Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/31a6a4-8a9d-47a2-8fbb-b9dff3e7a32e/1/mUB-hOQFfXzUtk0GJQ9D3lGnzbg.roa
File: mUB-hOQFfXzUtk0GJQ9D3lGnzbg.roa (raw, json)
Hash identifier: Adz3KqCQAXnH/pMiSNh13Rq/Xu6DvinwozyIEsK5TW8=
Subject key identifier: 99:40:7E:84:E4:05:7D:7C:D4:B6:4D:06:25:0F:43:DE:51:A7:CD:B8
Certificate issuer: /CN=9213f2c2d06c64b895457ab50fc4920283a49cc7
Certificate serial: 01856CE61EE0B862BC159683935700B8AED8
Authority key identifier: 92:13:F2:C2:D0:6C:64:B8:95:45:7A:B5:0F:C4:92:02:83:A4:9C:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khPywtBsZLiVRXq1D8SSAoOknMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/31a6a4-8a9d-47a2-8fbb-b9dff3e7a32e/1/mUB-hOQFfXzUtk0GJQ9D3lGnzbg.roa
Signing time: Sun 01 Jan 2023 10:34:58 +0000
ROA not before: Sun 01 Jan 2023 10:34:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213157
IP address blocks: 194.1.218.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:e6:1e:e0:b8:62:bc:15:96:83:93:57:00:b8:ae:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9213f2c2d06c64b895457ab50fc4920283a49cc7
Validity
Not Before: Jan 1 10:34:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=99407e84e4057d7cd4b64d06250f43de51a7cdb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d4:d5:0f:e0:8c:97:fd:83:63:de:cb:be:04:
5c:1f:02:b2:82:14:6f:e8:f9:f6:b0:a1:85:0d:bd:
55:02:b6:b5:2d:9f:8e:2d:c6:54:69:41:7b:0a:6a:
cf:14:77:90:ee:e3:9d:d7:28:bb:54:02:c9:85:92:
7e:f8:6d:37:77:6f:cb:13:14:1b:ee:56:7d:b9:0d:
11:50:59:b2:4c:d2:ac:db:9b:58:35:dc:1b:e1:4d:
0e:c6:62:7a:4e:41:43:f4:fb:fe:96:7f:0f:00:8a:
ad:84:13:a4:b8:d4:a1:1d:9b:ca:e9:4e:5b:9e:f6:
00:08:08:44:56:a8:b4:f8:71:d5:65:0a:b4:65:f1:
d6:2c:61:41:83:06:0a:d4:03:18:a0:2f:ce:8f:78:
06:b0:ad:13:bc:be:09:a0:e3:42:65:bb:af:f5:f1:
dc:00:a1:74:67:64:7c:bd:5a:1d:32:30:02:00:b4:
66:1c:a2:10:b1:73:05:cf:47:19:2a:94:e2:3f:62:
44:78:4e:51:d6:4c:d7:95:d4:42:1c:93:29:d0:89:
37:91:b1:1f:06:e5:a7:e0:bc:bc:3d:f5:fb:cf:35:
22:e7:c5:df:4f:85:77:0b:02:04:16:57:09:a0:10:
02:66:cb:65:ba:43:97:27:2a:69:c9:c3:cf:68:ee:
d3:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:40:7E:84:E4:05:7D:7C:D4:B6:4D:06:25:0F:43:DE:51:A7:CD:B8
X509v3 Authority Key Identifier:
keyid:92:13:F2:C2:D0:6C:64:B8:95:45:7A:B5:0F:C4:92:02:83:A4:9C:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khPywtBsZLiVRXq1D8SSAoOknMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/31a6a4-8a9d-47a2-8fbb-b9dff3e7a32e/1/mUB-hOQFfXzUtk0GJQ9D3lGnzbg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/31a6a4-8a9d-47a2-8fbb-b9dff3e7a32e/1/khPywtBsZLiVRXq1D8SSAoOknMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.1.218.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:04:ed:d9:5e:19:4f:25:61:1a:e0:29:b6:c0:3e:c6:46:62:
82:1a:e7:77:02:c0:4e:58:ac:4d:dd:e4:5d:56:87:9c:a4:e8:
ae:a2:17:23:1a:53:e8:c8:22:24:47:82:f6:e8:9a:22:a8:fe:
b3:50:cf:2e:59:cc:45:d0:ac:d8:60:83:ba:83:32:56:29:fc:
58:7c:6d:ed:df:d8:51:47:57:04:f3:63:90:5e:37:8a:9a:08:
81:6a:ce:9c:ab:5d:55:41:91:d6:e6:54:71:e2:4c:e9:37:d8:
6e:3a:01:f0:a1:e2:5c:f7:64:7c:62:86:c8:27:3e:02:d5:d1:
20:bc:7a:b0:04:dc:83:8d:a8:d8:e2:33:2c:de:c8:ac:94:b2:
fd:7f:72:28:a0:01:31:de:9d:cd:6b:dc:f6:c6:1e:45:06:7a:
88:4d:53:37:6f:b9:f2:5f:b1:ff:43:95:b2:5d:15:53:44:ce:
a2:02:11:fe:e3:bf:02:69:fd:ca:8e:35:ab:8f:14:eb:f0:5d:
7e:2d:e5:9c:16:00:32:d8:64:17:f2:c8:5c:77:d5:9f:fd:48:
8b:5c:39:82:79:ee:f8:60:41:a1:f8:d5:80:08:eb:a9:05:72:
ba:79:d5:4c:8a:99:0e:13:b0:1a:4a:d5:da:e5:5b:af:60:45:
ad:92:02:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:01 2024 by rpki-client on console-ams.rpki-client.org