Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/o7jc1BOS7vYXBLqJ7lMqOwlXJhA.roa
File: o7jc1BOS7vYXBLqJ7lMqOwlXJhA.roa (raw, json)
Hash identifier: /n3Tv36LJvufq4QljskFQxtAP2QPT8ji9wR6Qr2Jr+I=
Subject key identifier: A3:B8:DC:D4:13:92:EE:F6:17:04:BA:89:EE:53:2A:3B:09:57:26:10
Certificate issuer: /CN=67955b1aa1c0284d2843b96f26c5fe751e66946f
Certificate serial: 08247A4F
Authority key identifier: 67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/o7jc1BOS7vYXBLqJ7lMqOwlXJhA.roa
Signing time: Fri 24 Jun 2022 13:51:31 +0000
ROA not before: Fri 24 Jun 2022 13:51:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9009
IP address blocks: 193.106.96.0/23 maxlen: 23
91.202.232.0/23 maxlen: 23
194.242.26.0/23 maxlen: 23
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136608335 (0x8247a4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67955b1aa1c0284d2843b96f26c5fe751e66946f
Validity
Not Before: Jun 24 13:51:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a3b8dcd41392eef61704ba89ee532a3b09572610
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:cc:25:86:18:7b:c9:12:0f:81:5d:b8:81:95:
b3:4e:8b:02:9b:85:a1:a1:06:c2:6a:fc:ea:e7:d2:
df:df:e2:7a:05:7d:92:86:f7:fc:49:c3:ae:32:d4:
90:71:2a:6f:f3:ad:fa:fa:76:ce:b0:9f:2f:cb:4e:
12:df:68:71:2d:4f:f2:b7:ed:c0:02:23:90:af:42:
1e:75:d9:06:c6:ce:6f:89:e2:ac:ee:33:d9:4b:3c:
cb:ee:70:e6:52:ff:b9:c5:3b:38:a6:f6:bb:95:e4:
49:44:b3:19:40:d4:73:66:1e:da:b1:37:3a:ff:17:
37:f8:29:ac:92:32:36:ce:04:b1:18:b7:64:33:63:
a7:c1:00:07:bd:45:c0:29:ca:bc:61:80:7c:c1:b8:
1d:3f:45:70:35:e4:4e:2a:30:01:a0:90:dd:66:69:
0b:51:38:4f:0d:d1:e2:ea:71:ff:8a:04:03:4e:bd:
07:47:1f:18:de:d1:5a:f6:57:0a:1a:4c:e2:12:05:
e2:f1:f3:f2:93:6d:71:89:ee:16:b1:6a:9b:ec:27:
d1:b9:4c:50:82:c0:e1:a4:1e:4a:a5:1f:6d:ef:68:
86:02:20:e3:64:9a:4f:f8:55:1b:78:3a:16:4d:15:
de:a2:32:10:b1:94:75:f3:b7:2b:3b:88:dd:f2:b4:
7f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:B8:DC:D4:13:92:EE:F6:17:04:BA:89:EE:53:2A:3B:09:57:26:10
X509v3 Authority Key Identifier:
keyid:67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/o7jc1BOS7vYXBLqJ7lMqOwlXJhA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.202.232.0/23
193.106.96.0/23
194.242.26.0/23
Signature Algorithm: sha256WithRSAEncryption
43:a7:41:08:c5:ac:c6:22:8a:a0:4b:b3:ee:33:77:e2:88:5a:
87:67:e7:b0:b1:02:90:11:e7:fd:14:2f:c2:4e:33:6e:12:83:
5a:c9:83:54:e7:02:22:d8:eb:26:c0:93:03:90:2d:6d:d3:9e:
70:72:f6:77:8e:38:00:af:c3:07:1e:30:17:ff:62:a3:88:b2:
33:f4:3c:89:52:51:8a:90:b2:dd:60:50:34:07:02:a7:71:d2:
9b:96:fb:91:f2:7f:34:8b:83:81:93:0a:f9:0e:e1:67:64:e6:
b9:09:51:0d:f8:1f:39:fd:5d:74:1e:ff:eb:d4:88:4d:6c:b9:
6b:c1:89:75:5d:76:4e:2b:60:ea:57:4f:8d:c3:c7:15:5b:bd:
4c:92:df:8a:58:0e:79:ba:44:2f:29:5a:34:94:d1:e1:18:dc:
49:c0:fa:4a:29:05:ea:37:f4:c1:27:9d:24:2c:d9:9d:ec:c7:
52:14:b5:02:02:2d:eb:e6:4b:3a:05:3e:3a:bf:25:78:e0:7d:
8e:2b:b7:3d:2f:c4:50:96:c5:1f:37:fe:64:37:45:6e:86:ad:
10:5b:be:4a:6d:e1:04:5d:95:66:4f:28:73:3f:57:f0:5c:b3:
40:3c:74:c4:5f:f5:9d:34:09:2e:4f:0b:1e:8f:b9:43:73:38:
91:ed:4e:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:27 2024 by rpki-client on console-fra.rpki-client.org