Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/2fbf83-b28b-4d36-b118-eb1086075167/1/v_BWoIItrE7a7WAimEAolPxNxoU.roa
File: v_BWoIItrE7a7WAimEAolPxNxoU.roa (raw, json)
Hash identifier: Mcbh3pRHzjJ90m5D1481AqUbZfU6IEsUfBjqUJDTiPU=
Subject key identifier: BF:F0:56:A0:82:2D:AC:4E:DA:ED:60:22:98:40:28:94:FC:4D:C6:85
Certificate issuer: /CN=6827dc221544fc74215112a5812de196a2872e86
Certificate serial: 01856CC17678502F3962C96AAA0C4BEEE1BC
Authority key identifier: 68:27:DC:22:15:44:FC:74:21:51:12:A5:81:2D:E1:96:A2:87:2E:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aCfcIhVE_HQhURKlgS3hlqKHLoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/2fbf83-b28b-4d36-b118-eb1086075167/1/v_BWoIItrE7a7WAimEAolPxNxoU.roa
Signing time: Sun 01 Jan 2023 09:54:56 +0000
ROA not before: Sun 01 Jan 2023 09:54:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3175
IP address blocks: 195.128.51.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:c1:76:78:50:2f:39:62:c9:6a:aa:0c:4b:ee:e1:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6827dc221544fc74215112a5812de196a2872e86
Validity
Not Before: Jan 1 09:54:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bff056a0822dac4edaed602298402894fc4dc685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:ff:05:e7:29:d2:50:22:0b:dd:34:15:88:a6:
5d:36:d8:78:5a:58:1a:1d:a0:38:46:b8:bc:81:b8:
ea:29:65:14:41:56:1b:7f:ba:b5:e6:bf:be:c0:d3:
84:36:fe:42:46:4d:61:4d:96:39:0e:7e:67:9b:a0:
8b:27:44:ba:d4:39:1a:52:de:78:cd:dd:87:70:f9:
af:68:99:39:f2:98:0c:da:25:0c:63:8a:e5:c4:7b:
63:93:44:11:e6:83:bc:a4:e0:7a:f0:ce:25:f2:5b:
81:e5:44:5e:a0:d8:9b:15:50:68:d8:54:6c:f2:6f:
2b:b6:f6:8d:1a:7b:68:67:f9:4b:8f:c2:99:71:59:
1c:fd:87:22:de:e7:f4:f1:60:72:20:a6:7e:88:14:
c5:15:8b:9b:09:f1:e9:6a:8d:9f:a9:b2:64:d5:4c:
3c:33:7d:0c:d7:c0:82:ba:7c:3b:aa:61:35:9a:f8:
dc:90:e1:5a:48:50:96:cf:5d:c1:df:07:d0:f8:d7:
b6:2a:aa:18:8e:6c:58:44:06:14:71:d5:53:10:9c:
9f:82:82:09:60:dd:00:60:9b:6f:0e:16:66:73:1b:
7e:01:50:90:e9:e8:cd:d6:86:b4:4a:1e:c4:ff:bb:
08:bd:8f:a7:23:4f:4d:c2:8b:5c:54:3d:7b:cb:fc:
63:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:F0:56:A0:82:2D:AC:4E:DA:ED:60:22:98:40:28:94:FC:4D:C6:85
X509v3 Authority Key Identifier:
keyid:68:27:DC:22:15:44:FC:74:21:51:12:A5:81:2D:E1:96:A2:87:2E:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aCfcIhVE_HQhURKlgS3hlqKHLoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2fbf83-b28b-4d36-b118-eb1086075167/1/v_BWoIItrE7a7WAimEAolPxNxoU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2fbf83-b28b-4d36-b118-eb1086075167/1/aCfcIhVE_HQhURKlgS3hlqKHLoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.128.51.0/24
Signature Algorithm: sha256WithRSAEncryption
17:8b:0a:63:45:df:96:35:ba:d4:c1:ee:87:23:1d:20:f9:31:
1c:1b:b9:28:16:f0:c8:a9:e8:57:9c:9c:f7:fc:46:d9:52:86:
ca:a4:48:30:17:1d:61:b5:63:9a:16:b3:30:1e:49:d6:22:ec:
fe:cc:51:3a:44:2a:83:2b:90:73:82:63:6b:e7:d3:f1:c0:0f:
62:cc:01:01:49:82:4a:63:90:0e:fa:9d:9c:90:94:25:52:e1:
47:12:95:8f:44:9c:ad:f4:b8:48:6e:49:10:7f:d0:95:79:6f:
1b:91:f2:57:ce:6e:f9:17:b2:43:c1:eb:23:a0:26:ed:f9:1b:
85:ea:30:8a:2c:4e:3b:70:29:d3:40:1f:e6:dd:2a:11:91:a6:
25:6e:f0:99:07:40:4d:47:44:cb:b2:e8:1a:c1:ee:cc:73:e7:
d0:d1:fc:4a:d9:53:e0:65:a2:18:9e:74:7b:35:ca:23:91:b5:
a6:76:c6:cb:7d:56:4b:24:13:c7:04:09:9d:5c:3d:53:d5:0b:
1d:a1:8b:0d:c5:69:02:9a:ee:16:7f:38:a3:cd:a4:ab:f4:aa:
6c:a6:52:09:36:1b:4e:31:ff:70:bb:cb:93:8e:11:1b:9e:25:
c8:54:dd:d3:a5:bd:26:03:26:62:d4:9e:07:04:eb:ed:a3:06:
8e:5a:a8:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:53 2024 by rpki-client on console-ams.rpki-client.org