Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/yDj4UVIcfMvswfo1yaNxDoJAi5M.roa
File: yDj4UVIcfMvswfo1yaNxDoJAi5M.roa (raw, json)
Hash identifier: w2wViIbnp7GNXwWhbiNgy4QuUWvNaj90UqmtbP3xgj4=
Subject key identifier: C8:38:F8:51:52:1C:7C:CB:EC:C1:FA:35:C9:A3:71:0E:82:40:8B:93
Certificate issuer: /CN=0a7327805df20fb5c1d6f4e89074743caeb24af7
Certificate serial: 018879FBE845F6755B77BE3FEC080448DB29
Authority key identifier: 0A:73:27:80:5D:F2:0F:B5:C1:D6:F4:E8:90:74:74:3C:AE:B2:4A:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/yDj4UVIcfMvswfo1yaNxDoJAi5M.roa
Signing time: Fri 02 Jun 2023 02:42:11 +0000
ROA not before: Fri 02 Jun 2023 02:42:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205516
IP address blocks: 193.106.99.0/24 maxlen: 24
91.198.101.0/24 maxlen: 24
193.43.250.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:79:fb:e8:45:f6:75:5b:77:be:3f:ec:08:04:48:db:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a7327805df20fb5c1d6f4e89074743caeb24af7
Validity
Not Before: Jun 2 02:42:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c838f851521c7ccbecc1fa35c9a3710e82408b93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:fd:b8:7f:36:22:5e:05:3a:53:7c:4a:42:99:
80:1b:71:8d:24:99:64:f2:20:16:b6:97:dc:26:d8:
05:5e:d6:2f:fd:08:df:4c:44:5a:f2:0e:21:1e:4f:
70:e2:74:d1:6e:7b:ec:30:07:58:45:69:ca:ad:d0:
17:12:3a:19:2f:79:57:45:1e:fa:0e:8a:8c:3b:38:
3c:23:33:ec:8a:14:a1:07:76:43:2d:24:88:df:f5:
5e:69:28:10:0b:94:2c:68:fc:6d:8d:fb:93:5a:e8:
32:b5:10:cf:f5:20:bf:2e:5f:14:cb:12:0f:23:ac:
c0:45:6f:03:37:c2:66:b9:2a:69:71:57:15:6c:c0:
7b:8e:58:bb:1f:a5:53:1f:6f:20:a7:ca:25:38:70:
1e:28:2e:6c:df:3e:39:c0:fe:00:21:3b:a3:d4:39:
c6:d1:83:87:59:a0:90:db:1b:fe:fe:cd:c0:3c:bd:
91:57:fd:59:e3:6e:2e:10:03:1e:b9:88:ba:e5:cf:
37:e5:b7:fe:64:82:a8:29:bc:23:3f:ba:52:f0:d7:
86:1c:34:7e:31:16:20:ae:70:14:f4:28:30:dc:c4:
06:00:08:3e:ec:dd:07:bf:c3:0f:b4:71:46:73:3b:
58:47:9d:04:3d:f5:86:a1:ae:91:ab:7d:ba:50:91:
23:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:38:F8:51:52:1C:7C:CB:EC:C1:FA:35:C9:A3:71:0E:82:40:8B:93
X509v3 Authority Key Identifier:
keyid:0A:73:27:80:5D:F2:0F:B5:C1:D6:F4:E8:90:74:74:3C:AE:B2:4A:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/yDj4UVIcfMvswfo1yaNxDoJAi5M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.101.0/24
193.43.250.0/24
193.106.99.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:58:e2:4a:18:cd:f5:b7:b3:42:a3:2b:ea:fa:15:ed:b3:1d:
a9:ee:d3:36:25:a3:55:88:4c:af:50:e9:99:4a:13:d5:61:0e:
b2:08:9d:24:ac:04:9d:4c:3e:12:03:fd:ef:f0:53:48:bb:76:
7b:38:26:f6:a1:19:a1:2f:dc:c3:f4:4d:fd:52:a3:44:4a:d5:
4c:e3:36:15:4b:22:c0:b4:5b:34:70:d5:09:57:2d:ec:2b:fa:
c7:a4:04:44:85:49:76:5c:0a:fb:4f:22:34:c7:fe:23:28:96:
a7:f5:f0:4b:57:2c:12:53:90:d0:85:f1:d9:5b:91:bd:35:17:
32:11:0e:8a:51:30:b9:42:b6:9f:9d:3c:1a:6c:0d:1b:68:6a:
8a:4a:38:37:df:d9:2e:a3:13:d4:cf:77:3d:b0:ec:0e:71:b0:
14:f4:ad:83:a8:d2:9d:f0:22:6f:0d:b1:9a:d1:f1:0f:67:0d:
d7:e4:17:25:65:70:de:e5:9c:04:40:e9:23:4b:9c:2d:bb:a6:
76:2b:c9:e9:a0:7c:0e:7a:3f:8b:50:39:3b:fa:dc:c7:d2:62:
60:85:ba:8e:82:64:87:19:c4:04:7d:2c:fc:da:2a:ca:59:cd:
10:cc:22:77:b4:45:6f:e6:14:c3:a5:64:80:fe:ce:14:0a:97:
1f:07:79:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:06 2024 by rpki-client on console-ams.rpki-client.org