Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/ni4Hllvwc09IyT3aaGP80RXAhQk.roa
File: ni4Hllvwc09IyT3aaGP80RXAhQk.roa (raw, json)
Hash identifier: mkH88SljAT8sa9qUL6UeXGZsCOdUQRfOeAa6gnl1geM=
Subject key identifier: 9E:2E:07:96:5B:F0:73:4F:48:C9:3D:DA:68:63:FC:D1:15:C0:85:09
Certificate issuer: /CN=0c4579a4028829d37acac65f66c056063251e57e
Certificate serial: CAAFD9
Authority key identifier: 0C:45:79:A4:02:88:29:D3:7A:CA:C6:5F:66:C0:56:06:32:51:E5:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DEV5pAKIKdN6ysZfZsBWBjJR5X4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/ni4Hllvwc09IyT3aaGP80RXAhQk.roa
Signing time: Mon 04 Jul 2022 06:41:25 +0000
ROA not before: Mon 04 Jul 2022 06:41:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50083
IP address blocks: 193.109.184.0/23 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13283289 (0xcaafd9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c4579a4028829d37acac65f66c056063251e57e
Validity
Not Before: Jul 4 06:41:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9e2e07965bf0734f48c93dda6863fcd115c08509
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:6e:00:97:15:b0:16:65:0a:8d:b9:fa:b1:f7:
f9:08:96:81:e9:6f:a7:35:31:58:aa:fe:43:4c:9a:
aa:23:31:1a:41:ba:46:eb:be:4d:2f:a4:76:2f:89:
9c:99:d2:8d:ec:a7:be:ae:52:97:16:f3:19:14:e4:
ce:46:b5:5f:8e:b9:fd:38:97:01:29:17:da:43:8d:
5a:f1:91:76:cc:e4:65:86:65:83:2e:6e:4b:59:ab:
00:a7:2a:cb:81:08:e7:22:18:c4:45:93:04:ed:e7:
ab:b6:25:82:81:7c:37:a3:22:e7:ba:ea:7c:8c:38:
31:86:ac:f2:f1:51:79:b3:2e:56:ab:13:b7:e0:a2:
02:97:78:ca:b1:bb:8b:a3:9c:3b:65:5b:6d:a1:54:
56:ad:a8:68:48:45:a1:ef:3f:a4:6d:35:8a:dd:84:
d1:71:c0:82:ba:6d:d2:44:fd:d1:9a:6d:5f:f3:9a:
bf:45:34:dc:f6:bf:72:ab:88:f2:c4:9b:c0:98:bc:
88:b3:98:6a:9e:1c:f9:3b:16:bb:f2:00:a9:5f:8b:
13:d3:c6:76:fb:a9:57:3c:78:ca:56:89:86:b4:37:
e7:b7:e6:c7:3f:b6:d3:53:dd:9a:ea:dd:dc:08:54:
3e:ee:0f:53:6c:1b:70:74:bf:1f:0f:4c:3f:dc:93:
db:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:2E:07:96:5B:F0:73:4F:48:C9:3D:DA:68:63:FC:D1:15:C0:85:09
X509v3 Authority Key Identifier:
keyid:0C:45:79:A4:02:88:29:D3:7A:CA:C6:5F:66:C0:56:06:32:51:E5:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DEV5pAKIKdN6ysZfZsBWBjJR5X4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/ni4Hllvwc09IyT3aaGP80RXAhQk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/DEV5pAKIKdN6ysZfZsBWBjJR5X4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.109.184.0/23
Signature Algorithm: sha256WithRSAEncryption
6a:af:07:27:06:21:a4:b9:48:53:95:ba:3e:d7:81:fd:98:22:
a5:ec:bb:12:cd:91:39:51:b5:df:65:ec:4d:49:73:58:f0:76:
f5:3f:60:aa:6d:21:c9:f8:22:97:72:2e:06:26:99:a6:46:ca:
f3:80:cc:4b:21:14:1b:ca:60:9f:ee:45:e6:3d:4d:7a:36:ad:
a7:99:35:47:20:cb:2c:d4:52:14:51:8d:de:a5:b9:e1:7f:80:
c2:51:00:9e:d9:ed:87:aa:08:d7:cd:b2:4c:a5:77:ba:dd:db:
4f:bc:cb:1d:c7:40:91:61:e2:e4:1b:76:de:08:ff:d4:42:8f:
13:a8:d4:da:e3:d4:83:16:a1:09:63:ff:b3:a4:27:06:b8:82:
4c:91:61:80:d5:6c:c6:c3:ae:fa:6b:8c:48:3b:77:4b:84:89:
3b:2f:ab:50:61:10:96:26:0d:07:6c:24:47:d5:e9:2e:dc:b5:
88:d7:34:c9:e1:71:82:97:db:62:09:5e:ec:31:91:29:f3:34:
18:25:06:95:c8:f4:43:7a:bb:d1:93:1e:38:76:22:16:39:b5:
5b:ae:4f:f5:70:d0:ed:e0:86:84:b9:5c:7c:ae:cc:39:9b:53:
34:e9:5a:b9:c7:73:a9:1b:70:06:5a:31:04:62:c9:19:77:ff:
71:b6:c3:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:52:01 2025 by rpki-client