Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/meOo3nWOn71FMJIBEmyHDuHJZMc.roa
File: meOo3nWOn71FMJIBEmyHDuHJZMc.roa (raw, json)
Hash identifier: I7XzoQQBkrQc9TNHtcp8det09iUDexq+m5Ll8HGSNXU=
Subject key identifier: 99:E3:A8:DE:75:8E:9F:BD:45:30:92:01:12:6C:87:0E:E1:C9:64:C7
Certificate issuer: /CN=465eba5c1a80f86a4589278edd9304b3f5169f83
Certificate serial: 018CCA2A3C1CB610F38AD6912EB8FE3C6353
Authority key identifier: 46:5E:BA:5C:1A:80:F8:6A:45:89:27:8E:DD:93:04:B3:F5:16:9F:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/meOo3nWOn71FMJIBEmyHDuHJZMc.roa
Signing time: Tue 02 Jan 2024 12:33:34 +0000
ROA not before: Tue 02 Jan 2024 12:33:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49581
IP address blocks: 193.111.250.0/24 maxlen: 24
193.111.249.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:3c:1c:b6:10:f3:8a:d6:91:2e:b8:fe:3c:63:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=465eba5c1a80f86a4589278edd9304b3f5169f83
Validity
Not Before: Jan 2 12:33:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=99e3a8de758e9fbd45309201126c870ee1c964c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:98:b1:ab:72:ee:e8:ac:53:66:d5:12:69:30:
54:0a:d1:0c:bf:22:c6:12:5e:1b:8e:90:81:8f:c3:
e1:b7:2e:e4:29:41:9e:53:c4:82:8b:f0:94:5d:f0:
d6:98:b2:ae:0c:a2:95:4b:3b:55:b0:bd:cb:fa:48:
f4:e3:90:b0:11:cb:98:f2:f2:76:af:76:70:37:e0:
b3:ec:b9:5e:01:02:30:a4:f5:a0:83:c5:0c:71:75:
74:30:7a:26:c2:b7:73:71:16:f3:ce:ac:51:9a:93:
3e:0e:a7:71:f3:ac:90:5b:5a:cd:ef:ec:2f:3c:97:
59:32:36:52:6d:43:35:ac:9b:4c:8a:be:0a:dc:34:
d6:27:3e:3d:62:d2:80:df:30:4d:74:91:09:84:2c:
d0:f0:f9:18:b7:f6:42:1b:67:d0:d3:98:72:37:42:
22:66:3e:65:db:58:49:7c:32:86:fe:e9:ea:0b:0e:
e7:99:30:27:30:91:1d:9c:12:b7:33:15:91:3c:6d:
b3:35:ec:17:4b:1e:7a:43:55:1d:18:6b:65:63:23:
f3:a9:b2:ff:b9:42:77:1b:ba:87:e0:77:d5:c1:19:
9b:43:9b:38:01:a8:79:6a:1a:2f:36:cd:52:41:c0:
3d:af:db:a4:82:4e:98:61:9a:4a:f5:0d:4b:85:cd:
8b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:E3:A8:DE:75:8E:9F:BD:45:30:92:01:12:6C:87:0E:E1:C9:64:C7
X509v3 Authority Key Identifier:
keyid:46:5E:BA:5C:1A:80:F8:6A:45:89:27:8E:DD:93:04:B3:F5:16:9F:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/meOo3nWOn71FMJIBEmyHDuHJZMc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.111.249.0-193.111.250.255
Signature Algorithm: sha256WithRSAEncryption
1b:7d:db:a0:41:7b:44:c7:c0:44:02:15:46:48:7a:e8:cd:4f:
2f:5d:68:cf:d5:92:b0:92:96:ce:58:38:96:f8:65:1c:8b:8e:
03:7d:a1:49:ca:75:fc:77:6d:b1:0a:b7:00:67:b4:ba:6f:0a:
b5:63:6d:8e:ea:78:03:19:d2:c0:d4:d5:ba:ac:14:b3:f0:bd:
31:01:a8:1b:94:9b:50:5c:f6:05:5f:2c:f5:45:b2:9f:c2:64:
42:72:b3:3b:72:48:6c:2c:e3:5e:41:e4:b7:bc:8f:e9:36:73:
53:12:b2:38:eb:d4:1b:5a:14:35:58:5f:9e:ea:a5:78:6a:cd:
5f:2b:8e:bd:28:b6:3c:a5:ce:c7:9b:c2:7b:0e:b4:19:0e:66:
79:8a:5b:94:98:5f:d6:b1:2a:eb:a7:f2:60:8f:f7:1a:d0:a9:
ad:7c:85:be:4a:8b:1f:12:f3:57:6b:6b:f3:7f:45:d2:f1:a1:
72:06:0b:94:a6:a3:9a:61:e0:d5:e5:33:78:13:a6:a8:2f:c4:
84:9e:3e:e7:02:74:92:41:d2:2e:9b:b3:18:55:0d:75:08:77:
b7:f9:e5:2e:a1:62:6b:67:3b:8b:f2:f8:8a:6c:cc:20:b6:7c:
1a:30:18:65:b6:54:4b:95:a3:90:97:b1:99:3f:75:4e:3e:ce:
05:5d:8f:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 18:41:51 2024 by rpki-client on console-fra.rpki-client.org