Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/UEnL5kqWbomh43yu-0nDFbdnU8w.roa
File: UEnL5kqWbomh43yu-0nDFbdnU8w.roa (raw, json)
Hash identifier: IxQlVs1CE4AnAeQxajb/xgJK9/At1cX5iwwwLlzjxVE=
Subject key identifier: 50:49:CB:E6:4A:96:6E:89:A1:E3:7C:AE:FB:49:C3:15:B7:67:53:CC
Certificate issuer: /CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Certificate serial: 01857139AF302D986196F4F7083FFEBAAC06
Authority key identifier: 2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/UEnL5kqWbomh43yu-0nDFbdnU8w.roa
Signing time: Mon 02 Jan 2023 06:44:43 +0000
ROA not before: Mon 02 Jan 2023 06:44:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203730
IP address blocks: 93.88.24.0/24 maxlen: 24
93.88.24.0/23 maxlen: 23
93.88.25.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:39:af:30:2d:98:61:96:f4:f7:08:3f:fe:ba:ac:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Validity
Not Before: Jan 2 06:44:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5049cbe64a966e89a1e37caefb49c315b76753cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:1a:42:eb:c6:20:77:63:02:72:c0:09:d0:27:
22:5b:d4:2c:f2:d0:8f:5a:52:ed:c1:57:06:e4:12:
f0:86:bf:ad:7c:22:73:97:82:29:39:c7:a2:2a:ab:
e6:7d:13:04:3b:0c:74:05:3d:b6:17:c0:ba:57:6c:
19:49:c6:95:2c:b8:20:02:ca:11:a1:43:c0:46:59:
4a:82:f3:22:d7:cc:45:d0:9e:07:8b:c6:f4:ac:14:
cd:0c:4a:90:f1:a4:23:9d:4d:0b:b2:41:90:1c:41:
8e:6d:fe:ec:bf:8f:8a:17:ba:01:d6:ed:03:97:39:
d3:84:58:cf:99:76:e5:6b:c9:9e:f6:ec:70:4c:2d:
b9:45:5b:22:28:67:d0:bb:79:e1:aa:16:5c:fb:5e:
d1:2e:d4:78:06:4d:67:d2:1d:0d:0a:ae:e4:14:60:
7e:b2:a2:e1:b1:37:29:0d:22:41:3f:28:7d:7f:3a:
af:12:d1:6f:c2:e4:fd:47:a6:1e:f1:82:0b:77:4f:
e3:b3:16:e4:ff:60:c0:18:87:85:17:aa:42:bc:8a:
51:6e:91:cf:16:84:07:7f:ae:c7:a8:d1:e7:92:54:
1f:a6:db:cf:a9:12:43:37:09:d3:1b:ee:22:5c:82:
19:e4:39:bd:80:84:2c:be:fa:a6:31:3b:b8:f7:d3:
ed:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:49:CB:E6:4A:96:6E:89:A1:E3:7C:AE:FB:49:C3:15:B7:67:53:CC
X509v3 Authority Key Identifier:
keyid:2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/UEnL5kqWbomh43yu-0nDFbdnU8w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.88.24.0/23
Signature Algorithm: sha256WithRSAEncryption
53:0b:3b:55:08:34:9d:e8:3f:31:7d:f1:99:f9:f8:77:6a:88:
8f:21:fe:e5:d9:97:31:b0:75:b9:ad:48:4b:0d:30:7c:6b:42:
b0:bf:3c:4f:79:71:e6:0b:e4:0e:4d:04:09:b6:a6:62:7d:72:
5f:df:81:37:85:d5:36:e7:93:aa:aa:61:0a:06:52:45:8c:56:
8b:9f:70:46:8c:f4:46:13:16:dc:20:0e:50:93:95:0f:5e:a5:
86:89:a8:fa:e3:e2:05:83:f5:51:83:29:02:fb:7b:68:c7:cf:
3c:b9:2a:59:b5:fe:b3:6c:82:14:b0:16:83:63:c9:48:75:b3:
c5:da:81:d6:70:96:39:1b:46:f7:57:4d:0b:e9:38:6d:9d:83:
f7:af:3a:05:20:f6:82:48:40:c1:99:8e:71:ff:73:3e:b0:93:
2c:9f:b4:29:9d:35:78:90:03:e1:2b:1f:3e:9b:ab:5a:56:e4:
9f:36:a7:20:e4:b5:41:9a:84:ad:65:d4:d4:d6:a0:ea:69:a3:
50:79:e8:51:47:3b:7a:7e:f1:45:72:8a:9e:35:75:f3:4c:17:
c9:43:f4:99:db:6f:fe:23:3c:80:fc:38:99:e2:13:82:49:ab:
e8:f2:a1:a6:d1:f2:28:9e:df:d4:a4:1f:d4:dc:ca:30:9d:34:
8f:c9:db:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:34 2024 by rpki-client on console-fra.rpki-client.org