Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/LfVlnrJ9NlnpLFfFc7pfki2FEWM.roa
File: LfVlnrJ9NlnpLFfFc7pfki2FEWM.roa (raw, json)
Hash identifier: mziayZl1glcdC1wjFIxC3KKjcqVy8HTFBip1FM171XM=
Subject key identifier: 2D:F5:65:9E:B2:7D:36:59:E9:2C:57:C5:73:BA:5F:92:2D:85:11:63
Certificate issuer: /CN=f75d8b52815f3f2613e948992ec9fe660f6949b4
Certificate serial: 018E9F1DA6BE28DB1F32A9426C2C71BD13FF
Authority key identifier: F7:5D:8B:52:81:5F:3F:26:13:E9:48:99:2E:C9:FE:66:0F:69:49:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/912LUoFfPyYT6UiZLsn-Zg9pSbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/LfVlnrJ9NlnpLFfFc7pfki2FEWM.roa
Signing time: Tue 02 Apr 2024 14:01:44 +0000
ROA not before: Tue 02 Apr 2024 14:01:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58061
IP address blocks: 193.42.119.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:9f:1d:a6:be:28:db:1f:32:a9:42:6c:2c:71:bd:13:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f75d8b52815f3f2613e948992ec9fe660f6949b4
Validity
Not Before: Apr 2 14:01:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2df5659eb27d3659e92c57c573ba5f922d851163
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:66:7b:8a:12:3e:36:65:82:86:ac:b3:52:02:
15:65:32:3f:c4:c6:a9:fc:a3:e8:28:01:8c:8c:97:
12:30:26:69:13:4f:0e:20:52:db:96:79:75:f2:10:
12:af:80:55:ac:90:a1:38:4a:ce:5f:e6:ae:59:87:
b3:07:9f:51:ae:fd:dc:fb:2e:39:fc:b0:d9:00:e3:
5d:2c:a5:03:57:35:99:3d:ff:6a:cc:e6:c5:f7:da:
37:20:7a:06:b8:cb:70:3a:2e:84:f2:35:40:3b:35:
76:13:f1:42:3f:76:6f:e7:c9:fe:60:a3:30:a2:30:
9b:8d:58:eb:ee:03:2c:b7:ab:13:76:98:e4:39:08:
02:dd:06:45:91:17:09:38:82:c9:e3:2c:2b:82:10:
5c:49:42:b1:44:0a:79:1a:8a:e6:5c:d3:e9:6c:6c:
1e:42:a9:74:21:8b:00:6a:ac:97:72:b2:c2:fe:ca:
e2:97:65:9d:9f:b4:19:0e:4e:0b:24:a4:61:4d:a3:
25:2e:51:63:ef:f8:b7:0a:0a:7a:c8:17:67:e4:ed:
f9:2f:a7:08:a2:d6:a8:9c:b1:1a:35:55:4d:69:23:
c5:81:9c:a1:d0:2b:2d:46:85:7d:83:62:58:7d:5c:
5b:fa:6c:78:a7:37:58:de:14:61:64:aa:3a:4c:60:
a2:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:F5:65:9E:B2:7D:36:59:E9:2C:57:C5:73:BA:5F:92:2D:85:11:63
X509v3 Authority Key Identifier:
keyid:F7:5D:8B:52:81:5F:3F:26:13:E9:48:99:2E:C9:FE:66:0F:69:49:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/912LUoFfPyYT6UiZLsn-Zg9pSbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/LfVlnrJ9NlnpLFfFc7pfki2FEWM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/912LUoFfPyYT6UiZLsn-Zg9pSbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.42.119.0/24
Signature Algorithm: sha256WithRSAEncryption
