Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/qNMlllpMTrNIbYaIM7xmF4-owRo.roa
File: qNMlllpMTrNIbYaIM7xmF4-owRo.roa (raw, json)
Hash identifier: AbJjnKzdsG3zUAkmXt4CxcBzDxkRfkT2NWVW+ciU+HU=
Subject key identifier: A8:D3:25:96:5A:4C:4E:B3:48:6D:86:88:33:BC:66:17:8F:A8:C1:1A
Certificate issuer: /CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Certificate serial: 01889A646AA913FA4989C411658ED2C999C8
Authority key identifier: 6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/qNMlllpMTrNIbYaIM7xmF4-owRo.roa
Signing time: Thu 08 Jun 2023 09:44:12 +0000
ROA not before: Thu 08 Jun 2023 09:44:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207713
IP address blocks: 194.113.34.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:9a:64:6a:a9:13:fa:49:89:c4:11:65:8e:d2:c9:99:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Validity
Not Before: Jun 8 09:44:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a8d325965a4c4eb3486d868833bc66178fa8c11a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:eb:96:76:5e:15:37:35:c7:a1:ed:19:67:14:
bd:59:22:cd:10:21:aa:87:4b:37:85:f7:6d:8f:f6:
59:f7:55:13:33:d9:f4:08:f1:81:de:d9:68:84:08:
e5:6d:1a:61:35:bf:a0:9a:63:0f:56:f7:2f:58:45:
ec:d3:9b:1c:b4:05:fa:e3:2d:65:fd:7d:10:49:8a:
2d:39:f6:e9:b2:b5:1c:23:7e:e1:0a:1f:bd:a4:fa:
80:a1:f5:91:85:92:98:41:53:da:77:df:2c:fd:ba:
46:20:7a:21:f9:19:dd:ba:b2:f6:1b:4b:39:f4:3f:
a2:46:c4:72:c9:f0:c8:a7:cd:71:95:ce:c9:7a:33:
04:5c:70:f1:79:80:1d:9e:f6:7d:23:a0:9f:6e:ae:
6e:9c:02:d0:96:39:cf:c2:7c:9f:b8:10:89:a6:1f:
62:fb:52:eb:f0:2f:43:8b:ac:e2:e6:67:d0:46:a4:
e0:e7:a6:fe:68:f3:c8:80:42:66:f6:a9:90:4c:d0:
1e:f1:03:88:b2:d9:b0:e9:e4:1b:69:06:11:f0:d9:
f5:ec:c8:ad:6e:65:20:da:9d:7a:57:d4:5e:57:2f:
43:0b:e6:3b:5d:6b:b4:48:dc:cf:5e:9a:e6:e1:47:
b7:92:88:0b:1e:16:ff:65:e9:86:9f:fb:90:e5:79:
9b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:D3:25:96:5A:4C:4E:B3:48:6D:86:88:33:BC:66:17:8F:A8:C1:1A
X509v3 Authority Key Identifier:
keyid:6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/qNMlllpMTrNIbYaIM7xmF4-owRo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.113.34.0/24
Signature Algorithm: sha256WithRSAEncryption
28:8d:ab:0f:71:37:1d:72:83:f3:d6:69:c6:d9:78:45:b8:74:
77:8e:21:85:62:ef:05:e1:e4:8f:8d:c0:0f:3e:34:42:75:da:
f8:d9:9b:8b:ba:6f:7a:52:ad:19:3f:99:93:89:80:f4:bb:c9:
7e:4a:e1:39:34:27:e0:2e:f5:68:34:81:91:55:de:37:e4:c0:
09:37:ad:d3:cd:db:e6:51:f1:a8:13:ef:75:7a:e8:89:9b:92:
e7:5f:22:4f:ad:43:b6:62:fd:c2:49:d1:a4:a4:41:3e:8b:76:
f1:41:aa:a6:84:24:94:f0:f9:c9:e9:37:cf:04:ee:c9:dd:a5:
d1:5c:80:83:a1:6f:e1:5d:44:e6:ca:0a:fd:6d:0a:ad:80:0a:
e5:ce:ed:fc:d9:89:2c:a3:db:9b:66:8c:66:ee:94:d5:97:a1:
8a:0e:39:dd:0c:fa:7a:4c:98:71:14:33:d8:2c:1a:af:70:e6:
6b:02:78:af:8c:b4:2d:26:47:cd:f0:57:b7:12:03:ee:e3:a5:
66:ad:47:42:62:74:ba:00:90:1d:75:bb:69:dc:32:ed:b8:5b:
94:f4:67:30:8a:aa:ba:ca:cb:8f:79:aa:2b:92:c3:07:be:b6:
c0:d0:72:72:02:a9:4d:6d:5c:62:cb:fc:e8:f8:5d:19:e1:bc:
21:41:e1:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:00 2024 by rpki-client on console-ams.rpki-client.org