Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/ug_zE9VbSfIHnFEc29MRSn0tKJ0.roa
File: ug_zE9VbSfIHnFEc29MRSn0tKJ0.roa (raw, json)
Hash identifier: hxSBrBU1bONhztEGILxUnEOT5xX4ddB0R6ORH5e3zZk=
Subject key identifier: BA:0F:F3:13:D5:5B:49:F2:07:9C:51:1C:DB:D3:11:4A:7D:2D:28:9D
Certificate issuer: /CN=af801984cc38f0a4fc5afe1adeab680c1b89e95b
Certificate serial: 018BD21F952075BAB79E0A41835F9CF8D628
Authority key identifier: AF:80:19:84:CC:38:F0:A4:FC:5A:FE:1A:DE:AB:68:0C:1B:89:E9:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/ug_zE9VbSfIHnFEc29MRSn0tKJ0.roa
Signing time: Wed 15 Nov 2023 08:36:06 +0000
ROA not before: Wed 15 Nov 2023 08:36:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60175
IP address blocks: 89.63.0.0/20 maxlen: 20
195.4.128.0/19 maxlen: 19
195.4.145.0/24 maxlen: 24
195.4.160.0/20 maxlen: 20
195.4.184.0/21 maxlen: 21
195.4.192.0/20 maxlen: 20
195.4.199.0/24 maxlen: 24
195.4.208.0/21 maxlen: 21
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d2:1f:95:20:75:ba:b7:9e:0a:41:83:5f:9c:f8:d6:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af801984cc38f0a4fc5afe1adeab680c1b89e95b
Validity
Not Before: Nov 15 08:36:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ba0ff313d55b49f2079c511cdbd3114a7d2d289d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:44:37:24:85:a0:6c:78:1a:ef:f9:67:23:93:
f4:6e:49:43:5e:06:93:1a:26:c2:dc:ac:4e:b3:e7:
26:cb:78:e3:e5:37:e9:f8:e8:1f:5f:98:4d:9c:4f:
e4:f7:29:1e:24:eb:ab:80:3e:fe:19:33:e4:ca:78:
3e:a0:c3:e9:4a:a9:0a:3b:f8:50:a8:52:e3:73:73:
93:eb:66:83:d5:a8:51:c0:ba:97:c4:97:56:a7:db:
04:44:0c:0d:46:20:d6:84:c2:62:e7:0c:2f:fa:f0:
39:c9:96:af:65:29:2a:fa:b9:e3:8e:a7:20:66:de:
09:20:5e:c8:56:a7:e6:c2:56:f3:1c:a2:20:de:df:
c6:4b:a4:61:7b:78:a8:81:97:15:50:67:2d:30:90:
15:f3:5f:ac:91:41:3d:f0:b3:be:d4:92:df:c8:67:
f0:c3:90:f3:1f:85:aa:8a:05:b7:d8:70:f6:c4:df:
d2:62:bf:ed:a1:30:91:a3:fd:8c:1b:bf:80:c0:c6:
67:e5:23:1d:0e:2c:12:30:d9:bb:be:c1:63:92:a3:
a3:7f:c0:70:92:fa:94:0d:3c:e9:b7:f8:db:a5:a9:
18:82:5f:b8:39:11:7d:7c:0c:07:9d:3d:94:14:fe:
1f:c8:cd:87:8e:69:8d:9a:b7:cd:da:89:7b:aa:bf:
48:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:0F:F3:13:D5:5B:49:F2:07:9C:51:1C:DB:D3:11:4A:7D:2D:28:9D
X509v3 Authority Key Identifier:
keyid:AF:80:19:84:CC:38:F0:A4:FC:5A:FE:1A:DE:AB:68:0C:1B:89:E9:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/ug_zE9VbSfIHnFEc29MRSn0tKJ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.63.0.0/20
195.4.128.0-195.4.175.255
195.4.184.0-195.4.215.255
Signature Algorithm: sha256WithRSAEncryption
25:02:9c:d4:67:62:01:a8:d7:39:4e:fc:c1:0c:1d:a0:10:68:
6b:7e:c3:81:9e:ff:0a:00:1c:f3:8f:fe:2f:f4:13:fd:4a:32:
65:58:91:87:a2:26:87:32:27:58:e8:a6:25:bd:7e:a6:ae:39:
74:57:65:b0:b8:34:04:a7:54:3c:12:0b:82:7a:c4:dd:37:c2:
8a:59:ac:2a:60:79:4a:d4:b4:0c:97:05:f6:84:1c:5f:dc:dc:
10:42:d1:64:7c:d6:53:5c:cc:a4:07:28:f0:57:0e:01:70:5f:
1f:78:ba:59:cd:db:dc:2e:6b:9a:3b:14:79:d7:41:46:fd:ec:
a4:49:37:5e:ef:52:8b:04:ca:78:80:7f:19:1f:a3:7d:1b:73:
6a:56:12:76:68:35:cd:ca:2f:e7:56:b9:bf:86:d4:36:52:f4:
53:70:e0:2a:56:18:ae:4d:61:fd:b7:30:44:ca:b2:d1:61:13:
8f:4f:27:58:06:60:ed:96:35:fb:c2:e1:8e:ae:c0:7d:55:51:
53:63:7b:79:0e:65:14:27:25:e9:3c:01:a5:97:d4:a8:15:38:
41:02:ab:d9:b9:6e:97:fc:30:84:b5:5d:92:1a:15:74:73:99:
d4:e5:cf:2a:a4:07:0e:d2:d0:97:ee:aa:c5:e5:f8:16:0e:1a:
16:da:ba:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:45 2024 by rpki-client on console-fra.rpki-client.org