Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/qLk7dUi3cyzGl0gxbH1DAHj1_jQ.roa
File: qLk7dUi3cyzGl0gxbH1DAHj1_jQ.roa (raw, json)
Hash identifier: uq4YB+KHCYCqwEbOy9cOiFikW5UX6kJApOUZYuEkY1s=
Subject key identifier: A8:B9:3B:75:48:B7:73:2C:C6:97:48:31:6C:7D:43:00:78:F5:FE:34
Certificate issuer: /CN=af801984cc38f0a4fc5afe1adeab680c1b89e95b
Certificate serial: 0185DE096A4751DEDA4D294F6AA580A4EABE
Authority key identifier: AF:80:19:84:CC:38:F0:A4:FC:5A:FE:1A:DE:AB:68:0C:1B:89:E9:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/qLk7dUi3cyzGl0gxbH1DAHj1_jQ.roa
Signing time: Mon 23 Jan 2023 09:50:36 +0000
ROA not before: Mon 23 Jan 2023 09:50:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60175
IP address blocks: 89.63.0.0/20 maxlen: 20
195.4.128.0/19 maxlen: 19
195.4.160.0/20 maxlen: 20
195.4.184.0/21 maxlen: 21
195.4.192.0/20 maxlen: 20
195.4.208.0/21 maxlen: 21
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:de:09:6a:47:51:de:da:4d:29:4f:6a:a5:80:a4:ea:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af801984cc38f0a4fc5afe1adeab680c1b89e95b
Validity
Not Before: Jan 23 09:50:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a8b93b7548b7732cc69748316c7d430078f5fe34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:35:60:23:1b:b6:00:60:1b:94:5f:a1:51:c3:
b3:7e:0e:0a:d6:e5:b0:87:10:59:0a:fa:3c:3e:3d:
11:b9:86:dd:77:8a:51:fe:88:7f:49:9a:c0:03:0d:
6d:6f:12:cd:69:a2:8a:c6:03:d5:4e:fb:82:53:a8:
bb:1c:d9:ea:27:d9:bc:5a:72:94:0f:f6:b3:6d:77:
f0:79:3b:f9:af:9e:87:fa:a4:cc:03:0b:27:cc:53:
d9:46:75:2a:37:97:57:98:cd:7d:db:6a:f6:29:38:
8d:ab:1f:53:03:4f:97:fc:58:7b:9c:b1:a6:df:67:
0f:f5:14:60:01:a8:06:a3:cb:4c:10:08:09:74:03:
52:cf:ee:bf:18:36:cc:46:d0:ec:11:67:7d:76:67:
2e:6c:69:ea:24:cc:d7:df:33:ef:00:9f:13:08:b0:
98:49:87:e4:f7:c7:9d:9b:1c:6d:06:6e:c9:cc:76:
16:4b:18:e1:09:fd:12:e1:bc:2c:ad:3d:6c:d9:f7:
32:ce:84:f8:bd:67:25:e5:b0:bf:76:06:92:22:63:
f9:e8:a3:68:eb:78:78:42:42:42:c8:94:87:e7:6b:
1a:32:c2:53:ff:5d:d7:20:34:0c:57:a2:a5:95:8a:
b8:99:12:a3:20:46:78:60:a9:49:33:a3:56:94:23:
2f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:B9:3B:75:48:B7:73:2C:C6:97:48:31:6C:7D:43:00:78:F5:FE:34
X509v3 Authority Key Identifier:
keyid:AF:80:19:84:CC:38:F0:A4:FC:5A:FE:1A:DE:AB:68:0C:1B:89:E9:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/qLk7dUi3cyzGl0gxbH1DAHj1_jQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.63.0.0/20
195.4.128.0-195.4.175.255
195.4.184.0-195.4.215.255
Signature Algorithm: sha256WithRSAEncryption
2e:21:3e:83:e2:c5:5f:d8:65:72:09:b2:d0:2b:5f:46:b9:64:
be:93:83:93:22:78:5e:da:47:a5:da:b7:00:2b:f5:82:3d:df:
03:43:a5:d5:c3:32:0e:98:ba:96:8e:7a:00:73:9c:2b:e2:34:
19:6c:c1:bb:05:03:f4:1b:ca:20:71:82:00:4d:25:8c:ac:85:
f0:63:ef:b7:98:b7:ef:28:db:74:3a:7b:9f:37:9d:ad:48:b6:
bf:77:c0:73:24:f4:c6:f9:72:3f:89:18:8b:d2:f9:60:a4:c5:
e3:99:fc:7e:04:46:92:2a:20:10:c2:2b:b9:6c:d1:83:3e:23:
fd:12:06:1d:57:90:26:51:1e:0a:29:bf:e4:d3:9a:69:b2:f8:
82:25:4e:64:9f:f8:6d:ef:67:67:a2:21:26:e1:b6:4d:23:c1:
d7:13:d3:0b:79:8f:76:5b:02:d9:ac:29:47:8b:01:10:65:6a:
9e:ba:21:39:ff:8e:da:d3:eb:90:fa:78:ab:3a:19:af:45:9e:
82:5d:e0:95:52:30:65:f0:03:0b:b0:62:2a:48:26:cc:ea:aa:
55:13:25:af:46:e4:82:40:70:2f:09:7b:24:e4:7f:04:07:7d:
9c:19:d9:d4:e4:ae:d3:52:ce:e6:80:37:bf:1e:9a:2b:ba:65:
68:b5:54:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:45 2024 by rpki-client on console-fra.rpki-client.org