Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/f73cdb-8273-4f43-9f61-8aa7c4cb719f/1/6DnZqYrbDIIXUGY8F3qI3CGqtLA.roa
File: 6DnZqYrbDIIXUGY8F3qI3CGqtLA.roa (raw, json)
Hash identifier: FqzIWl3K7l97iGmOdDZCaoiqGLDpuaOkWF+DF2AR760=
Subject key identifier: E8:39:D9:A9:8A:DB:0C:82:17:50:66:3C:17:7A:88:DC:21:AA:B4:B0
Certificate issuer: /CN=d709c9021e40af92a208de35024ca70663d734e4
Certificate serial: 01857371558CC138119CBB6664FA817CF8E4
Authority key identifier: D7:09:C9:02:1E:40:AF:92:A2:08:DE:35:02:4C:A7:06:63:D7:34:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1wnJAh5Ar5KiCN41AkynBmPXNOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/f73cdb-8273-4f43-9f61-8aa7c4cb719f/1/6DnZqYrbDIIXUGY8F3qI3CGqtLA.roa
Signing time: Mon 02 Jan 2023 17:04:45 +0000
ROA not before: Mon 02 Jan 2023 17:04:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207817
IP address blocks: 194.5.235.0/24 maxlen: 24
194.5.252.0/24 maxlen: 24
194.6.234.0/24 maxlen: 24
2a0d:9900::/29 maxlen: 29
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:71:55:8c:c1:38:11:9c:bb:66:64:fa:81:7c:f8:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d709c9021e40af92a208de35024ca70663d734e4
Validity
Not Before: Jan 2 17:04:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e839d9a98adb0c821750663c177a88dc21aab4b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:28:80:13:d3:dd:93:d4:5e:31:75:29:fa:ba:
0d:9f:75:53:fd:a7:b1:04:9e:4f:62:97:33:0b:30:
78:0a:60:87:65:bb:a8:00:44:fa:da:37:78:91:0d:
7c:e5:7f:fa:93:d4:38:bf:26:1a:07:f8:84:05:75:
b3:b7:eb:b1:38:7d:f7:36:f6:b7:ec:95:7d:e1:33:
47:ff:77:3f:ba:a8:53:a3:68:fc:21:2d:ee:c5:51:
44:71:b8:50:1f:16:d5:8b:9d:e7:bc:70:7b:cc:e7:
87:6a:7e:65:d7:80:80:12:98:9e:e5:87:1b:d6:2c:
f3:82:18:d1:e7:86:7b:8c:bb:4d:31:91:f3:8b:fc:
89:6d:71:52:26:f8:5e:e6:30:15:34:49:7f:e5:91:
03:b3:41:34:71:f3:76:5f:bf:08:f6:18:bc:ec:87:
e5:b0:bc:18:5d:a8:5a:ed:ce:e2:c8:00:57:10:23:
69:bc:2c:87:e6:3a:38:49:f2:97:04:d1:f5:22:b6:
6f:8e:49:b9:a9:98:32:04:62:57:52:65:e8:56:3f:
d3:37:3a:6c:15:ee:44:09:1e:9a:8b:50:e4:4f:d8:
8c:00:8e:4e:41:37:5d:f0:bc:24:29:b7:0e:79:ba:
35:5d:14:da:8a:d6:3e:88:03:e2:b9:5b:93:fa:48:
85:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:39:D9:A9:8A:DB:0C:82:17:50:66:3C:17:7A:88:DC:21:AA:B4:B0
X509v3 Authority Key Identifier:
keyid:D7:09:C9:02:1E:40:AF:92:A2:08:DE:35:02:4C:A7:06:63:D7:34:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1wnJAh5Ar5KiCN41AkynBmPXNOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/f73cdb-8273-4f43-9f61-8aa7c4cb719f/1/6DnZqYrbDIIXUGY8F3qI3CGqtLA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/f73cdb-8273-4f43-9f61-8aa7c4cb719f/1/1wnJAh5Ar5KiCN41AkynBmPXNOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.5.235.0/24
194.5.252.0/24
194.6.234.0/24
IPv6:
2a0d:9900::/29
Signature Algorithm: sha256WithRSAEncryption
21:b9:ee:d7:03:0d:1b:a4:7b:1f:4a:f4:7e:00:cc:90:30:8b:
23:29:c2:38:b6:7b:14:43:f9:4f:33:bc:f2:6a:ff:87:db:4f:
fa:f5:25:97:0e:12:cc:66:9e:02:6b:73:cc:62:93:d0:ee:aa:
f9:10:6b:43:66:7b:23:17:8f:dc:a0:c6:ef:3f:27:f0:00:8b:
db:d9:e3:d8:e1:1d:6b:26:85:a0:20:0b:83:05:56:85:5b:5a:
69:27:af:6e:3b:e7:1a:65:63:38:fe:9c:31:e3:6f:0d:7c:ad:
5d:b0:a6:a0:4f:e9:97:c1:79:a8:2c:5a:94:cf:ed:b2:ba:3a:
ec:70:57:ea:36:7e:1d:ff:a8:47:89:33:4f:45:65:f6:f5:4d:
3e:e1:f9:7f:75:d0:09:8f:a7:8c:d8:07:8a:cb:c8:37:55:43:
01:7b:dc:36:cd:78:7a:4e:e4:06:8b:f8:de:ee:fb:8f:13:65:
e0:7f:f0:97:3b:93:b9:19:28:41:1b:2a:f7:4f:9d:ba:42:87:
ad:66:11:93:22:cf:e5:79:21:19:c2:1f:98:90:6c:90:cb:5e:
28:e6:76:7d:75:42:38:4b:58:55:e7:12:47:6c:00:43:b9:f6:
60:bc:2a:d4:f7:12:9b:7c:4f:1b:3b:89:c0:88:6a:d9:6a:a6:
44:7e:ac:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:07 2024 by rpki-client on console-ams.rpki-client.org