Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/tpc9whsgi89J0YL0U2XxVbK2OEk.roa
File: tpc9whsgi89J0YL0U2XxVbK2OEk.roa (raw, json)
Hash identifier: VHvx5lop4RRgcB7BeTJeGrjJmdFrwGLmOXWl8DDqOD0=
Subject key identifier: B6:97:3D:C2:1B:20:8B:CF:49:D1:82:F4:53:65:F1:55:B2:B6:38:49
Certificate issuer: /CN=67955b1aa1c0284d2843b96f26c5fe751e66946f
Certificate serial: 01856DC19C1A3B94C26326ED5125F373130E
Authority key identifier: 67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/tpc9whsgi89J0YL0U2XxVbK2OEk.roa
Signing time: Sun 01 Jan 2023 14:34:42 +0000
ROA not before: Sun 01 Jan 2023 14:34:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56690
IP address blocks: 91.238.96.0/22 maxlen: 22
91.203.232.0/23 maxlen: 23
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:c1:9c:1a:3b:94:c2:63:26:ed:51:25:f3:73:13:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67955b1aa1c0284d2843b96f26c5fe751e66946f
Validity
Not Before: Jan 1 14:34:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b6973dc21b208bcf49d182f45365f155b2b63849
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:70:9f:26:65:68:fb:81:51:9c:01:ed:d0:8c:
8f:b9:80:6f:f0:86:44:9b:6e:a9:ca:69:62:b2:07:
b7:07:8e:f0:0b:4c:b1:51:96:d4:c5:88:3e:f1:e2:
40:86:07:3b:df:2b:61:5c:1a:2e:76:c4:d6:3b:56:
97:5b:dd:f6:63:db:79:94:cc:3c:e0:54:f9:a0:30:
0d:5f:25:ee:14:50:38:d2:24:18:fd:4b:cd:ef:e2:
6d:86:97:f7:1f:4d:6e:27:33:0e:52:82:94:3f:1e:
d7:91:50:51:48:6c:45:88:cf:08:c0:5c:4e:e2:8f:
69:18:2c:7a:35:e0:f3:cc:1a:c4:ca:13:2c:c7:69:
d1:bc:96:76:a6:7b:f1:69:81:8d:e2:13:9e:c1:8b:
53:93:80:e7:66:f1:83:ee:ff:f6:e9:22:af:a7:ed:
e5:e4:d5:14:9a:68:f0:d4:88:c2:48:7c:14:a0:e6:
29:72:47:92:92:e7:19:ca:3b:3d:7b:91:75:8a:99:
47:f3:81:85:2a:73:28:c2:d1:41:60:c3:f5:8e:ec:
bb:2d:fe:2e:3f:d7:1f:a7:f1:ff:a5:fb:85:4e:98:
7b:4a:99:8c:5b:33:52:2b:3c:25:d7:25:76:ec:50:
3d:31:e5:81:c4:94:14:cf:87:62:38:77:96:00:d3:
27:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:97:3D:C2:1B:20:8B:CF:49:D1:82:F4:53:65:F1:55:B2:B6:38:49
X509v3 Authority Key Identifier:
keyid:67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/tpc9whsgi89J0YL0U2XxVbK2OEk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.203.232.0/23
91.238.96.0/22
Signature Algorithm: sha256WithRSAEncryption
7d:79:dd:66:70:6e:b0:6f:09:b2:3c:28:1f:7d:71:5f:ab:3b:
db:aa:60:6e:a7:2a:93:19:33:fb:a0:11:17:28:64:73:1a:d3:
8d:49:c6:d7:ac:32:63:84:2e:26:38:b0:fd:d5:66:4c:fa:55:
04:3f:9b:d8:d4:31:5d:df:fc:9a:cc:ea:2c:7b:33:b5:ac:e7:
0b:d4:5c:35:d6:9b:06:8a:01:d3:be:c0:c8:12:d7:1d:08:fc:
d6:27:52:b0:16:6f:73:41:ca:7e:c2:a8:e3:81:82:61:dd:cd:
85:1a:92:0c:89:79:77:dd:81:8a:b8:5e:34:73:12:03:2f:b0:
08:59:70:94:26:eb:4c:c7:cf:64:15:75:e3:5f:b0:1f:f3:10:
ab:7b:db:01:ec:c1:61:f2:11:7c:9e:02:aa:6a:05:9a:25:40:
17:43:22:e7:26:0f:73:8a:23:93:1d:0f:48:6a:77:2b:24:27:
28:e5:99:c0:fd:09:d1:c0:4d:09:65:3d:a9:f9:01:bb:18:17:
d7:2b:3e:67:2a:61:af:5d:bb:c0:33:7e:4c:0f:58:93:03:7b:
9f:48:5c:38:56:fa:8b:cc:82:93:ca:65:c3:e8:38:d6:10:ab:
16:2a:bb:35:c2:0a:a1:00:83:93:7e:15:19:77:8e:5b:78:80:
e3:d8:0e:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:52 2024 by rpki-client on console-ams.rpki-client.org