Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/1WunOQ-x2eji3t6QXHXPgQE2pEA.roa
File: 1WunOQ-x2eji3t6QXHXPgQE2pEA.roa (raw, json)
Hash identifier: r3HWbwaPnU3ft8b5yVmW+qBKxFIdyMhCJirPdKCti3c=
Subject key identifier: D5:6B:A7:39:0F:B1:D9:E8:E2:DE:DE:90:5C:75:CF:81:01:36:A4:40
Certificate issuer: /CN=da00e981953061972c896bd6d27738d083aadb0e
Certificate serial: 018FCF32DBD414010CE3B335A029C93336F2
Authority key identifier: DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/1WunOQ-x2eji3t6QXHXPgQE2pEA.roa
Signing time: Fri 31 May 2024 15:09:27 +0000
ROA not before: Fri 31 May 2024 15:09:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214823
IP address blocks: 84.247.20.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:cf:32:db:d4:14:01:0c:e3:b3:35:a0:29:c9:33:36:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da00e981953061972c896bd6d27738d083aadb0e
Validity
Not Before: May 31 15:09:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d56ba7390fb1d9e8e2dede905c75cf810136a440
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5b:5e:fe:a1:58:de:65:ca:e9:62:b9:22:44:
4c:c4:ef:0b:94:57:46:56:da:b8:75:8f:12:b0:60:
25:f1:d7:fc:18:e5:05:0f:67:b7:5c:69:8c:37:2d:
89:d2:61:0d:a0:e0:e3:ae:bf:2a:a1:22:bb:8e:46:
17:b3:b1:5e:21:ab:03:cc:db:f3:fd:eb:a0:ec:e3:
51:44:bf:99:9f:cc:25:ae:fa:51:7e:cf:0a:e7:43:
b6:83:28:15:b3:77:3c:9b:f4:68:3c:36:55:36:d9:
77:4f:c2:12:17:0e:91:da:9c:fc:bc:12:80:b6:6e:
b8:3c:87:de:04:bc:49:08:c9:ae:71:58:24:84:2a:
da:d6:5f:be:13:ef:8b:dd:e4:ed:60:61:3e:79:6d:
04:9a:38:f7:7b:e2:19:2c:84:4b:2a:72:ff:e5:bc:
25:1d:ac:f0:00:22:60:74:58:0f:d4:de:01:a4:a9:
8b:2c:33:c0:66:0c:3d:29:80:76:62:77:ae:b9:3b:
09:a0:aa:94:e9:05:7c:96:ba:42:2f:93:25:f3:c0:
09:dd:d5:dd:d8:a5:a3:1e:45:25:e3:bb:1f:c0:26:
c2:fe:0b:23:f1:ec:41:bc:95:6d:89:f3:51:df:97:
7f:f0:87:47:dc:49:32:60:f3:d0:10:06:bb:1e:5c:
e6:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:6B:A7:39:0F:B1:D9:E8:E2:DE:DE:90:5C:75:CF:81:01:36:A4:40
X509v3 Authority Key Identifier:
keyid:DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/1WunOQ-x2eji3t6QXHXPgQE2pEA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.247.20.0/24
Signature Algorithm: sha256WithRSAEncryption
52:62:ef:18:8b:21:72:1b:bc:b5:29:a7:76:b5:65:a1:7d:55:
e1:4e:44:5e:61:e3:7c:68:b6:92:5b:a8:a9:54:af:94:18:dc:
6a:8a:72:bd:15:a9:03:dd:87:6d:52:4c:9f:80:58:47:d8:09:
dc:c8:57:6f:0b:0a:c1:4a:71:44:ab:cd:6f:0f:d7:c3:0f:ce:
1b:99:b9:a5:8f:71:30:aa:ae:1f:4f:7e:59:e9:7d:14:31:49:
7e:cc:1c:b2:03:af:0d:96:09:37:22:bf:8a:67:2b:33:f6:96:
40:6f:29:1f:b4:32:84:96:15:8e:da:14:04:1e:4c:0c:e8:cb:
50:bf:32:9f:0d:6d:d0:61:b0:7a:ff:6a:e2:48:a7:49:4c:bc:
6e:c3:27:60:0f:55:2c:c7:40:a6:7d:4f:ba:0b:f5:8a:aa:54:
27:ea:f8:b7:08:1b:0a:c9:05:ad:cd:4b:a3:b2:0c:2d:03:c2:
f1:30:15:74:54:84:77:01:40:a8:f4:60:4f:14:02:fa:af:70:
df:a6:90:8c:bf:88:4d:ae:37:d7:fe:cf:76:ca:17:a3:89:86:
52:08:c0:0d:9a:f1:8b:49:c3:92:a9:5d:89:87:a4:b3:5f:e6:
93:3c:55:e3:f0:8e:9e:ac:59:74:95:1e:91:61:ad:6b:9a:30:
12:90:d2:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 2 12:06:49 2024 by rpki-client on console-fra.rpki-client.org