Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/PbT5r8oSgwifyZuRxnC9pQQZ4W8.roa
File: PbT5r8oSgwifyZuRxnC9pQQZ4W8.roa (raw, json)
Hash identifier: v8glyrfgXFtrJJPdSctFfyEVr4IoKbPgM5ScyP0CDf8=
Subject key identifier: 3D:B4:F9:AF:CA:12:83:08:9F:C9:9B:91:C6:70:BD:A5:04:19:E1:6F
Certificate issuer: /CN=b0fa0c7abc10796915e335ba19780e473e027969
Certificate serial: 018571953972B50EC9931E94E9F0C59B765C
Authority key identifier: B0:FA:0C:7A:BC:10:79:69:15:E3:35:BA:19:78:0E:47:3E:02:79:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sPoMerwQeWkV4zW6GXgORz4CeWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/PbT5r8oSgwifyZuRxnC9pQQZ4W8.roa
Signing time: Mon 02 Jan 2023 08:24:43 +0000
ROA not before: Mon 02 Jan 2023 08:24:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9211
IP address blocks: 213.238.32.0/20 maxlen: 21
213.238.48.0/21 maxlen: 21
212.12.32.0/20 maxlen: 20
212.12.56.0/21 maxlen: 21
194.49.7.0/24 maxlen: 24
2a00:ea8::/32 maxlen: 32
2a00:eab::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:95:39:72:b5:0e:c9:93:1e:94:e9:f0:c5:9b:76:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0fa0c7abc10796915e335ba19780e473e027969
Validity
Not Before: Jan 2 08:24:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3db4f9afca1283089fc99b91c670bda50419e16f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:40:30:58:04:f5:63:06:d8:40:f0:48:fc:31:
cb:38:d0:db:24:5f:64:9b:c1:e3:e4:d5:3e:d9:75:
66:d0:50:e3:7d:2b:8e:52:f9:e8:43:c6:24:83:1a:
42:13:53:57:19:64:7d:ea:37:bc:31:df:fd:20:48:
46:ad:e0:be:d6:05:9e:10:d4:3f:b9:d4:56:4f:d8:
d3:b4:c6:3b:0b:e5:e4:a9:fd:8d:37:51:99:01:10:
11:3c:d0:b4:d2:36:8a:6b:27:4b:7f:76:a2:f4:d9:
19:6a:f9:09:91:77:ed:56:ad:10:bf:3f:24:b0:0e:
52:da:c2:f0:14:6c:2f:70:df:d1:5f:b9:83:c8:bd:
99:b4:a9:3e:b8:30:a2:c1:c2:78:8a:a5:76:ff:52:
a3:51:03:ed:6b:3f:e5:2e:28:73:21:77:96:b5:5f:
bb:c6:5f:95:88:84:f6:b7:ad:e7:ef:3a:6b:de:3b:
74:88:81:20:2f:a0:49:b0:ca:e7:94:fb:85:eb:86:
e2:89:db:79:f9:56:5d:0d:e8:76:28:87:65:98:dd:
fc:7b:65:57:23:61:db:20:ec:1f:ab:90:d9:e9:f1:
21:af:51:8e:ac:2f:d7:59:d7:d0:c3:08:71:24:69:
6c:8c:01:87:20:88:f8:f2:45:1f:61:3c:7b:86:37:
d0:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:B4:F9:AF:CA:12:83:08:9F:C9:9B:91:C6:70:BD:A5:04:19:E1:6F
X509v3 Authority Key Identifier:
keyid:B0:FA:0C:7A:BC:10:79:69:15:E3:35:BA:19:78:0E:47:3E:02:79:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sPoMerwQeWkV4zW6GXgORz4CeWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/PbT5r8oSgwifyZuRxnC9pQQZ4W8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.49.7.0/24
212.12.32.0/20
212.12.56.0/21
213.238.32.0-213.238.55.255
IPv6:
2a00:ea8::/32
2a00:eab::/32
Signature Algorithm: sha256WithRSAEncryption
64:ec:e2:08:70:fd:da:9b:f1:5d:99:9f:d1:67:62:58:83:b4:
78:43:2a:7f:f2:63:e4:44:be:d5:63:75:42:a4:b8:30:e1:7e:
0e:26:37:ff:c0:bb:e6:6f:3d:3a:71:53:86:1e:ea:72:c2:70:
d1:46:9d:b2:0d:4b:aa:b7:cc:ce:47:49:cf:c7:05:ca:12:21:
67:36:96:11:3c:63:27:e1:c4:4c:3e:ef:59:49:40:4b:37:f3:
95:ac:c3:b5:79:fc:00:8b:97:f2:ec:4d:0e:d5:f9:00:fc:4c:
34:de:31:a9:65:a2:75:df:8b:94:66:10:64:d2:9d:2e:49:e0:
4a:f0:44:7c:ce:b3:83:cd:e7:ec:ed:1e:2f:f0:08:95:cd:0a:
f6:d3:23:13:cc:0c:43:07:ed:fa:b3:6c:23:13:16:d8:5b:c1:
9c:a4:0f:97:12:fc:71:f7:3f:2d:34:1a:f4:5a:c9:a5:1e:22:
89:c4:2a:ae:b3:96:96:d1:e9:dc:17:c5:51:b6:3b:6d:18:0e:
23:c5:88:8d:db:ab:a5:e8:bd:ac:f8:b8:51:1d:7b:5b:d2:4d:
fe:40:d4:b6:d7:88:6c:37:84:5e:bd:bc:5f:57:6b:e8:f0:58:
79:08:53:f0:4b:04:61:8d:59:75:7f:b0:36:d7:bb:ff:6e:41:
7f:2d:ff:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:09 2024 by rpki-client on console-fra.rpki-client.org