Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/1joPLi4f6WvnxZRY7oE6wHxeseg.roa
File: 1joPLi4f6WvnxZRY7oE6wHxeseg.roa (raw, json)
Hash identifier: B1bTPl2iSmXOE5SIlhCxSuOH4pcquXaRFzLZqB05THU=
Subject key identifier: D6:3A:0F:2E:2E:1F:E9:6B:E7:C5:94:58:EE:81:3A:C0:7C:5E:B1:E8
Certificate issuer: /CN=f75d8b52815f3f2613e948992ec9fe660f6949b4
Certificate serial: 0183ADD5545E847ADD2097289FBE127E4369
Authority key identifier: F7:5D:8B:52:81:5F:3F:26:13:E9:48:99:2E:C9:FE:66:0F:69:49:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/912LUoFfPyYT6UiZLsn-Zg9pSbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/1joPLi4f6WvnxZRY7oE6wHxeseg.roa
Signing time: Thu 06 Oct 2022 15:06:22 +0000
ROA not before: Thu 06 Oct 2022 15:06:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 193.168.130.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:ad:d5:54:5e:84:7a:dd:20:97:28:9f:be:12:7e:43:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f75d8b52815f3f2613e948992ec9fe660f6949b4
Validity
Not Before: Oct 6 15:06:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d63a0f2e2e1fe96be7c59458ee813ac07c5eb1e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:a5:07:f1:32:35:aa:35:12:2e:29:af:6b:d2:
6b:51:a4:14:90:9c:94:19:3d:b5:6e:7d:e2:f3:c5:
37:c1:69:6e:44:69:43:1e:8d:d1:9e:65:90:68:8c:
65:1a:d2:af:31:d2:a6:90:a6:6e:53:a7:eb:88:b9:
71:e3:36:98:c5:bf:b9:b0:af:b9:9c:fd:0a:b7:21:
1d:4f:66:3e:50:4e:6a:4b:7c:24:df:d0:24:51:b9:
a1:c3:6c:be:00:19:d5:2f:a7:c0:d0:7a:d9:b4:c8:
eb:23:92:0e:48:a5:01:d1:92:12:fd:5f:f1:73:1a:
94:49:bd:c4:77:af:26:6b:c2:6c:12:31:ea:ca:26:
d8:a9:3e:31:dd:e2:dc:b2:b6:02:72:b6:ca:cc:9c:
64:2c:48:fe:b5:18:f4:0c:d5:0b:03:4c:da:0f:0a:
0b:1b:bc:98:14:89:52:ae:26:37:74:85:7c:f0:d8:
49:61:92:89:05:5f:ac:ba:aa:98:52:dc:98:f8:cf:
82:a3:2f:a8:30:58:78:8a:4b:d3:cd:e0:6b:24:db:
7a:04:57:e0:b9:eb:7f:cf:6f:4c:37:cf:ad:af:2a:
65:c0:5d:f0:0d:f2:1b:66:39:ef:e7:a7:06:0c:6e:
6f:d4:8f:db:e1:54:3b:7f:8f:8a:d1:90:58:b5:b3:
54:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:3A:0F:2E:2E:1F:E9:6B:E7:C5:94:58:EE:81:3A:C0:7C:5E:B1:E8
X509v3 Authority Key Identifier:
keyid:F7:5D:8B:52:81:5F:3F:26:13:E9:48:99:2E:C9:FE:66:0F:69:49:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/912LUoFfPyYT6UiZLsn-Zg9pSbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/1joPLi4f6WvnxZRY7oE6wHxeseg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/912LUoFfPyYT6UiZLsn-Zg9pSbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.168.130.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:53:35:ba:f9:05:d0:da:53:d1:0e:67:96:83:ba:8a:ca:03:
43:28:df:ba:db:c9:fa:f6:2e:1d:72:c6:aa:66:1f:3e:29:87:
62:a2:5e:fc:ad:9c:e6:1b:fe:7d:24:2d:ea:a2:ec:3f:09:d1:
c7:26:66:35:5d:2d:dc:e9:8f:97:f0:7e:83:da:91:88:43:ca:
a6:5c:0a:84:48:40:f8:d9:16:37:66:ba:f4:e9:76:c2:04:7d:
fd:78:dc:15:cb:a6:d0:6f:bb:3a:94:18:f3:79:f9:8a:67:89:
92:6a:5f:5e:d5:a7:76:49:19:b3:6b:51:1c:21:42:b6:5d:d8:
10:84:53:af:88:e2:b7:83:67:95:06:6d:af:39:09:a0:ea:bc:
f1:32:b2:84:29:e2:6d:cf:71:56:4e:b8:2e:9d:67:69:e5:bb:
d4:38:ee:98:b4:13:22:0d:4c:37:83:1a:54:f7:4d:f1:76:f1:
a6:e6:4d:9a:c1:45:0d:70:db:d9:c3:67:18:c1:d8:76:2c:11:
a7:7f:3c:b4:70:7e:2c:9c:04:f2:85:77:b6:8e:32:a2:0a:f9:
95:33:68:d8:67:c8:f4:cc:9a:73:a7:1d:21:07:e8:f0:d0:c9:
f9:46:35:e3:63:63:b7:88:2c:22:ac:6f:46:e1:37:b5:49:2d:
f8:da:15:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:05 2023 by rpki-client on console-ams.rpki-client.org