Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/CRKnlfAir28Nid-w6otrbQanjNU.roa
File: CRKnlfAir28Nid-w6otrbQanjNU.roa (raw, json)
Hash identifier: ileZJ4EHloL/W4/49Fm8E1yi7IsQzkb9Ze1s2frWvZI=
Subject key identifier: 09:12:A7:95:F0:22:AF:6F:0D:89:DF:B0:EA:8B:6B:6D:06:A7:8C:D5
Certificate issuer: /CN=67955b1aa1c0284d2843b96f26c5fe751e66946f
Certificate serial: 018B8EB60830D3BAC1A3EE9DB245EA367124
Authority key identifier: 67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/CRKnlfAir28Nid-w6otrbQanjNU.roa
Signing time: Thu 02 Nov 2023 06:26:16 +0000
ROA not before: Thu 02 Nov 2023 06:26:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35608
IP address blocks: 193.19.111.0/24 maxlen: 24
91.238.97.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:8e:b6:08:30:d3:ba:c1:a3:ee:9d:b2:45:ea:36:71:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67955b1aa1c0284d2843b96f26c5fe751e66946f
Validity
Not Before: Nov 2 06:26:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0912a795f022af6f0d89dfb0ea8b6b6d06a78cd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:06:89:c6:76:a5:78:cc:d5:a1:fa:24:94:70:
c1:75:69:de:57:c8:93:c5:41:e8:ad:1d:dd:40:0e:
aa:0d:cc:aa:5e:2e:59:f5:fe:da:4c:d9:37:64:47:
c2:be:92:46:25:92:75:0a:fe:55:6a:3f:1d:de:ad:
ba:ec:ea:20:68:e0:a9:f7:ce:ab:ff:60:49:61:97:
aa:7a:9b:c0:a2:02:d8:a6:06:21:96:02:4a:c5:14:
ba:4f:93:37:3a:b8:e7:64:69:c7:da:90:99:4d:61:
95:bf:f4:aa:6a:59:38:1a:9d:e7:10:99:d9:21:96:
41:8b:b6:6a:c5:cc:dc:1f:fa:c3:bb:33:74:37:e2:
cc:72:d8:1e:45:56:45:6d:6c:f9:68:99:fc:d4:81:
b6:d1:e8:bf:95:fc:c1:29:38:ae:52:fc:f3:5f:c0:
3f:11:35:07:58:54:50:b4:8b:a3:ff:26:38:69:5b:
f2:8c:b9:c9:52:ba:86:63:d3:1f:49:3b:b1:c2:d1:
d6:7e:7a:00:c8:30:46:63:fe:82:88:20:d1:cf:ce:
8e:5c:14:d2:ec:4a:d9:09:c7:67:7f:2c:8d:71:e0:
0a:61:7d:21:7e:9e:63:2d:f3:ac:ad:2f:15:3b:0a:
a4:37:82:a1:98:27:b8:ea:ed:47:04:91:b5:22:07:
e9:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:12:A7:95:F0:22:AF:6F:0D:89:DF:B0:EA:8B:6B:6D:06:A7:8C:D5
X509v3 Authority Key Identifier:
keyid:67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/CRKnlfAir28Nid-w6otrbQanjNU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.238.97.0/24
193.19.111.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:48:55:de:be:65:43:dc:96:a6:87:af:96:a7:4e:53:b4:8c:
13:31:ac:d4:6a:e3:62:88:fe:1f:a1:d5:89:68:3f:25:c3:be:
6f:ad:1f:cd:f6:f6:5e:fd:03:78:b6:95:f2:b7:e3:db:ac:46:
72:61:9a:32:f8:d5:90:0c:9c:23:e8:c5:47:58:05:a7:b5:6c:
20:3b:d0:9f:d4:cb:69:c3:7d:eb:86:d2:51:de:a3:55:be:a4:
53:1e:fd:1e:a1:1b:e6:19:2e:b0:1f:0c:7b:71:90:d0:49:a3:
4d:93:37:9e:2e:22:91:95:12:d6:2a:fb:3a:5d:c1:d4:7e:b7:
3b:15:11:12:9d:cf:38:6c:4c:64:50:d2:35:aa:e1:14:16:b5:
fc:b0:c0:88:cd:f4:96:80:36:06:e2:2a:fc:a4:15:1b:4d:7e:
c3:82:b9:1c:89:b4:dd:f9:e2:5f:f2:7d:ba:14:b4:74:e4:ac:
8f:6a:b9:03:f0:30:39:13:ec:17:1a:f9:5e:a5:cd:8a:71:95:
36:71:98:07:83:ad:2c:38:b4:ed:f9:9a:ad:9b:31:d4:d7:19:
14:1b:69:4e:ba:f4:49:22:52:13:40:37:38:a5:d2:dc:b6:95:
89:81:4f:eb:1c:03:28:a7:5b:21:c6:81:5f:5a:18:3a:37:04:
e8:da:8a:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:27 2024 by rpki-client on console-fra.rpki-client.org