Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/YDhtmPWaEK5oJSfvJvlCl0xGTZo.roa
File: YDhtmPWaEK5oJSfvJvlCl0xGTZo.roa (raw, json)
Hash identifier: Ae/vkOmRRh7QyI2yw6/RIF8/PuMu44WPTC+r+wg7+cU=
Subject key identifier: 60:38:6D:98:F5:9A:10:AE:68:25:27:EF:26:F9:42:97:4C:46:4D:9A
Certificate issuer: /CN=1da97cae7de6b29e56f0259af53c95926034a502
Certificate serial: 07B4E9A2
Authority key identifier: 1D:A9:7C:AE:7D:E6:B2:9E:56:F0:25:9A:F5:3C:95:92:60:34:A5:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hal8rn3msp5W8CWa9TyVkmA0pQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/YDhtmPWaEK5oJSfvJvlCl0xGTZo.roa
Signing time: Sat 01 Jan 2022 04:01:46 +0000
ROA not before: Sat 01 Jan 2022 04:01:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59750
IP address blocks: 194.1.247.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 129296802 (0x7b4e9a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1da97cae7de6b29e56f0259af53c95926034a502
Validity
Not Before: Jan 1 04:01:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=60386d98f59a10ae682527ef26f942974c464d9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7d:b8:f7:d3:af:5f:fc:1c:42:77:37:c5:3d:
b0:c4:a6:e1:45:e7:ff:b2:e4:de:fb:15:2a:1b:a4:
39:f8:60:c9:32:9e:bc:2b:69:a6:9a:9d:90:3f:65:
e9:f1:0a:bb:fb:80:8d:11:82:39:b8:35:f9:e3:29:
2c:81:02:43:99:3b:49:b6:ec:52:0f:9d:3b:12:d7:
b1:6d:7d:e2:19:34:2c:9b:e6:fb:01:01:c9:de:1e:
4d:a4:b4:68:c0:5b:44:70:f2:7a:50:a6:b7:e8:9a:
f1:4d:69:42:a2:31:32:d1:30:45:64:92:5a:2b:50:
8b:b4:28:f3:02:90:ab:3f:42:81:74:5d:2f:fa:2b:
43:84:ba:e7:e5:62:c5:52:48:e5:61:4f:a9:19:0f:
15:e3:23:fe:c5:0c:df:63:28:93:aa:8c:1c:2a:fb:
3c:47:d7:fd:03:87:72:90:a9:d1:c0:92:51:6e:2e:
1c:62:1d:69:82:8e:10:eb:49:42:8f:82:8c:2e:bd:
71:18:f9:c3:ff:29:10:b9:2b:4f:b0:f5:7b:ac:c7:
a4:c3:b8:92:4d:01:6d:cb:d3:70:89:5b:52:94:ea:
08:9b:95:c8:f1:f5:54:db:3e:7d:5e:e5:12:31:6a:
f5:6b:94:62:28:6d:aa:6c:54:b5:e2:ac:75:ca:ce:
c2:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:38:6D:98:F5:9A:10:AE:68:25:27:EF:26:F9:42:97:4C:46:4D:9A
X509v3 Authority Key Identifier:
keyid:1D:A9:7C:AE:7D:E6:B2:9E:56:F0:25:9A:F5:3C:95:92:60:34:A5:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hal8rn3msp5W8CWa9TyVkmA0pQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/YDhtmPWaEK5oJSfvJvlCl0xGTZo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.1.247.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:c3:44:07:f1:b7:cf:a9:cc:1b:60:d4:b5:a1:2d:91:a3:6b:
90:3e:a6:6d:22:51:b8:fc:df:6f:2f:b7:15:5a:a1:b3:b3:c9:
02:e8:61:ee:74:56:3b:03:2a:a0:56:21:88:fc:86:63:2c:58:
50:d9:6d:d8:93:88:97:8a:d7:b5:5f:c1:f3:b2:8b:9f:b4:98:
51:37:82:bf:a2:7b:d7:30:10:31:38:a6:d9:f8:54:98:c3:7c:
6c:8b:22:29:96:2f:2b:bd:e7:f1:a4:ae:cb:7d:e9:18:4b:da:
d5:7b:15:d8:58:7e:d6:f3:1c:8d:64:96:cf:6a:c4:f4:14:57:
45:33:9d:63:ee:01:84:b1:04:7e:03:05:e8:6c:4b:8e:15:b6:
53:bb:1c:1e:4e:5b:ba:28:3f:9c:46:87:ab:d4:91:24:66:73:
ad:2e:f4:fb:d0:61:52:7f:1d:0c:ee:b4:cf:2a:0f:3c:c4:0e:
4b:6b:a0:07:85:ea:e5:1d:bf:e2:a9:1c:0f:e7:c5:4c:98:10:
78:5b:87:bb:ce:55:b6:04:ec:5e:21:9f:86:09:16:50:2a:6c:
d5:80:39:d4:9e:6e:2c:a3:4e:0a:7f:e9:7e:a9:3d:54:a5:5c:
3b:15:f1:5a:31:4b:cc:8b:42:3f:7b:92:c8:81:21:b6:52:58:
e3:e9:cd:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:35 2024 by rpki-client on console-fra.rpki-client.org