Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/mEo0q08NXJPk4XMc8L9UnD8aKLk.roa
File: mEo0q08NXJPk4XMc8L9UnD8aKLk.roa (raw, json)
Hash identifier: 1ColBjRftj+btN4t/VWyDDhtz6HiWzPka4a7patmDms=
Subject key identifier: 98:4A:34:AB:4F:0D:5C:93:E4:E1:73:1C:F0:BF:54:9C:3F:1A:28:B9
Certificate issuer: /CN=e8403b5e45cd58be5f6c5d33fa565ab49223e3db
Certificate serial: 01865440B80F9A685CD8E2991451FD3433C1
Authority key identifier: E8:40:3B:5E:45:CD:58:BE:5F:6C:5D:33:FA:56:5A:B4:92:23:E3:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/mEo0q08NXJPk4XMc8L9UnD8aKLk.roa
Signing time: Wed 15 Feb 2023 08:46:12 +0000
ROA not before: Wed 15 Feb 2023 08:46:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13186
IP address blocks: 212.80.160.0/19 maxlen: 24
213.192.192.0/18 maxlen: 24
213.170.32.0/19 maxlen: 24
212.66.160.0/19 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:54:40:b8:0f:9a:68:5c:d8:e2:99:14:51:fd:34:33:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8403b5e45cd58be5f6c5d33fa565ab49223e3db
Validity
Not Before: Feb 15 08:46:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=984a34ab4f0d5c93e4e1731cf0bf549c3f1a28b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:c4:a0:e7:51:75:5a:69:b5:fa:46:82:fc:20:
13:52:d3:c3:a7:7b:d6:c0:9d:04:2f:71:be:ab:5d:
68:b2:e7:e9:82:7c:6a:c8:4a:f2:7d:dc:1a:16:4e:
e6:c6:06:75:91:ce:e0:c8:00:7b:09:c5:d8:a9:d3:
7e:7c:00:5a:81:60:d2:2a:b0:cd:d0:78:93:99:1a:
20:c7:99:bc:72:00:69:53:9b:af:bf:ac:87:08:2f:
e8:23:34:75:96:48:e5:90:71:73:c0:39:4a:55:2d:
0a:73:49:e6:b2:6d:3d:f5:5c:94:74:c8:54:eb:11:
f8:3b:9a:81:99:79:9a:4e:bd:54:7e:0a:95:80:52:
ca:ab:29:c1:13:0f:06:ae:7d:8a:a2:05:4b:91:81:
0d:3f:15:98:77:79:6a:0c:bd:c8:bb:53:d7:ae:04:
43:2d:94:7d:81:30:19:1c:e2:8b:b0:26:e5:c6:94:
6c:02:9b:73:25:9f:fd:9d:63:21:0b:a5:1c:4f:2d:
5c:a0:08:c5:49:66:53:08:fb:81:a2:bb:69:10:86:
04:7b:f3:5e:50:bf:65:b7:c7:b1:dd:66:7e:e3:67:
a5:5d:0f:b4:e0:9a:29:4b:cf:5b:70:6b:c2:97:59:
ea:24:dd:5a:86:20:f8:0a:e2:d1:61:47:93:bf:7b:
83:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:4A:34:AB:4F:0D:5C:93:E4:E1:73:1C:F0:BF:54:9C:3F:1A:28:B9
X509v3 Authority Key Identifier:
keyid:E8:40:3B:5E:45:CD:58:BE:5F:6C:5D:33:FA:56:5A:B4:92:23:E3:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/mEo0q08NXJPk4XMc8L9UnD8aKLk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.66.160.0/19
212.80.160.0/19
213.170.32.0/19
213.192.192.0/18
Signature Algorithm: sha256WithRSAEncryption
d9:69:5b:d3:37:b7:4f:7e:8e:00:19:5a:9d:b2:6e:d8:8a:0c:
8b:9e:71:95:b4:78:f2:32:d5:77:9c:66:cf:14:9c:26:9f:79:
d8:64:4d:01:86:d9:22:bd:b9:83:ea:38:0a:09:17:1f:f0:c0:
20:8f:03:15:be:4e:6d:2d:6b:cc:e8:d2:64:77:3c:21:3a:23:
5c:9f:88:45:9f:88:51:53:6e:1c:2d:58:e6:08:1c:e3:54:55:
7c:43:42:ec:7a:aa:42:a9:03:72:ac:d7:5e:0c:38:b4:31:ab:
39:a7:14:90:bf:f0:80:2a:30:15:43:96:80:85:62:86:7c:0c:
1f:fc:80:f2:d5:03:b0:31:55:c4:cf:c1:a1:52:52:72:5c:38:
a5:53:29:1e:ba:1d:b3:62:f3:d3:40:be:f3:dd:45:d8:a8:8f:
6f:eb:b4:db:9c:06:05:9c:c3:b2:6a:ab:28:59:e2:f3:91:e4:
40:b8:db:6e:3c:c0:25:88:34:b0:f5:20:43:7d:20:69:ab:cd:
8d:d5:59:14:73:d3:4b:82:10:dd:ef:f8:64:f4:72:01:8a:e6:
1f:ae:de:ee:74:18:90:f8:eb:fd:fb:9e:07:5f:19:0a:6c:a3:
0b:31:02:ae:5b:86:ca:d5:c3:57:ab:3b:e8:87:32:6a:a3:bb:
04:e0:19:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:33 2023 by rpki-client on console-ams.rpki-client.org