Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/KbNDHVd7xeJqfhLXhjrgBoa8SBA.roa
File: KbNDHVd7xeJqfhLXhjrgBoa8SBA.roa (raw, json)
Hash identifier: ELJwpevOuag1VH2cgnxWinkmmPF4y92gNtNORk8i5io=
Subject key identifier: 29:B3:43:1D:57:7B:C5:E2:6A:7E:12:D7:86:3A:E0:06:86:BC:48:10
Certificate issuer: /CN=7539b7a123417aa719325946aa89e0f30ab0ca09
Certificate serial: 01865960ACC1A08749AD1311E23271669218
Authority key identifier: 75:39:B7:A1:23:41:7A:A7:19:32:59:46:AA:89:E0:F3:0A:B0:CA:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dTm3oSNBeqcZMllGqong8wqwygk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/KbNDHVd7xeJqfhLXhjrgBoa8SBA.roa
Signing time: Thu 16 Feb 2023 08:39:13 +0000
ROA not before: Thu 16 Feb 2023 08:39:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3302
IP address blocks: 194.20.0.0/16 maxlen: 24
212.90.0.0/19 maxlen: 24
194.21.0.0/18 maxlen: 24
194.21.128.0/18 maxlen: 24
194.153.192.0/20 maxlen: 24
213.136.128.0/18 maxlen: 24
212.110.0.0/19 maxlen: 24
195.62.224.0/19 maxlen: 24
213.198.128.0/18 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:59:60:ac:c1:a0:87:49:ad:13:11:e2:32:71:66:92:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7539b7a123417aa719325946aa89e0f30ab0ca09
Validity
Not Before: Feb 16 08:39:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=29b3431d577bc5e26a7e12d7863ae00686bc4810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:84:b6:8f:ca:1a:af:21:9d:a2:0f:6b:40:2c:
29:06:1d:e3:c1:8f:1b:04:91:fe:d6:b9:20:44:f0:
6e:89:3f:4a:1b:81:c5:dc:09:e5:1d:26:bf:ac:96:
a8:cc:51:bf:96:26:8b:6f:45:da:f0:aa:71:dd:25:
46:ff:df:5e:1e:6e:0d:33:6f:13:89:7a:a1:a1:bc:
b1:7f:d2:94:0b:dd:42:04:36:fb:36:da:60:df:7d:
d9:b5:82:a0:40:4b:82:07:e1:46:5d:15:28:a8:ce:
16:db:62:8a:a2:41:68:07:56:ae:88:be:f5:3f:b4:
88:81:f8:a5:a6:c3:ae:84:d0:ef:3b:23:85:d6:cc:
a3:17:5c:a4:b2:5e:2d:84:fc:9e:d3:da:5e:bc:70:
62:56:2e:fe:41:22:21:51:9a:cf:d7:0a:5d:7f:17:
af:93:2d:20:17:77:57:bd:11:38:6c:19:59:16:73:
a1:ad:11:53:f9:ad:81:69:15:79:c6:d3:58:b2:9e:
46:33:47:36:97:c3:ba:61:81:3a:d9:03:85:05:dd:
f1:b4:fc:12:c8:5d:a9:c2:a9:85:d6:f1:ff:61:08:
a6:24:13:ce:8a:40:4b:89:71:db:8f:1e:3f:1d:4d:
74:f3:a8:93:e4:e3:13:b1:e8:f7:e6:fc:bd:b7:ae:
79:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:B3:43:1D:57:7B:C5:E2:6A:7E:12:D7:86:3A:E0:06:86:BC:48:10
X509v3 Authority Key Identifier:
keyid:75:39:B7:A1:23:41:7A:A7:19:32:59:46:AA:89:E0:F3:0A:B0:CA:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dTm3oSNBeqcZMllGqong8wqwygk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/KbNDHVd7xeJqfhLXhjrgBoa8SBA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/dTm3oSNBeqcZMllGqong8wqwygk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.20.0.0-194.21.63.255
194.21.128.0/18
194.153.192.0/20
195.62.224.0/19
212.90.0.0/19
212.110.0.0/19
213.136.128.0/18
213.198.128.0/18
Signature Algorithm: sha256WithRSAEncryption
72:e9:08:1f:8a:06:de:8f:84:31:b1:77:f6:2f:67:d7:f9:39:
20:5e:6f:5e:9e:55:26:bf:15:d5:e0:1f:3e:ce:bb:6c:f2:04:
83:de:00:b7:01:b0:40:85:c2:30:36:f2:fc:5b:b6:ec:d5:af:
9a:17:18:5d:c3:62:e6:af:d7:cf:99:de:d5:11:75:bc:ce:6b:
87:ac:a6:1e:9e:98:ff:01:7d:ff:74:d1:6e:df:7f:cb:6a:b6:
e1:9e:2b:5b:60:d5:af:3e:9c:bc:93:01:31:c7:08:0a:4c:30:
1f:f5:a9:06:84:ad:4e:60:8e:8f:1d:9d:be:45:46:c3:54:0c:
51:5d:9d:c4:62:61:a6:f3:2c:ef:69:75:b2:87:51:9b:e0:3b:
fa:af:89:16:47:e1:2f:44:04:b9:4d:e6:7a:b1:96:1a:f8:cf:
e7:ae:4b:19:3d:a1:fa:02:55:fe:a8:81:48:df:de:02:8a:fa:
fa:11:3f:3b:37:57:ec:c8:93:bb:a8:e4:13:00:2c:29:34:3f:
63:49:8b:1f:f2:90:19:27:35:dc:b0:5f:25:fc:a8:58:0b:df:
7c:f1:76:0d:eb:35:d0:c1:08:2e:7f:78:ff:d0:61:39:a4:47:
37:64:d9:ec:03:4a:ff:b1:a4:e2:9b:0b:b6:66:99:c6:dd:3f:
00:72:1d:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:37 2023 by rpki-client on console.sobornost.net