3563D3BB86C649F63885B51
Authority key identifier: AF:80:19:84:CC:38:F0:A4:FC:5A:FE:1A:DE:AB:68:0C:1B:89:E9:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/Eii12rH8sYuKAqurU9lhJyJ_oms.roa
Signing time: Fri 15 Mar 2024 07:09:10 +0000
ROA not before: Fri 15 Mar 2024 07:09:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60175
IP address blocks: 195.4.128.0/19 maxlen: 19
195.4.145.0/24 maxlen: 24
195.4.160.0/20 maxlen: 20
195.4.184.0/21 maxlen: 21
195.4.192.0/20 maxlen: 20
195.4.199.0/24 maxlen: 24
195.4.208.0/21 maxlen: 21
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:40:f1:79:bd:b3:56:3d:3b:b8:6c:64:9f:63:88:5b:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af801984cc38f0a4fc5afe1adeab680c1b89e95b
Validity
Not Before: Mar 15 07:09:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1228b5dab1fcb18b8a02abab53d96127227fa26b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:63:eb:9d:49:03:a5:a7:d1:ea:a1:38:a6:65:
79:66:53:ec:66:10:89:5f:5b:7e:51:66:78:5c:3a:
ef:79:12:89:1c:32:d7:b4:a0:ca:d9:85:65:34:e8:
f8:e4:21:13:f4:b1:a4:2c:b1:6b:cf:69:f5:56:97:
a2:40:d8:60:8d:74:3b:88:cb:58:a8:8e:4e:45:3f:
da:e6:75:23:1c:fb:65:a0:b9:d8:bf:b7:cf:83:12:
7a:3c:b5:56:a9:ed:3a:07:40:78:5c:be:76:11:43:
6b:c4:ee:66:c1:9c:a0:d9:3d:41:53:ad:80:b6:43:
5e:22:d7:7e:a6:ab:04:7f:5c:64:90:de:a4:67:7d:
0e:f8:d6:93:1f:6b:9f:8f:95:51:1b:6a:4a:7c:f1:
72:46:bb:91:aa:9b:cb:05:1a:f8:16:12:1e:4e:32:
0c:63:c6:29:a2:ca:54:87:8f:9b:20:5f:84:e7:d8:
e4:51:6a:2e:86:a6:eb:14:bb:a6:bb:59:ec:2a:a0:
c2:26:0d:a2:aa:32:70:bf:0a:35:43:b7:fc:63:24:
12:69:2b:c8:ac:ec:ff:b9:11:f0:d2:e8:37:2f:1b:
e4:82:bf:da:f1:f4:e0:f7:c0:c9:52:14:3f:cb:ed:
ee:d1:4e:78:e1:b3:5e:54:77:37:57:c1:41:f0:4b:
e8:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:28:B5:DA:B1:FC:B1:8B:8A:02:AB:AB:53:D9:61:27:22:7F:A2:6B
X509v3 Authority Key Identifier:
keyid:AF:80:19:84:CC:38:F0:A4:FC:5A:FE:1A:DE:AB:68:0C:1B:89:E9:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/Eii12rH8sYuKAqurU9lhJyJ_oms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.4.128.0-195.4.175.255
195.4.184.0-195.4.215.255
Signature Algorithm: sha256WithRSAEncryption
6c:f5:15:64:00:39:65:1c:7e:0a:84:15:d6:29:dc:b0:37:fc:
c6:43:43:be:f1:05:10:26:dd:00:74:e0:8b:9e:90:69:72:66:
5e:56:e5:97:3a:36:84:dc:04:b6:7c:c7:e8:65:92:e1:10:67:
f6:a7:9e:48:c6:e5:85:b0:61:36:2d:b4:6a:67:c2:8e:81:cf:
85:41:85:b0:83:a2:3e:14:53:e7:fb:0e:b4:20:b3:36:70:1f:
7e:72:52:2b:81:bb:75:7f:0f:7e:64:79:f5:00:ad:06:b4:89:
ca:df:f0:b5:02:b7:58:33:05:1a:f8:4d:33:98:9d:9b:16:e2:
df:48:51:d5:00:c8:27:24:f2:28:db:ad:7b:b3:e6:37:5a:27:
b7:88:51:3c:ed:3c:89:e3:e6:f7:f8:4d:09:02:21:f7:49:ec:
5a:90:6b:10:07:e6:7d:cc:bc:07:70:ed:60:ff:b0:a0:19:63:
4b:0c:51:5f:76:7e:38:64:f0:6d:11:2d:ad:c6:3c:b5:a2:f4:
be:26:58:51:f4:5d:ef:ad:90:d3:ca:41:c0:84:2b:07:30:9a:
99:ea:0e:57:bb:6b:fd:6f:dc:74:c6:15:b9:df:ee:75:68:96:
be:ec:cc:f3:1d:eb:4b:58:2e:34:f9:c5:8f:cd:cf:9b:b0:ba:
86:95:91:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:49:53 2024 by rpki-client on console-ams.rpki-client.org