Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/nY8U4N1yDm_DfwYfOSN-ZFxcnBs.roa
File: nY8U4N1yDm_DfwYfOSN-ZFxcnBs.roa (raw, json)
Hash identifier: DEafw46kFM5g1E7mGE52j1erdWOQPKTjk874wKCE42o=
Subject key identifier: 9D:8F:14:E0:DD:72:0E:6F:C3:7F:06:1F:39:23:7E:64:5C:5C:9C:1B
Certificate issuer: /CN=8777b5b36f66e13c4388c9934da507856515d073
Certificate serial: 018520EE214A4629E3D06867D1433E224D27
Authority key identifier: 87:77:B5:B3:6F:66:E1:3C:43:88:C9:93:4D:A5:07:85:65:15:D0:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/nY8U4N1yDm_DfwYfOSN-ZFxcnBs.roa
Signing time: Sat 17 Dec 2022 16:32:35 +0000
ROA not before: Sat 17 Dec 2022 16:32:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213241
IP address blocks: 185.185.230.0/24 maxlen: 24
87.238.226.0/24 maxlen: 24
94.139.34.0/23 maxlen: 24
94.139.38.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:20:ee:21:4a:46:29:e3:d0:68:67:d1:43:3e:22:4d:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8777b5b36f66e13c4388c9934da507856515d073
Validity
Not Before: Dec 17 16:32:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9d8f14e0dd720e6fc37f061f39237e645c5c9c1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d1:9d:7c:11:de:01:e3:5c:82:8a:73:a2:f5:
48:5b:3e:26:51:30:d1:9c:bd:61:af:f5:a9:bc:c6:
a6:2b:f1:72:94:df:75:ad:9c:1d:ce:11:42:65:e1:
f0:cb:c0:18:28:71:2e:fa:45:aa:ee:fa:6e:f4:5c:
99:b2:ac:dd:7b:ee:ad:71:25:bd:84:c2:c4:05:d6:
33:51:43:c2:1d:28:bd:ab:41:15:f9:e5:00:a8:0b:
05:36:31:c7:5d:81:c2:aa:7e:54:7e:b8:28:0d:e1:
38:49:c1:42:17:88:c8:08:06:cc:71:1e:4f:4f:1f:
6d:07:3e:9e:ea:64:62:3f:85:47:cc:d0:24:96:7d:
4c:c1:5f:f6:fd:8e:43:ca:24:b6:6e:da:bc:80:16:
c0:92:97:8f:44:f0:04:a9:ed:07:96:74:78:0d:22:
e6:05:e8:4d:c0:4d:ae:de:40:36:62:86:56:b4:ae:
4f:e9:3f:62:cb:30:ad:85:20:71:0d:2b:57:14:5d:
9a:32:c6:03:f3:5a:f3:98:cd:03:f3:ff:76:e6:c0:
42:e9:51:32:40:62:bc:9d:10:e0:0f:84:e9:c3:f7:
e0:8d:80:10:7f:7f:b2:98:a3:91:d6:c9:2f:d6:4f:
6f:f0:be:28:d7:24:b1:61:bb:b7:a5:e1:84:d3:21:
d7:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:8F:14:E0:DD:72:0E:6F:C3:7F:06:1F:39:23:7E:64:5C:5C:9C:1B
X509v3 Authority Key Identifier:
keyid:87:77:B5:B3:6F:66:E1:3C:43:88:C9:93:4D:A5:07:85:65:15:D0:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/nY8U4N1yDm_DfwYfOSN-ZFxcnBs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.238.226.0/24
94.139.34.0/23
94.139.38.0/24
185.185.230.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:34:ea:d5:23:59:e6:ac:01:40:b8:7e:3f:be:62:dc:39:e1:
d0:43:34:2d:af:ef:cd:89:ba:db:ca:fa:5a:77:ee:1f:3c:ef:
88:3d:46:f0:fc:b4:ac:1b:30:af:95:a9:f9:56:8b:eb:ce:de:
41:83:da:a6:28:b8:fd:4e:6a:7f:2f:3d:a4:d8:da:ff:77:81:
f8:99:33:00:17:e5:58:f9:cb:cb:b6:9c:25:96:c7:99:f1:68:
40:0a:f4:9c:9a:28:6f:c9:2f:3a:2d:5d:bc:44:a5:94:16:d5:
f8:a1:85:a5:32:3a:1b:1c:28:97:5a:95:f0:98:f2:73:5e:d6:
1c:dc:ad:73:0c:90:ee:1f:d0:e7:a6:ff:09:40:33:d9:f6:5c:
f2:09:a1:49:b1:a3:ae:55:46:fa:a6:9e:fe:27:6c:d8:74:dd:
c4:95:e7:0f:6a:57:fb:85:72:63:c7:dd:80:f8:41:a4:3a:79:
c7:8c:f3:4d:2e:22:54:56:2d:90:c3:9b:9e:6a:97:72:ca:90:
2a:61:1a:67:72:49:c7:a0:72:cb:1a:86:b9:46:e1:73:3a:01:
de:d5:84:ae:23:93:0a:0d:3f:3a:35:24:dc:83:a1:26:9b:9d:
71:da:c2:f4:7d:f9:ee:9d:e2:3d:c3:3c:ef:c0:8b:c5:9c:ba:
19:84:60:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:37 2023 by rpki-client on console.sobornost.net