Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/6d9359-afef-4535-9c93-f33d3bb36484/1/AlJeTJizzpw2I6e0_DH0WKHK-Js.roa
File: AlJeTJizzpw2I6e0_DH0WKHK-Js.roa (raw, json)
Hash identifier: 0gt+SXHaS8t6IXK9upEH/b0Ck/Bh1P5Fisddi3D9aQg=
Subject key identifier: 02:52:5E:4C:98:B3:CE:9C:36:23:A7:B4:FC:31:F4:58:A1:CA:F8:9B
Certificate issuer: /CN=529c273098b52768ca0e44a3a2c16efed4a65ca0
Certificate serial: 018EE131BE8671877266BD375693F29B0803
Authority key identifier: 52:9C:27:30:98:B5:27:68:CA:0E:44:A3:A2:C1:6E:FE:D4:A6:5C:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UpwnMJi1J2jKDkSjosFu_tSmXKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/6d9359-afef-4535-9c93-f33d3bb36484/1/AlJeTJizzpw2I6e0_DH0WKHK-Js.roa
Signing time: Mon 15 Apr 2024 09:58:37 +0000
ROA not before: Mon 15 Apr 2024 09:58:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209372
IP address blocks: 78.136.248.0/23 maxlen: 24
78.136.250.0/23 maxlen: 24
78.136.252.0/23 maxlen: 24
78.136.254.0/24 maxlen: 24
78.136.255.0/24 maxlen: 24
88.204.46.0/23 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:e1:31:be:86:71:87:72:66:bd:37:56:93:f2:9b:08:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=529c273098b52768ca0e44a3a2c16efed4a65ca0
Validity
Not Before: Apr 15 09:58:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=02525e4c98b3ce9c3623a7b4fc31f458a1caf89b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:bd:63:71:b5:39:0c:a6:f4:09:9a:7f:e8:fb:
c6:94:23:e6:e5:8e:c6:c2:6f:eb:6a:d4:3d:77:72:
8f:83:c6:a3:39:4a:8a:fb:57:a8:c5:d9:0f:4d:ff:
07:47:35:f7:7f:5a:a1:69:93:8e:bc:6c:f8:25:8a:
c1:d7:63:e3:8b:0a:4b:18:5f:7a:30:41:d7:fa:b5:
11:85:32:29:de:05:41:a5:65:3b:b6:4a:f0:a6:61:
a9:ac:dc:00:45:7f:8e:05:c2:ea:34:92:a2:9f:19:
f6:53:c5:eb:ef:87:a4:0a:52:ec:ba:32:3f:65:8f:
7d:4d:fd:0b:f6:7e:b7:ad:ce:4c:e1:7d:cd:40:c8:
93:61:f5:fe:b4:d7:42:bd:e4:5b:da:6e:78:ed:ae:
98:6b:1a:ec:01:f9:e8:aa:e9:54:71:ca:a4:49:1e:
05:22:8d:9b:20:fa:b1:0e:89:01:0f:85:c6:3d:fd:
b9:36:b5:16:63:d6:16:a6:25:00:97:07:e4:a8:78:
8f:cd:48:93:01:87:58:88:23:a4:f1:24:8a:9b:d1:
08:e1:b9:ab:9c:5d:c0:52:b6:c2:24:1d:63:1d:8c:
02:88:cd:54:ac:6e:4e:99:36:9f:3b:c4:65:0f:90:
7c:f7:de:af:ed:29:86:97:32:70:79:8e:bc:9c:ee:
60:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:52:5E:4C:98:B3:CE:9C:36:23:A7:B4:FC:31:F4:58:A1:CA:F8:9B
X509v3 Authority Key Identifier:
keyid:52:9C:27:30:98:B5:27:68:CA:0E:44:A3:A2:C1:6E:FE:D4:A6:5C:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UpwnMJi1J2jKDkSjosFu_tSmXKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6d9359-afef-4535-9c93-f33d3bb36484/1/AlJeTJizzpw2I6e0_DH0WKHK-Js.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6d9359-afef-4535-9c93-f33d3bb36484/1/UpwnMJi1J2jKDkSjosFu_tSmXKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.136.248.0/21
88.204.46.0/23
Signature Algorithm: sha256WithRSAEncryption
7d:18:28:f9:0a:2f:01:2f:2c:55:aa:2b:28:98:77:28:1e:37:
e9:96:cf:0f:39:fa:7e:32:65:c0:27:5d:cd:31:58:5b:de:99:
0a:69:1c:d4:c9:75:52:0c:73:03:c7:fb:31:58:4c:ef:83:f0:
74:e4:12:60:8c:3a:62:f1:b0:57:a4:ec:22:7f:c2:cc:95:70:
44:fe:16:65:ca:18:be:03:92:1e:bb:bd:8e:f2:7d:0f:15:30:
0b:01:69:4c:03:0c:e1:ac:ef:15:02:53:97:04:26:81:18:51:
94:8d:61:b3:f3:62:88:00:9d:d3:a5:f9:0c:d3:22:c4:42:31:
ca:ee:d3:1f:f0:0a:17:a6:c7:86:7c:35:8b:f2:a4:ff:6a:6f:
5a:56:3f:e0:33:28:a7:89:1a:ad:f9:fe:e9:ec:ce:7c:0d:69:
ea:87:5c:fb:00:25:78:90:11:81:8a:5a:31:dd:5e:f8:48:df:
f2:fd:ad:11:c7:99:ba:4d:62:ec:0c:16:e9:77:45:07:52:b4:
3e:c6:7e:25:40:f7:8a:13:3e:56:cb:5b:aa:94:d6:8d:4c:95:
a3:00:04:2e:f3:8c:72:00:98:de:0b:10:f5:04:36:38:8d:b1:
bb:21:a1:70:7c:ab:a1:7a:79:6d:35:0d:da:8d:67:76:1a:7d:
65:46:19:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 10 14:41:48 2024 by rpki-client on console.sobornost.net