Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/fXvm8-Jzx2whO_xLCKyZ6WdbFIE.roa
File: fXvm8-Jzx2whO_xLCKyZ6WdbFIE.roa (raw, json)
Hash identifier: qC6T/aCBi6TvrrjEddKTVimCY/fg7AaNVBw9O+/h34I=
Subject key identifier: 7D:7B:E6:F3:E2:73:C7:6C:21:3B:FC:4B:08:AC:99:E9:67:5B:14:81
Certificate issuer: /CN=f26144c824959711b652d78c18702bf432f2195c
Certificate serial: 018571D79E640E63C10E87F376ACF428C3B2
Authority key identifier: F2:61:44:C8:24:95:97:11:B6:52:D7:8C:18:70:2B:F4:32:F2:19:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8mFEyCSVlxG2UteMGHAr9DLyGVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/fXvm8-Jzx2whO_xLCKyZ6WdbFIE.roa
Signing time: Mon 02 Jan 2023 09:37:14 +0000
ROA not before: Mon 02 Jan 2023 09:37:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25151
IP address blocks: 193.33.220.0/23 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d7:9e:64:0e:63:c1:0e:87:f3:76:ac:f4:28:c3:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f26144c824959711b652d78c18702bf432f2195c
Validity
Not Before: Jan 2 09:37:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7d7be6f3e273c76c213bfc4b08ac99e9675b1481
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f6:4b:4a:51:f9:d9:d4:1d:aa:a3:fc:bf:bb:
52:bd:14:95:78:33:f5:8b:2a:a9:d5:08:94:1b:a5:
94:6a:71:97:b2:db:ac:4f:33:5d:43:53:77:33:41:
1b:fe:59:04:d4:73:e4:f6:5c:33:71:43:92:11:89:
f3:67:ea:8b:99:2b:f3:28:f6:06:b7:30:a7:38:a6:
88:cb:2a:81:12:81:ae:54:bb:6d:9b:10:98:89:f4:
e0:12:c0:ed:cb:bd:4c:af:e9:a0:e5:de:e6:53:35:
18:a6:a9:e5:96:6f:59:e2:8c:4b:6c:1d:1f:bc:67:
32:67:d4:15:e4:66:3f:ee:9e:b3:54:fa:5a:36:62:
f5:c7:18:25:57:0b:fb:bd:bb:2a:30:1c:29:1e:c9:
f6:34:31:00:cb:8f:0c:b8:b0:ea:54:a0:27:03:3c:
da:55:47:7b:05:be:69:07:a6:b6:5c:45:09:f9:74:
a0:bf:a6:23:6a:cb:14:86:db:c9:0f:ae:38:33:16:
30:cd:1f:9d:b9:c4:98:5b:9d:79:1c:eb:77:6d:a5:
2b:ab:00:f2:a9:ec:d4:b8:cb:89:18:a7:81:9d:ea:
ac:d3:e8:90:91:d0:46:d5:f5:ba:9d:f6:77:3d:f9:
0a:2f:9e:dd:c8:54:ac:f2:70:9e:a8:c6:5b:f5:e5:
74:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:7B:E6:F3:E2:73:C7:6C:21:3B:FC:4B:08:AC:99:E9:67:5B:14:81
X509v3 Authority Key Identifier:
keyid:F2:61:44:C8:24:95:97:11:B6:52:D7:8C:18:70:2B:F4:32:F2:19:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mFEyCSVlxG2UteMGHAr9DLyGVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/fXvm8-Jzx2whO_xLCKyZ6WdbFIE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.33.220.0/23
Signature Algorithm: sha256WithRSAEncryption
b2:8f:b3:14:70:04:d1:9f:14:94:59:c5:e0:12:6e:de:7a:42:
fe:0b:9c:26:e5:ae:3b:68:b2:fe:b0:2b:9e:d4:95:e0:cf:fa:
64:9e:ad:50:c4:4d:8d:17:c5:4f:f4:89:ba:30:14:8b:5b:ee:
8c:ea:50:ea:63:39:e1:97:77:bf:84:61:cf:c9:bf:08:df:18:
e2:1f:df:0d:80:dc:e3:be:77:1b:43:ff:b5:b7:00:22:1d:45:
10:06:4b:01:e0:95:7c:c9:d5:2b:35:91:e6:e0:23:05:9f:ea:
fc:8f:a1:88:e5:13:b9:4a:32:34:e8:08:a4:47:ad:60:5e:50:
41:76:8a:ed:ef:78:e9:53:85:3c:9c:51:84:76:35:19:6a:8a:
a7:05:e8:07:99:20:a2:26:a9:ef:64:72:26:7e:3d:4d:7a:d1:
43:5b:98:34:3c:9e:11:9d:b7:90:ca:22:d6:db:20:fa:33:10:
e8:e6:dc:17:f5:79:53:b5:62:4d:93:c6:f3:52:a8:03:bd:24:
7e:93:a0:a1:23:27:e0:98:7c:1a:c1:45:12:5e:14:e2:3f:20:
4a:9d:32:35:79:f1:31:6f:cc:c4:77:cd:56:b0:b4:ea:f1:71:
ca:38:2c:b4:e4:c5:4d:87:83:4b:b8:1a:af:28:d3:bf:f2:b8:
a7:5e:75:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:48:06 2025 by rpki-client