84:a5:88:ad:a4:8b:57:b9:d4:34:3d:0b:55:31:31:31:9c:82:
9a:dc:1c:d6:6a:44:c3:68:51:44:22:00:aa:e9:ae:4d:fb:42:
db:b5:69:66:64:5c:e4:e0:6f:2c:5e:94:9c:be:ce:4a:75:45:
18:69:04:c2:46:d1:a4:88:56:28:20:5d:92:b2:95:b7:4d:db:
63:08:b7:9b:07:18:2f:f8:84:d5:1d:41:30:8a:58:a7:30:15:
dc:f7:9e:28:b6:c3:68:b3:2f:ed:fb:71:b1:06:10:85:a4:87:
86:b9:e6:fb:c2:c5:45:6b:8f:06:8d:3f:72:a4:c1:46:ce:ad:
12:31:35:9c:c2:1f:3e:53:a9:64:33:ac:76:ea:99:79:d1:ad:
59:e4:01:54:06:b4:da:ee:9f:d2:24:c1:2f:ed:88:c7:c0:8c:
70:e1:f6:53:8c:14:05:8a:c2:09:08:8f:e5:30:83:8e:3f:ff:
5a:e7:f5:e7:d4:97:3f:86:a3:da:f8:1f:75:5d:93:9f:58:ec:
04:70:d4:12:5f:44:a5:42:25:84:09:3c:9f:5b:61:5d:31:a9:
50:44:fe:a1:bb:67:3e:12:89:67:9e:fb:81:86:89:0a:dd:75:
9e:d3:2c:6f:d0:6e:ea:8c:91:6e:32:36:39:ed:5e:03:7b:51:
37:a4:0f:c3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY6fHaa+KNsfMqlCbCxxvRP/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3NWQ4YjUyODE1ZjNmMjYxM2U5NDg5OTJlYzlmZTY2MGY2
OTQ5YjQwHhcNMjQwNDAyMTQwMTQ0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZGY1NjU5ZWIyN2QzNjU5ZTkyYzU3YzU3M2JhNWY5MjJkODUxMTYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGZ7ihI+NmWChqyzUgIVZTI/xMap
/KPoKAGMjJcSMCZpE08OIFLblnl18hASr4BVrJChOErOX+auWYezB59Rrv3c+y45
/LDZAONdLKUDVzWZPf9qzObF99o3IHoGuMtwOi6E8jVAOzV2E/FCP3Zv58n+YKMw
ojCbjVjr7gMst6sTdpjkOQgC3QZFkRcJOILJ4ywrghBcSUKxRAp5GormXNPpbGwe
Qql0IYsAaqyXcrLC/sril2Wdn7QZDk4LJKRhTaMlLlFj7/i3Cgp6yBdn5O35L6cI
otaonLEaNVVNaSPFgZyh0CstRoV9g2JYfVxb+mx4pzdY3hRhZKo6TGCinwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFC31ZZ6yfTZZ6SxXxXO6X5IthRFjMB8GA1UdIwQY
MBaAFPddi1KBXz8mE+lImS7J/mYPaUm0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTEyTFVvRmZQeVlUNlVpWkxzbi1aZzlwU2JRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC85NTE0ZWQtMjc2ZS00YWJhLTg5N2Ut
YTQ0MTBlMTBiNmY1LzEvTGZWbG5ySjlObG5wTEZmRmM3cGZraTJGRVdNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC85NTE0ZWQtMjc2ZS00YWJhLTg5N2UtYTQ0MTBlMTBiNmY1
LzEvOTEyTFVvRmZQeVlUNlVpWkxzbi1aZzlwU2JRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSp3MA0G
CSqGSIb3DQEBCwUAA4IBAQCEpYitpItXudQ0PQtVMTExnIKa3BzWakTDaFFEIgCq
6a5N+0LbtWlmZFzk4G8sXpScvs5KdUUYaQTCRtGkiFYoIF2SspW3TdtjCLebBxgv
+ITVHUEwilinMBXc954otsNosy/t+3GxBhCFpIeGueb7wsVFa48GjT9ypMFGzq0S
MTWcwh8+U6lkM6x26pl50a1Z5AFUBrTa7p/SJMEv7YjHwIxw4fZTjBQFisIJCI/l
MIOOP/9a5/Xn1Jc/hqPa+B91XZOfWOwEcNQSX0SlQiWECTyfW2FdMalQRP6hu2c+
EolnnvuBhokK3XWe0yxv0G7qjJFuMjY57V4De1E3pA/D
-----END CERTIFICATE-----
Generated at Wed Aug 21 13:10:08 2024 by rpki-client on console-ams.rpki-client.org