Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/opK7HqF3DHakmD3KhU5QyNMCS8U.roa
File: opK7HqF3DHakmD3KhU5QyNMCS8U.roa (raw, json)
Hash identifier: 9zsRnJRwNFiCS+gOLCgoWpKGewNFBnXKo4ZaDDu5eyY=
Subject key identifier: A2:92:BB:1E:A1:77:0C:76:A4:98:3D:CA:85:4E:50:C8:D3:02:4B:C5
Certificate issuer: /CN=da00e981953061972c896bd6d27738d083aadb0e
Certificate serial: 01890A80749877E9AA187908B5951A872EE2
Authority key identifier: DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/opK7HqF3DHakmD3KhU5QyNMCS8U.roa
Signing time: Fri 30 Jun 2023 04:12:17 +0000
ROA not before: Fri 30 Jun 2023 04:12:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 93.115.155.0/24 maxlen: 24
86.104.209.0/24 maxlen: 24
217.19.1.0/24 maxlen: 24
89.42.40.0/24 maxlen: 24
185.77.249.0/24 maxlen: 24
84.247.59.0/24 maxlen: 24
93.114.169.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:0a:80:74:98:77:e9:aa:18:79:08:b5:95:1a:87:2e:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da00e981953061972c896bd6d27738d083aadb0e
Validity
Not Before: Jun 30 04:12:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a292bb1ea1770c76a4983dca854e50c8d3024bc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:0a:56:58:b1:71:e2:8c:0e:8a:23:45:f7:77:
1a:34:a1:cb:4a:fc:13:55:8d:12:5e:ba:c8:97:89:
86:c8:97:50:53:6e:67:1b:11:bb:41:1e:03:67:f7:
1a:67:10:b7:4f:c6:53:6f:21:21:dc:d1:57:2f:e6:
dc:3f:3f:b7:f9:88:2a:a6:e5:e8:50:6f:49:3c:04:
f6:56:a8:ee:2d:98:8d:dc:e2:c1:ce:ea:3a:67:d9:
e7:99:77:47:87:d0:af:f7:00:57:33:0e:56:86:10:
eb:17:23:cf:63:dd:6d:76:b8:43:ca:15:03:d9:32:
ce:fb:f3:71:f0:8c:a0:d0:5d:a2:23:c4:f0:89:13:
94:89:c5:39:d0:51:5d:19:04:b4:87:76:93:b9:d3:
b9:ad:05:71:ad:7d:a4:78:56:99:41:b9:23:e5:4d:
b5:50:ba:71:92:3b:ac:09:e0:c3:7b:d2:3e:f7:d9:
c3:dc:cf:1b:86:a5:63:bc:fd:55:ed:9f:42:5f:15:
99:43:73:ea:31:57:24:27:95:fa:3b:07:76:ed:d5:
a0:c2:a4:b1:30:93:34:d1:de:42:b7:b6:cc:7a:0e:
da:f7:e5:ab:a4:98:a7:5d:6b:08:32:79:e8:5d:a6:
22:f2:3e:c1:a3:b1:81:d9:27:6b:e8:a3:1c:31:ce:
c9:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:92:BB:1E:A1:77:0C:76:A4:98:3D:CA:85:4E:50:C8:D3:02:4B:C5
X509v3 Authority Key Identifier:
keyid:DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/opK7HqF3DHakmD3KhU5QyNMCS8U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.247.59.0/24
86.104.209.0/24
89.42.40.0/24
93.114.169.0/24
93.115.155.0/24
185.77.249.0/24
217.19.1.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:d9:e5:16:bb:9b:13:fd:e5:90:8d:25:a8:93:cc:7b:b1:2e:
6e:be:d7:d9:bb:6b:fe:60:6b:93:ac:54:03:c8:05:ae:7f:67:
f3:8e:a6:46:ca:aa:3c:36:96:9c:e6:0f:80:61:03:36:a1:32:
9d:45:69:13:eb:bd:ea:0f:02:8d:59:bb:e1:79:c1:cb:6b:cc:
1e:a4:ad:f0:73:49:14:3d:c9:07:f5:39:26:64:c4:2f:fe:3b:
8d:ab:8f:7f:99:65:cd:7b:12:74:10:12:e2:9d:65:2d:da:4a:
50:b3:6b:a0:5e:1c:b7:76:d2:47:c5:16:ec:73:4b:75:a2:8f:
ee:64:31:b2:6c:cc:d8:88:2c:d1:d4:0d:c2:dc:99:00:b1:b7:
a7:28:24:83:dd:b3:0e:b9:cd:f6:a2:80:29:bf:e0:78:79:7b:
25:eb:0e:28:2e:5e:8c:66:a3:08:57:16:df:c2:3c:60:ce:71:
2a:6f:d0:29:65:29:84:49:e5:94:b8:0b:ff:52:f1:25:cc:8d:
6f:00:b0:f8:82:07:65:08:9a:ce:f8:0d:04:d2:b7:93:8f:c5:
a9:a3:a8:e7:94:ff:e4:5e:99:9f:b4:5e:ff:59:ab:9e:20:15:
9c:db:a4:9a:c6:8e:88:0d:0c:2d:73:92:e0:a1:b0:56:c5:99:
02:e3:5d:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:49 2024 by rpki-client on console-ams.rpki-client.org