Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/TJ9xIcf8Ndlg6a_SuEG8s5YRNV8.roa
File: TJ9xIcf8Ndlg6a_SuEG8s5YRNV8.roa (raw, json)
Hash identifier: ISbO5Nxl1i2mGV67vuyGeTihrVDe9YgK75PeyDWVqkY=
Subject key identifier: 4C:9F:71:21:C7:FC:35:D9:60:E9:AF:D2:B8:41:BC:B3:96:11:35:5F
Certificate issuer: /CN=67955b1aa1c0284d2843b96f26c5fe751e66946f
Certificate serial: 069CDB73
Authority key identifier: 67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/TJ9xIcf8Ndlg6a_SuEG8s5YRNV8.roa
Signing time: Sun 02 Jan 2022 23:48:45 +0000
ROA not before: Sun 02 Jan 2022 23:48:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206728
IP address blocks: 91.240.242.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110943091 (0x69cdb73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67955b1aa1c0284d2843b96f26c5fe751e66946f
Validity
Not Before: Jan 2 23:48:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4c9f7121c7fc35d960e9afd2b841bcb39611355f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ec:83:94:0c:f7:74:73:87:23:24:2a:72:5d:
08:2f:45:15:4b:54:c0:36:d3:b0:8d:05:70:f7:98:
70:ce:d9:ab:38:0a:11:b2:3d:26:21:eb:d9:07:50:
8b:87:0d:ff:81:7c:8c:7f:c8:4e:15:61:b5:fb:bf:
0b:5b:68:3c:26:8a:8f:35:09:b5:fd:8d:a8:82:07:
f4:4b:7b:3c:72:e9:09:25:6a:67:37:e4:ac:14:f8:
0d:f7:37:ee:0e:b0:1c:c6:c4:18:76:21:99:c3:7c:
6d:08:b0:be:71:bc:89:07:37:bb:6f:2b:b1:eb:98:
3c:2b:95:e4:a4:b5:b9:20:68:7d:28:bd:55:f5:30:
80:e7:a2:69:99:73:96:df:d5:f6:4f:12:cc:c5:40:
80:b9:6d:bc:c2:6f:6b:4e:8d:a1:13:d0:fe:00:fc:
e3:a7:5b:43:b5:93:b4:19:a0:18:49:a6:66:20:a5:
14:c1:04:ac:d0:59:e5:86:84:59:dc:cc:de:18:68:
44:63:da:1f:49:39:cf:6a:2f:56:ee:c4:1e:ee:ab:
1d:d1:e7:e8:9d:60:71:2e:51:fa:73:42:87:73:6d:
18:77:d8:ff:3d:94:31:47:2e:e7:1f:b9:65:f9:77:
bc:91:38:67:ed:86:6b:df:0c:dc:d1:2b:97:a7:77:
42:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:9F:71:21:C7:FC:35:D9:60:E9:AF:D2:B8:41:BC:B3:96:11:35:5F
X509v3 Authority Key Identifier:
keyid:67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/TJ9xIcf8Ndlg6a_SuEG8s5YRNV8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.240.242.0/24
Signature Algorithm: sha256WithRSAEncryption
72:0b:23:12:a3:3b:3a:5c:cc:d1:d3:05:6a:fa:44:e3:ae:75:
f9:c2:cf:5e:45:2b:93:2c:c2:0b:8c:61:ee:fb:86:18:7b:d7:
e3:42:5e:1c:ec:df:20:02:57:2d:62:1a:bc:c2:b2:ba:42:61:
d0:a0:41:20:54:f1:6b:24:1f:b1:c4:42:7e:77:7b:74:11:3b:
42:3d:80:11:80:7f:62:d9:58:b6:42:76:a0:c4:75:44:a7:bd:
b3:ca:67:bf:d4:af:4c:64:1f:01:65:51:6c:96:ab:12:6e:43:
aa:96:a7:ef:20:43:98:da:74:02:11:4a:74:99:9d:3f:20:e8:
26:2c:e0:d3:4b:e1:14:3d:e9:20:80:b0:61:57:15:33:3a:6a:
21:2f:4f:aa:39:21:99:d6:2b:13:e7:3e:79:90:60:95:77:54:
74:c3:aa:49:e2:af:b2:9c:04:f0:28:8b:f7:05:19:52:e9:17:
ff:00:6a:6e:da:9e:96:46:9a:96:3f:23:20:7b:f3:eb:75:40:
72:eb:d1:3e:c8:23:94:fe:bf:53:a0:17:7e:8f:ad:ea:5c:9c:
1d:c4:42:ed:26:e2:37:a9:9e:19:65:4c:26:a4:1c:fd:39:e3:
b2:2e:a1:38:d3:af:44:3f:d4:8c:ad:f8:24:e6:a4:2e:0a:10:
f2:8c:e3:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:52 2024 by rpki-client on console-ams.rpki-client.org