Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/2171be-b083-479b-a580-6a06b7502bd7/1/nrCFJZ1G4ZKC6QblxvGZCanFk5Q.roa
File: nrCFJZ1G4ZKC6QblxvGZCanFk5Q.roa (raw, json)
Hash identifier: Fkg/XxislEtU7NBZFwNYkhfVYuFI4ceLQhitpPfxkmw=
Subject key identifier: 9E:B0:85:25:9D:46:E1:92:82:E9:06:E5:C6:F1:99:09:A9:C5:93:94
Certificate issuer: /CN=37ed49efac9795987771acdc77a0e228904277ad
Certificate serial: 01855F495F8A5A3F38518CE917279A87D478
Authority key identifier: 37:ED:49:EF:AC:97:95:98:77:71:AC:DC:77:A0:E2:28:90:42:77:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N-1J76yXlZh3cazcd6DiKJBCd60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/2171be-b083-479b-a580-6a06b7502bd7/1/nrCFJZ1G4ZKC6QblxvGZCanFk5Q.roa
Signing time: Thu 29 Dec 2022 19:08:41 +0000
ROA not before: Thu 29 Dec 2022 19:08:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 996
IP address blocks: 178.130.132.0/22 maxlen: 24
178.130.136.0/21 maxlen: 21
109.172.74.0/23 maxlen: 23
109.172.74.0/24 maxlen: 24
109.172.88.0/22 maxlen: 24
109.172.92.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:5f:49:5f:8a:5a:3f:38:51:8c:e9:17:27:9a:87:d4:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37ed49efac9795987771acdc77a0e228904277ad
Validity
Not Before: Dec 29 19:08:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9eb085259d46e19282e906e5c6f19909a9c59394
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:64:09:c8:e2:2f:3b:ff:ff:33:03:89:2e:7c:
10:ea:f6:7a:22:c1:52:c9:90:d2:7c:2f:b8:c9:47:
0a:1d:70:a7:13:7f:e2:ce:fa:1a:c4:b2:f6:ec:2f:
91:04:e2:c6:6b:a1:d0:19:35:c5:b1:5c:87:3a:57:
c7:66:3f:e2:7c:19:91:27:07:4f:8c:6e:f1:8c:24:
f8:f4:3c:9f:3d:ec:20:f6:10:fe:3a:2c:a5:ac:59:
9f:ec:7b:ac:49:42:18:c5:97:c5:87:bd:d5:f8:95:
a3:f0:b1:81:40:f1:7d:64:8d:d8:40:ba:c4:78:b0:
13:ff:41:f1:f5:97:9c:86:4b:47:86:9c:6a:cf:c0:
cc:2f:f7:f7:0f:4d:6b:65:cd:96:31:75:e5:f7:88:
0a:1d:77:ad:e0:a3:10:72:1e:af:03:f7:be:29:92:
43:13:24:8b:0b:8e:e6:80:18:ff:f5:73:45:5a:9b:
cb:03:86:bf:d4:be:00:c4:17:a6:88:a3:25:f5:ac:
29:01:81:b7:6e:24:20:c4:3b:fc:fc:30:12:af:83:
00:06:d2:a5:23:0a:1a:e4:f4:c1:88:87:01:66:e0:
7d:a2:58:0b:bf:bb:3d:b4:35:64:c7:26:98:c0:e1:
79:f8:51:f1:d7:92:9a:49:66:89:49:4f:05:3f:0a:
ef:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:B0:85:25:9D:46:E1:92:82:E9:06:E5:C6:F1:99:09:A9:C5:93:94
X509v3 Authority Key Identifier:
keyid:37:ED:49:EF:AC:97:95:98:77:71:AC:DC:77:A0:E2:28:90:42:77:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N-1J76yXlZh3cazcd6DiKJBCd60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/2171be-b083-479b-a580-6a06b7502bd7/1/nrCFJZ1G4ZKC6QblxvGZCanFk5Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/2171be-b083-479b-a580-6a06b7502bd7/1/N-1J76yXlZh3cazcd6DiKJBCd60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.172.74.0/23
109.172.88.0/21
178.130.132.0-178.130.143.255
Signature Algorithm: sha256WithRSAEncryption
17:01:b5:f7:f1:b1:6e:bb:4f:e3:e8:8e:73:51:28:fe:2a:da:
39:bd:92:b9:92:d4:d9:39:06:96:dc:a9:f1:f4:28:4b:7e:44:
79:db:a6:8e:5e:29:47:2a:4b:61:50:b2:c5:4e:b3:2b:e7:6a:
7b:8a:56:bb:0a:4c:a5:8d:15:54:ed:27:f9:df:af:be:8c:5e:
1b:53:fc:35:77:29:d3:d8:19:58:51:46:6a:10:86:d6:30:de:
3e:80:30:dc:41:db:3a:f5:16:da:00:f4:2f:20:38:3b:b5:8f:
78:cb:fe:42:26:f2:0a:12:90:ab:92:4b:4e:83:23:e8:08:58:
23:6f:eb:df:23:6e:db:90:f7:bf:f0:19:ae:45:f8:5e:49:5e:
e4:09:9d:19:a8:23:3c:b5:a7:2a:d7:8c:cc:1b:f9:5b:1c:3f:
56:46:40:d1:2f:3f:48:a4:4e:08:ba:15:4f:7f:fd:fe:8c:ba:
2e:73:18:47:0f:33:70:4e:8a:1a:f1:c6:3c:bd:2f:67:e1:ac:
7e:34:97:08:5d:44:a6:3e:49:d5:08:8c:f7:ff:8f:63:ff:93:
e4:2a:01:84:10:d2:c1:d8:4f:1d:f1:52:81:62:2e:a3:08:13:
42:6f:b0:a0:c0:11:44:91:48:cf:59:8f:2e:ad:38:0b:45:62:
a3:ca:c6:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:46 2023 by rpki-client on console.sobornost.net