Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/BYUBNo1XrHrnD6Noaq95LiFdCAY.roa
File: BYUBNo1XrHrnD6Noaq95LiFdCAY.roa (raw, json)
Hash identifier: hsh32TNsR9J2hMpCDEmi4e0mzwCmcrVWjnSFRtzkl/g=
Subject key identifier: 05:85:01:36:8D:57:AC:7A:E7:0F:A3:68:6A:AF:79:2E:21:5D:08:06
Certificate issuer: /CN=e8403b5e45cd58be5f6c5d33fa565ab49223e3db
Certificate serial: 0185CAA1DEF0DF1D11BF88601DAAFD21C3D6
Authority key identifier: E8:40:3B:5E:45:CD:58:BE:5F:6C:5D:33:FA:56:5A:B4:92:23:E3:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/BYUBNo1XrHrnD6Noaq95LiFdCAY.roa
Signing time: Thu 19 Jan 2023 15:24:43 +0000
ROA not before: Thu 19 Jan 2023 15:24:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8239
IP address blocks: 84.18.0.0/19 maxlen: 24
213.192.196.0/24 maxlen: 24
212.59.192.0/19 maxlen: 24
195.5.64.0/19 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:ca:a1:de:f0:df:1d:11:bf:88:60:1d:aa:fd:21:c3:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8403b5e45cd58be5f6c5d33fa565ab49223e3db
Validity
Not Before: Jan 19 15:24:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=058501368d57ac7ae70fa3686aaf792e215d0806
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:e8:41:f2:36:cd:54:72:26:1e:e2:a1:e1:e7:
d1:2c:4a:28:7d:97:56:b4:62:22:86:3a:a8:f0:cb:
5f:31:af:fb:16:76:7c:5a:af:06:d7:b2:a6:3c:e4:
42:88:bd:92:a5:e6:68:bb:11:67:33:3b:2c:27:69:
39:e6:07:2b:71:86:46:a0:fc:3e:29:b1:03:07:24:
13:fd:94:15:fe:24:68:f5:87:4a:93:4b:2d:65:34:
43:8a:ab:b5:08:b8:f8:70:34:7d:99:7d:df:aa:24:
03:f0:03:30:68:64:ba:5b:50:74:b6:34:4e:4e:86:
4c:1a:bf:f5:4c:e8:1d:f8:31:cb:57:01:59:20:84:
ba:a1:3b:41:0a:04:a2:94:08:20:e7:c2:10:42:47:
f5:5d:d9:ff:55:81:73:a5:87:6a:20:89:44:d6:92:
e0:87:ca:72:fa:07:bc:c3:4b:d6:b6:5a:62:47:82:
85:12:19:74:9b:b2:fb:f7:04:d9:67:eb:21:cb:77:
b6:89:de:f9:26:5f:6e:a0:ed:bf:eb:33:87:9c:77:
cd:df:3f:04:a8:ef:74:8b:c3:d9:1c:40:7d:47:3f:
8d:2e:09:6c:92:04:f3:17:47:91:1d:c0:79:2a:e5:
d8:3b:f7:a1:01:90:a8:4d:a7:af:52:d4:61:ca:a4:
60:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:85:01:36:8D:57:AC:7A:E7:0F:A3:68:6A:AF:79:2E:21:5D:08:06
X509v3 Authority Key Identifier:
keyid:E8:40:3B:5E:45:CD:58:BE:5F:6C:5D:33:FA:56:5A:B4:92:23:E3:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/BYUBNo1XrHrnD6Noaq95LiFdCAY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.18.0.0/19
195.5.64.0/19
212.59.192.0/19
213.192.196.0/24
Signature Algorithm: sha256WithRSAEncryption
ce:0a:e1:e2:75:a2:fd:ff:af:aa:50:62:d4:39:24:1e:eb:f5:
48:16:8a:48:a8:2f:3a:e8:f9:1a:bb:4f:f7:2d:91:e9:c9:00:
26:98:65:96:54:c3:e6:4d:c6:f5:02:b6:4c:07:20:c7:4a:c0:
1d:6e:4e:66:e5:00:29:e1:90:bb:60:0e:37:52:dd:1b:0f:2e:
0c:33:3f:03:80:87:8f:a5:13:6d:b6:3f:2d:af:a3:52:67:c5:
fe:20:eb:ef:d0:c3:8b:bb:7e:b8:e3:b6:62:2a:01:a4:5d:e1:
39:71:8e:93:14:da:46:ec:68:7c:b2:e6:91:0c:45:07:43:3b:
b9:a2:3f:bf:ee:8f:ee:8e:5a:8f:51:65:b0:b8:a1:bd:83:de:
3c:5e:61:9e:c9:80:12:7d:20:02:c4:92:43:c5:91:c0:c7:48:
1f:20:05:3a:36:37:21:c8:e8:42:84:c2:f8:58:07:8e:b5:ad:
ee:ea:e0:8d:cf:6a:12:95:b1:da:90:fc:5f:39:ec:13:0d:43:
db:a6:43:c2:13:a9:eb:cf:20:cc:a2:d4:97:a0:af:21:68:ef:
c3:6f:e1:a2:5b:a3:ad:c9:71:0e:73:20:4a:ac:b0:d1:42:09:
ae:17:04:dc:49:5e:45:23:0a:da:94:a1:16:93:0a:6e:7a:3e:
0f:42:8b:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:02 2024 by rpki-client on console-ams.rpki-client.org