Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/9Humihk0L2Dm1Xf9xOKcy5znSo4.roa
File: 9Humihk0L2Dm1Xf9xOKcy5znSo4.roa (raw, json)
Hash identifier: Z6UZn5cc+wnxK8iLgZmcaLZz78epS/sA5nWUC4qkNWM=
Subject key identifier: F4:7B:A6:8A:19:34:2F:60:E6:D5:77:FD:C4:E2:9C:CB:9C:E7:4A:8E
Certificate issuer: /CN=b0fa0c7abc10796915e335ba19780e473e027969
Certificate serial: 018B67107D99D4B3FCDB18845D6FDEC3D071
Authority key identifier: B0:FA:0C:7A:BC:10:79:69:15:E3:35:BA:19:78:0E:47:3E:02:79:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sPoMerwQeWkV4zW6GXgORz4CeWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/9Humihk0L2Dm1Xf9xOKcy5znSo4.roa
Signing time: Wed 25 Oct 2023 13:40:15 +0000
ROA not before: Wed 25 Oct 2023 13:40:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9211
IP address blocks: 213.238.32.0/20 maxlen: 20
213.238.48.0/21 maxlen: 23
212.12.32.0/20 maxlen: 20
212.12.56.0/21 maxlen: 21
194.49.7.0/24 maxlen: 24
2a00:ea8::/32 maxlen: 32
2a00:eab::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:67:10:7d:99:d4:b3:fc:db:18:84:5d:6f:de:c3:d0:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0fa0c7abc10796915e335ba19780e473e027969
Validity
Not Before: Oct 25 13:40:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f47ba68a19342f60e6d577fdc4e29ccb9ce74a8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:8a:19:2b:ab:ff:d0:06:74:56:cb:92:43:f5:
c7:36:88:16:08:79:ed:10:79:2e:8a:29:80:37:4a:
20:63:f6:33:e1:5f:d7:e8:78:93:44:13:7f:ca:81:
64:6d:57:ee:0b:24:80:1e:ac:c2:6f:fa:5c:e2:c5:
4c:06:e0:13:09:64:4d:d4:b5:6a:25:eb:16:fc:89:
6d:49:d6:a6:bf:a6:1e:12:14:29:91:28:67:77:a4:
5b:54:45:55:1a:13:65:3e:28:f5:07:43:4a:74:9f:
96:90:14:66:25:bd:7e:1f:e2:51:b6:9f:7b:1e:43:
5d:76:d1:a2:6c:9e:ed:32:11:e2:88:a7:54:66:71:
0e:0a:06:10:20:a6:2a:59:c4:49:43:b3:bd:b3:61:
9b:e9:4e:3a:94:e9:ce:e9:32:6a:ca:8a:cf:11:40:
d6:44:26:0e:6f:75:5a:71:4f:a9:56:a4:e8:8d:c4:
4a:06:a2:86:0a:9e:9c:1f:27:a0:2f:47:00:c9:04:
2d:b9:4b:86:73:4b:ed:0c:6d:eb:41:08:75:d5:18:
5d:a7:0f:ba:ec:06:45:dc:58:38:db:75:d9:6a:3e:
38:37:04:82:4b:e3:ad:50:ae:0b:27:97:db:da:29:
5b:8a:42:a3:4e:d1:26:8d:aa:7f:ff:b4:f1:1e:93:
06:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:7B:A6:8A:19:34:2F:60:E6:D5:77:FD:C4:E2:9C:CB:9C:E7:4A:8E
X509v3 Authority Key Identifier:
keyid:B0:FA:0C:7A:BC:10:79:69:15:E3:35:BA:19:78:0E:47:3E:02:79:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sPoMerwQeWkV4zW6GXgORz4CeWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/9Humihk0L2Dm1Xf9xOKcy5znSo4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.49.7.0/24
212.12.32.0/20
212.12.56.0/21
213.238.32.0-213.238.55.255
IPv6:
2a00:ea8::/32
2a00:eab::/32
Signature Algorithm: sha256WithRSAEncryption
07:9a:c8:18:8f:65:96:af:43:4f:6e:f9:0b:f2:fe:d0:d9:8c:
ed:73:35:3f:80:85:4e:ae:61:e4:82:72:f7:ee:a8:ad:93:03:
9b:eb:11:3f:3b:d9:95:8c:93:c5:6d:ca:09:d7:3c:2f:b7:dc:
c5:a0:a9:1a:63:cc:e1:30:ff:04:67:72:f6:b1:fc:97:97:5f:
22:07:46:7d:00:bd:ab:ce:5c:c7:77:0d:45:88:89:cd:69:00:
68:72:2f:07:89:5f:2e:34:fd:93:8c:a6:cf:61:13:71:11:93:
41:af:10:49:f0:ab:ff:83:ee:67:cc:e1:4b:1d:c3:7c:1c:b5:
27:44:1b:ad:3c:3f:0c:46:cb:9a:07:30:0e:e3:22:05:ae:a9:
5a:6d:bd:fd:37:36:d8:a1:0b:39:a7:35:be:2f:39:8b:53:ab:
de:e4:0c:63:91:ff:1a:64:33:ce:1b:1c:61:a9:eb:19:fd:06:
8f:28:38:4d:92:7d:ed:8b:e8:8a:98:a2:9e:c2:79:eb:95:6d:
a7:f2:f0:97:44:20:09:1f:b7:c7:08:25:7e:15:bf:e8:47:c6:
2b:e8:36:60:ca:6d:9c:77:ff:36:cb:0f:26:eb:c0:99:02:cc:
a1:0c:6c:05:6c:bf:23:de:b9:84:20:b1:27:92:24:8f:31:66:
6b:50:c8:dc
-----BEGIN CERTIFICATE-----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Generated at Thu Nov 2 14:14:40 2023 by rpki-client on console-fra.rpki-client.org