Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/v6cnGO-NpWUIvps04KEfIdVaYjE.roa
File: v6cnGO-NpWUIvps04KEfIdVaYjE.roa (raw, json)
Hash identifier: mL+wupcos/3r/CIEphnQk0K6T+TfQqAmTN/nt10jX8M=
Subject key identifier: BF:A7:27:18:EF:8D:A5:65:08:BE:9B:34:E0:A1:1F:21:D5:5A:62:31
Certificate issuer: /CN=da00e981953061972c896bd6d27738d083aadb0e
Certificate serial: 02D8EF33
Authority key identifier: DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/v6cnGO-NpWUIvps04KEfIdVaYjE.roa
Signing time: Tue 25 Jan 2022 20:44:38 +0000
ROA not before: Tue 25 Jan 2022 20:44:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200019
IP address blocks: 193.124.20.0/23 maxlen: 24
195.133.208.0/23 maxlen: 24
194.135.132.0/23 maxlen: 24
89.34.124.0/23 maxlen: 24
89.39.172.0/23 maxlen: 24
185.77.250.0/23 maxlen: 24
188.240.40.0/23 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47771443 (0x2d8ef33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da00e981953061972c896bd6d27738d083aadb0e
Validity
Not Before: Jan 25 20:44:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bfa72718ef8da56508be9b34e0a11f21d55a6231
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:22:36:a7:55:05:c6:58:26:e0:27:ee:a9:eb:
09:0a:46:89:81:f8:eb:6a:81:2e:5f:44:b7:ee:63:
a9:0e:d1:46:ca:ad:e3:f1:dd:cc:a9:a4:12:21:a7:
69:61:fb:d6:0d:1d:8b:e7:76:24:f6:ee:2b:4d:88:
05:b1:eb:f3:6b:8f:c5:84:b7:d9:86:6b:ed:30:e0:
40:35:55:9d:6d:c0:d6:65:80:08:73:82:46:e7:4c:
be:74:36:32:d5:40:18:be:70:3a:da:be:e2:df:04:
b7:c1:46:69:7e:bf:da:33:02:8a:5a:d2:ac:10:7e:
83:75:99:3e:9f:c7:0b:0e:08:fb:fe:03:a5:b0:6a:
7f:b2:49:6c:c1:ee:0b:e7:e1:32:0b:07:7d:4c:2d:
95:d5:2b:08:1d:d6:4d:d9:15:7f:d0:46:74:f6:43:
06:00:aa:ef:47:19:4b:f6:4e:e7:ac:d3:ef:c6:81:
0a:b7:c2:a7:0e:8e:7e:52:57:18:d9:cb:1d:d5:1f:
16:43:42:ab:66:61:fb:2c:8f:f3:35:bd:f5:9f:97:
8a:55:55:a2:f0:74:3c:fb:3b:9f:01:7b:b2:73:d7:
82:12:19:92:df:82:c2:a8:ac:60:e0:64:94:69:51:
d9:85:91:fb:0c:9b:79:2b:eb:8c:0b:58:70:75:f8:
71:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:A7:27:18:EF:8D:A5:65:08:BE:9B:34:E0:A1:1F:21:D5:5A:62:31
X509v3 Authority Key Identifier:
keyid:DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/v6cnGO-NpWUIvps04KEfIdVaYjE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.34.124.0/23
89.39.172.0/23
185.77.250.0/23
188.240.40.0/23
193.124.20.0/23
194.135.132.0/23
195.133.208.0/23
Signature Algorithm: sha256WithRSAEncryption
3f:71:78:21:1e:c8:a3:59:d1:de:85:ed:10:c8:c7:c1:61:6a:
eb:f0:2f:6d:4f:81:6e:da:c2:7c:3c:33:d6:e3:22:d1:c8:31:
2b:1f:97:0a:1a:31:8c:b4:81:62:a3:bf:c4:d6:68:52:b0:d0:
0e:bc:1c:49:ac:76:29:ce:18:da:48:88:34:64:2c:2a:55:fa:
3c:b7:28:e1:5e:51:d3:c3:67:79:de:00:23:74:0f:41:32:a5:
98:62:c3:33:86:66:78:56:be:e3:94:fc:4d:84:87:95:16:e2:
3c:5f:6c:05:33:9a:c9:8b:0a:76:5b:e2:6e:d9:5b:3a:74:4d:
01:db:ce:bf:1a:63:8c:d8:00:b0:47:89:9c:a6:5a:f9:b7:7f:
32:23:df:30:8e:8c:13:51:4e:32:57:a8:90:c8:8e:ad:d3:c4:
24:04:ec:37:ee:80:b3:0b:e5:5c:aa:be:d9:c6:8c:40:ea:dc:
24:46:d6:ab:c9:fb:af:d6:5b:86:91:8d:a0:56:1a:3f:4a:2b:
f1:63:c7:7e:87:9b:bc:a0:28:92:81:02:b4:9e:b6:20:1a:ef:
0f:30:9d:a0:b5:02:98:d1:09:40:98:5c:0f:f4:93:4f:2d:38:
bf:2a:6e:7b:6b:84:29:67:9c:c2:ed:f6:8e:46:49:5a:93:39:
32:0a:e5:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:49 2024 by rpki-client on console-ams.rpki-client.org