Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/df4dd6-b423-4292-9634-accf261e5c19/1/NR9qiRVO4JQUKsfVgxzGZ95HvBQ.roa
File: NR9qiRVO4JQUKsfVgxzGZ95HvBQ.roa (raw, json)
Hash identifier: bv9Tv8mZajJB5aTGaGdNW3kLkKV/e+zR4YOJMLWfUxs=
Subject key identifier: 35:1F:6A:89:15:4E:E0:94:14:2A:C7:D5:83:1C:C6:67:DE:47:BC:14
Certificate issuer: /CN=6e1a5543a72b515787f29e84f8f1ab4fd2f1bbf2
Certificate serial: 069F5F64
Authority key identifier: 6E:1A:55:43:A7:2B:51:57:87:F2:9E:84:F8:F1:AB:4F:D2:F1:BB:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bhpVQ6crUVeH8p6E-PGrT9Lxu_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/df4dd6-b423-4292-9634-accf261e5c19/1/NR9qiRVO4JQUKsfVgxzGZ95HvBQ.roa
Signing time: Sat 01 Jan 2022 06:05:10 +0000
ROA not before: Sat 01 Jan 2022 06:05:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 188.95.14.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111107940 (0x69f5f64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e1a5543a72b515787f29e84f8f1ab4fd2f1bbf2
Validity
Not Before: Jan 1 06:05:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=351f6a89154ee094142ac7d5831cc667de47bc14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:1e:2b:91:0b:17:cc:51:3d:d5:ce:4c:e4:95:
f4:d0:41:1f:aa:ef:7f:dd:f1:12:f4:a1:09:ed:20:
1b:73:6b:cc:99:d9:88:0e:67:31:40:27:c9:3d:90:
1e:81:09:73:57:07:fc:e1:f8:c2:ea:81:e0:b5:a4:
86:a5:a9:07:10:a8:ea:39:46:9b:3b:46:89:ff:71:
4a:38:df:30:88:fd:6b:46:f3:bd:88:cf:67:ea:a8:
66:5b:f5:7e:f4:3c:27:6e:5d:5a:a5:8a:2f:e5:74:
c5:aa:ae:af:e3:76:72:30:a6:42:31:71:e0:36:1e:
e0:ca:3e:33:ab:77:80:df:48:c9:9a:09:e3:5d:54:
8e:ee:09:71:5c:31:c4:10:04:f0:94:d7:01:25:7d:
a0:93:7c:2e:84:80:f2:e3:9a:89:e4:2e:37:4b:c4:
64:0d:6c:e9:54:00:43:98:37:39:96:28:89:27:1a:
71:3a:c4:37:63:b6:f1:79:73:49:31:d5:d2:79:26:
b5:b4:d9:aa:cd:25:49:0d:67:72:36:1f:94:de:f9:
be:42:9e:a8:78:7c:8c:e8:63:f3:9c:f9:81:4a:03:
6c:70:56:66:7d:5b:ec:6d:3c:1c:79:52:21:56:8a:
9c:1e:c0:ea:74:e8:de:10:f3:c9:48:ae:1d:05:fd:
29:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:1F:6A:89:15:4E:E0:94:14:2A:C7:D5:83:1C:C6:67:DE:47:BC:14
X509v3 Authority Key Identifier:
keyid:6E:1A:55:43:A7:2B:51:57:87:F2:9E:84:F8:F1:AB:4F:D2:F1:BB:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bhpVQ6crUVeH8p6E-PGrT9Lxu_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/df4dd6-b423-4292-9634-accf261e5c19/1/NR9qiRVO4JQUKsfVgxzGZ95HvBQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/df4dd6-b423-4292-9634-accf261e5c19/1/bhpVQ6crUVeH8p6E-PGrT9Lxu_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.95.14.0/24
Signature Algorithm: sha256WithRSAEncryption
51:ff:c4:29:e1:73:aa:7e:5c:4c:f1:9b:05:10:4c:f2:2b:ec:
ac:f9:9d:48:f0:83:d0:1d:0c:12:72:92:21:0f:3b:ab:6f:08:
ec:d4:45:25:be:65:fe:de:17:1b:d3:1f:0d:5a:3f:ac:79:44:
43:9a:bd:9b:1b:30:04:9d:fb:65:d0:6c:b0:d1:2c:4f:aa:82:
52:01:97:1a:62:15:db:45:9c:00:79:aa:39:c1:1a:55:01:49:
79:01:da:02:05:fd:9d:18:3f:3d:65:bc:c2:88:ca:d0:33:d6:
f3:6d:13:ca:51:6b:f8:63:34:8f:5a:d0:21:28:7d:c1:e3:8f:
f4:41:a5:61:70:2a:3d:d8:f6:2a:20:13:02:54:59:bd:9e:9c:
9f:dc:09:13:8d:1c:3b:93:b8:6e:37:98:33:e8:60:46:9c:da:
df:f6:ae:2e:ff:85:6e:7d:2f:ae:32:bf:21:45:75:a3:05:6a:
37:4e:e2:80:47:39:35:e1:82:3d:8a:b4:0d:0d:3c:3e:c1:53:
dc:53:df:54:42:01:65:fe:4a:49:31:68:1b:79:7e:ae:d0:3e:
ce:bd:ae:29:e2:47:1e:87:43:99:cf:87:a3:21:d2:84:5c:e8:
8a:86:77:7a:f0:ef:f1:a6:fb:c2:5f:e0:27:75:63:45:e5:3b:
09:29:c6:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:11 2024 by rpki-client on console-fra.rpki-client.org