Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/ecec37-30b8-4e19-bbb2-f67e175d4ba7/1/I46n2TVw5P6-7gCpw4cgrPLGdgA.roa
File: I46n2TVw5P6-7gCpw4cgrPLGdgA.roa (raw, json)
Hash identifier: qy6fLQTXRGsQbqcWAXpFL/gJJHVIXSvPXhiti5mDxTE=
Subject key identifier: 23:8E:A7:D9:35:70:E4:FE:BE:EE:00:A9:C3:87:20:AC:F2:C6:76:00
Certificate issuer: /CN=61544481d3be7fca5e80a564ad93c1b8a2f636f8
Certificate serial: 018D8430EDFDBB3C20D8A4656E5879509B51
Authority key identifier: 61:54:44:81:D3:BE:7F:CA:5E:80:A5:64:AD:93:C1:B8:A2:F6:36:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YVREgdO-f8pegKVkrZPBuKL2Nvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/ecec37-30b8-4e19-bbb2-f67e175d4ba7/1/I46n2TVw5P6-7gCpw4cgrPLGdgA.roa
Signing time: Wed 07 Feb 2024 15:30:15 +0000
ROA not before: Wed 07 Feb 2024 15:30:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43201
IP address blocks: 193.3.170.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:84:30:ed:fd:bb:3c:20:d8:a4:65:6e:58:79:50:9b:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61544481d3be7fca5e80a564ad93c1b8a2f636f8
Validity
Not Before: Feb 7 15:30:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=238ea7d93570e4febeee00a9c38720acf2c67600
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a8:e8:42:c2:b6:5f:6a:3e:2d:93:ee:8d:3c:
61:f3:a3:92:89:15:4c:a1:a3:56:e4:b7:bd:fa:1d:
7b:df:a2:ba:b5:e6:93:f0:8a:e7:64:0f:b4:7c:03:
d1:c0:88:02:0e:c9:56:26:33:1a:9d:c1:13:78:e3:
67:d7:5d:ba:c1:d9:7a:8f:a7:ed:48:4e:a4:0c:cb:
56:d1:c9:55:0e:8d:60:a4:2d:35:10:39:cd:70:8f:
37:06:7a:23:51:dc:ab:f7:0f:10:1f:a2:d3:7a:df:
16:d1:c6:47:8a:9c:15:10:a6:3e:88:08:1a:95:a5:
14:c8:de:50:ff:bf:3e:d2:4d:4d:d3:b0:e9:7d:5a:
1f:bc:16:d2:f4:ad:59:a0:06:ae:d2:b3:70:d9:02:
b4:f2:f9:ca:de:fc:71:ce:41:d5:90:8d:bd:2c:ed:
a1:56:d6:86:fb:06:6d:60:63:eb:d9:83:fa:6f:43:
64:49:e1:dd:8a:8a:8b:a4:0c:cd:ba:c9:54:10:39:
74:4d:79:89:89:c4:f8:cd:ef:c6:19:c8:3c:3c:d6:
c1:ce:d7:4e:72:e1:35:76:4e:43:2d:f4:63:f1:53:
81:0f:b3:a0:cf:8d:06:55:52:f4:49:32:47:7c:ce:
cb:8b:10:d2:99:d0:28:c0:b2:e6:6f:c2:74:2e:e0:
1b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:8E:A7:D9:35:70:E4:FE:BE:EE:00:A9:C3:87:20:AC:F2:C6:76:00
X509v3 Authority Key Identifier:
keyid:61:54:44:81:D3:BE:7F:CA:5E:80:A5:64:AD:93:C1:B8:A2:F6:36:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YVREgdO-f8pegKVkrZPBuKL2Nvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/ecec37-30b8-4e19-bbb2-f67e175d4ba7/1/I46n2TVw5P6-7gCpw4cgrPLGdgA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/ecec37-30b8-4e19-bbb2-f67e175d4ba7/1/YVREgdO-f8pegKVkrZPBuKL2Nvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.3.170.0/24
Signature Algorithm: sha256WithRSAEncryption
60:4c:3d:6f:66:b2:45:6f:ea:34:2c:38:de:5b:2d:b9:5c:17:
84:75:93:e1:43:6e:c3:d0:dd:22:71:e0:53:d9:de:45:be:f7:
9b:a5:bb:9b:10:85:f8:80:4b:a1:2c:61:eb:79:60:02:9d:79:
02:fd:fe:ab:55:87:1e:80:f3:bd:c1:13:b6:c5:7f:e7:3a:6c:
07:03:9b:b7:d2:0a:4d:53:4c:5c:95:0c:fb:e0:7c:b0:ab:92:
be:95:32:c2:09:7c:1f:0f:9d:4b:52:1f:4d:07:72:e7:2c:01:
35:b2:eb:81:cd:18:a6:f6:a0:d8:72:a9:33:20:f4:2b:77:30:
5c:93:69:a4:ea:9d:b8:a6:7e:02:d5:64:52:80:bb:16:93:62:
46:3f:bb:3d:66:c0:7c:a9:86:ed:5c:ff:3d:25:ad:ba:c9:2b:
b9:e7:26:7f:46:66:ef:06:11:31:df:3a:a6:47:85:50:26:42:
e5:f4:7c:ee:51:88:ce:d4:0a:7a:d4:23:76:58:d0:1f:b8:74:
3f:df:6e:1c:ae:ed:a5:9a:17:20:d0:7a:60:46:45:9e:45:70:
e5:34:29:ba:84:03:2c:27:81:b5:a6:13:0a:db:51:c9:fb:48:
21:0a:e9:22:35:f7:1d:8e:63:f2:e6:ff:5c:6c:76:8c:f6:64:
fe:d1:a6:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 11 20:50:31 2024 by rpki-client on console-ams.rpki-client.org