Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/0f0a01-0cc4-4efc-9dd5-801ef38dea9c/1/NCMzS-rSDKjWYdQJNNXayRspmk4.roa
File: NCMzS-rSDKjWYdQJNNXayRspmk4.roa (raw, json)
Hash identifier: 4sTBxSrQX/0xCbuoK8PRdn9QmtSu076yCgFEXZrKI5c=
Subject key identifier: 34:23:33:4B:EA:D2:0C:A8:D6:61:D4:09:34:D5:DA:C9:1B:29:9A:4E
Certificate issuer: /CN=3601c3cce6a71cab21a4bbadf0ab84dde3f2bab2
Certificate serial: 3580C3EC
Authority key identifier: 36:01:C3:CC:E6:A7:1C:AB:21:A4:BB:AD:F0:AB:84:DD:E3:F2:BA:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NgHDzOanHKshpLut8KuE3ePyurI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/0f0a01-0cc4-4efc-9dd5-801ef38dea9c/1/NCMzS-rSDKjWYdQJNNXayRspmk4.roa
Signing time: Sat 01 Jan 2022 07:56:27 +0000
ROA not before: Sat 01 Jan 2022 07:56:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 52143
IP address blocks: 188.94.0.0/21 maxlen: 24
188.94.5.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 897631212 (0x3580c3ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3601c3cce6a71cab21a4bbadf0ab84dde3f2bab2
Validity
Not Before: Jan 1 07:56:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3423334bead20ca8d661d40934d5dac91b299a4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:1a:f0:2b:7b:ed:f8:4c:b1:ce:ed:6f:59:1a:
b0:aa:96:09:1c:d4:7b:dc:aa:a3:d3:37:c3:1d:9e:
f1:3d:77:7e:65:c1:ac:8a:9b:9c:e7:e2:2b:2b:3b:
c0:2a:c4:c2:db:8d:a0:47:9e:7d:1c:ce:43:89:d7:
a8:f9:d8:a9:3c:a0:ca:e2:05:49:97:23:24:0b:a4:
cb:68:7c:fe:e7:aa:8c:25:a2:31:cc:39:ce:33:bc:
55:bc:04:a0:09:eb:8b:a0:83:3e:52:e6:91:95:e5:
22:ef:7d:d2:8c:53:53:f1:6f:54:1f:64:59:20:71:
70:ab:c0:4c:df:78:c9:a4:9c:42:b8:23:30:df:85:
2a:cc:17:af:4c:64:0c:12:2a:64:06:16:da:06:e2:
81:49:3f:a9:78:a7:ba:a9:0f:66:fb:d7:bd:9b:d8:
dc:c3:87:2f:af:fb:0d:c7:8b:dd:bf:4b:59:c7:ef:
ea:60:1c:c9:48:86:a5:6e:8e:de:63:93:6b:dd:2f:
99:cb:19:2b:79:dd:be:19:16:a1:8c:aa:bb:52:8f:
70:c6:be:9e:dc:bf:df:9b:f8:79:9b:09:40:ac:c1:
44:b7:9f:67:fc:67:ae:07:ad:ea:84:30:04:f1:c9:
2f:7a:18:72:b7:70:ca:41:1c:c1:f9:94:b3:59:93:
dd:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:23:33:4B:EA:D2:0C:A8:D6:61:D4:09:34:D5:DA:C9:1B:29:9A:4E
X509v3 Authority Key Identifier:
keyid:36:01:C3:CC:E6:A7:1C:AB:21:A4:BB:AD:F0:AB:84:DD:E3:F2:BA:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NgHDzOanHKshpLut8KuE3ePyurI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0f0a01-0cc4-4efc-9dd5-801ef38dea9c/1/NCMzS-rSDKjWYdQJNNXayRspmk4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0f0a01-0cc4-4efc-9dd5-801ef38dea9c/1/NgHDzOanHKshpLut8KuE3ePyurI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.94.0.0/21
Signature Algorithm: sha256WithRSAEncryption
5d:a2:09:27:dc:27:06:1b:04:ed:27:d1:9b:85:15:46:9b:90:
3b:bf:a6:ce:8e:5d:3e:55:a8:23:d4:8a:36:ec:c6:b8:23:9d:
f0:41:9a:bd:c9:41:01:cc:a9:9a:f0:0c:c6:f5:be:20:2b:3d:
a3:de:34:53:e0:70:c0:94:c4:d1:46:4e:06:f0:33:99:77:62:
61:63:42:5a:12:ff:00:8d:b1:ea:94:e1:28:13:51:09:cf:b8:
54:79:26:2a:17:33:1d:8d:6e:ec:28:fb:43:a5:82:0d:33:d7:
98:cd:c8:27:d8:a5:d9:68:57:f9:68:df:e2:7e:c1:d5:9f:16:
69:7d:bd:6e:96:65:59:f4:f5:11:2a:0b:8f:1d:8c:f0:76:5d:
e6:23:04:3a:34:d4:48:b7:3a:3f:6c:86:9c:50:55:30:b1:c3:
f2:11:3e:1e:4a:34:fe:6d:48:52:3d:6b:4f:69:c1:06:58:1c:
37:05:8c:c6:76:53:0e:09:b1:7d:4f:1d:50:a9:5a:c1:03:08:
2b:24:29:6d:81:24:d7:1b:52:e0:86:e2:90:47:2a:f4:f9:8d:
c2:ac:27:9f:0c:2c:55:57:59:b3:10:ee:9c:24:c9:7a:0d:e8:
0e:7b:8c:21:77:fa:5c:01:c1:ce:24:93:74:19:19:35:5f:b6:
f4:79:08:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:14 2024 by rpki-client on console-fra.rpki-client.org