Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/31a6a4-8a9d-47a2-8fbb-b9dff3e7a32e/1/JtazySgsdV2bhxRFZNjD7K_k1J8.roa
File: JtazySgsdV2bhxRFZNjD7K_k1J8.roa (raw, json)
Hash identifier: yqPS/3O4OZ13h0V/uIfzqn2g0vKMZprZT5JvHdieGag=
Subject key identifier: 26:D6:B3:C9:28:2C:75:5D:9B:87:14:45:64:D8:C3:EC:AF:E4:D4:9F
Certificate issuer: /CN=9213f2c2d06c64b895457ab50fc4920283a49cc7
Certificate serial: 0794EEBD
Authority key identifier: 92:13:F2:C2:D0:6C:64:B8:95:45:7A:B5:0F:C4:92:02:83:A4:9C:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khPywtBsZLiVRXq1D8SSAoOknMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/31a6a4-8a9d-47a2-8fbb-b9dff3e7a32e/1/JtazySgsdV2bhxRFZNjD7K_k1J8.roa
Signing time: Wed 23 Mar 2022 07:30:45 +0000
ROA not before: Wed 23 Mar 2022 07:30:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206119
IP address blocks: 194.1.244.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 127200957 (0x794eebd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9213f2c2d06c64b895457ab50fc4920283a49cc7
Validity
Not Before: Mar 23 07:30:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=26d6b3c9282c755d9b87144564d8c3ecafe4d49f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:69:c3:60:61:0c:9b:6c:8e:a6:79:c4:59:90:
59:a9:e6:78:dc:ca:12:09:52:0f:af:7e:c7:11:7b:
9b:2a:9f:0b:c7:cd:88:f4:76:76:64:01:99:d4:ba:
45:75:cc:a1:7e:2f:b9:c7:30:3c:7e:78:15:8a:27:
7f:0c:e5:5a:d5:d8:8d:4d:70:26:23:93:c9:ce:17:
16:71:a7:a5:69:5a:24:98:bc:93:7f:00:6e:88:3b:
c4:34:b6:a3:44:bd:77:32:02:fc:f2:fe:55:4b:c4:
8b:8c:3d:63:a1:52:02:54:be:1a:0d:ad:00:3e:f1:
3f:1a:c3:10:84:90:8c:08:44:d3:5d:8d:b4:ec:0c:
42:6e:43:66:4b:ee:70:78:aa:bb:db:03:b0:31:40:
ff:7e:8e:9c:4d:6c:a2:97:a1:7a:ff:89:ab:c4:82:
92:c4:cb:ed:34:3a:0b:1c:62:eb:03:28:79:ef:e8:
a6:b2:f5:8c:a8:dc:8a:f4:a6:20:48:63:be:52:64:
56:98:fa:b3:41:bc:e5:f1:b3:b6:7c:2e:dd:f0:db:
b2:f9:31:0d:2b:28:0a:e3:64:44:f1:35:82:a9:e0:
14:61:39:4d:47:f6:02:6d:09:76:5c:17:a6:97:87:
ec:56:99:55:70:f0:3d:52:a8:d3:1c:c7:b4:24:90:
d6:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:D6:B3:C9:28:2C:75:5D:9B:87:14:45:64:D8:C3:EC:AF:E4:D4:9F
X509v3 Authority Key Identifier:
keyid:92:13:F2:C2:D0:6C:64:B8:95:45:7A:B5:0F:C4:92:02:83:A4:9C:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khPywtBsZLiVRXq1D8SSAoOknMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/31a6a4-8a9d-47a2-8fbb-b9dff3e7a32e/1/JtazySgsdV2bhxRFZNjD7K_k1J8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/31a6a4-8a9d-47a2-8fbb-b9dff3e7a32e/1/khPywtBsZLiVRXq1D8SSAoOknMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.1.244.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:ca:5b:4a:f6:db:a3:ab:ed:c6:a8:69:69:d2:a6:92:dc:5e:
f4:78:7c:f3:7a:4b:11:fa:08:3c:48:ab:f9:87:cc:25:bf:14:
e7:b8:01:25:14:85:d0:4a:37:9d:b3:48:c2:ad:29:f1:7b:59:
cc:f5:9b:c3:89:7e:5f:58:b5:c2:8d:6c:2d:0b:68:6f:a5:0c:
c3:d4:f6:9a:53:43:93:f2:3f:a1:ec:8d:3c:a0:e0:78:45:c9:
07:22:ad:d6:f2:1c:a3:ad:3e:62:d8:a7:83:60:95:c7:e8:b4:
c1:21:76:1e:a7:ce:29:df:f1:82:6f:d7:27:ca:b7:d8:2c:a1:
db:a2:3f:29:d3:f8:72:a4:2a:21:31:52:1f:e1:64:71:b1:15:
79:6f:65:1d:a0:fd:68:c3:06:ee:11:d5:3a:64:a4:0c:da:2f:
00:e6:cd:e3:65:b3:2e:44:b2:cc:9c:24:ea:06:45:f2:51:a2:
34:98:86:35:27:56:7a:63:57:43:e5:18:f4:39:d3:64:2d:4e:
40:3d:63:8b:11:ec:a9:cc:72:4a:4e:11:38:5e:7e:37:cc:5e:
c9:86:f3:ba:92:ac:21:73:d1:02:29:30:86:98:37:af:ed:e4:
36:be:6e:9f:2c:dc:7a:9f:31:47:b4:60:cc:ec:b1:3a:66:b1:
4e:73:b7:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:01 2024 by rpki-client on console-ams.rpki-client.org