Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/uMn1aoYQiWHkUVLVvL2jPbIajaQ.roa
File: uMn1aoYQiWHkUVLVvL2jPbIajaQ.roa (raw, json)
Hash identifier: mEzz5SW6rEqaxFbMnyMrIayN5AChpDAnb7NM+dHqzW8=
Subject key identifier: B8:C9:F5:6A:86:10:89:61:E4:51:52:D5:BC:BD:A3:3D:B2:1A:8D:A4
Certificate issuer: /CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Certificate serial: 018CC500C5DA290F14B01FD1EB67C19105E9
Authority key identifier: 08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/uMn1aoYQiWHkUVLVvL2jPbIajaQ.roa
Signing time: Mon 01 Jan 2024 12:30:11 +0000
ROA not before: Mon 01 Jan 2024 12:30:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50167
IP address blocks: 62.233.59.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:c5:da:29:0f:14:b0:1f:d1:eb:67:c1:91:05:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Validity
Not Before: Jan 1 12:30:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b8c9f56a86108961e45152d5bcbda33db21a8da4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:98:26:ae:b4:40:7d:fd:83:ad:45:c2:7b:77:
92:a2:c8:4a:e3:84:9b:43:e7:50:b0:bb:78:e2:53:
c8:13:b0:61:b3:62:a4:74:a0:6d:ca:e2:b2:40:ad:
d3:b1:ca:b3:51:d1:cd:f3:05:b2:05:52:50:0b:5d:
a8:2c:40:5d:22:98:65:f3:e7:65:64:d5:93:5d:ca:
2e:2f:79:f6:76:52:85:9f:9d:aa:2e:cb:9a:c6:7f:
37:01:40:f7:7b:a0:63:39:38:b3:1f:f2:6f:31:08:
8a:8b:77:66:17:60:67:b9:4b:f1:c7:71:68:1b:73:
6b:d0:ea:94:43:39:ea:6c:3e:b4:a9:f5:b4:5e:f4:
7b:81:03:e8:21:e9:ef:88:cf:d0:05:87:76:c4:cc:
09:ee:89:1f:b1:6f:f2:cf:6e:59:1e:61:2a:20:fa:
d6:98:68:be:21:42:67:c6:e4:0f:58:6a:bd:a5:b5:
f5:04:06:9f:ad:ff:d2:43:21:ff:12:dc:ae:5b:17:
c0:3e:d9:31:ff:4b:d6:fb:bd:06:c9:bc:98:1d:34:
a0:97:97:ad:4e:a2:61:9b:ed:d5:7e:8a:2d:8e:8b:
f1:20:3b:cf:81:63:24:e6:02:bd:09:36:22:68:b6:
51:fc:b3:50:be:cf:04:2a:04:da:64:64:04:49:13:
d8:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:C9:F5:6A:86:10:89:61:E4:51:52:D5:BC:BD:A3:3D:B2:1A:8D:A4
X509v3 Authority Key Identifier:
keyid:08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/uMn1aoYQiWHkUVLVvL2jPbIajaQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.233.59.0/24
Signature Algorithm: sha256WithRSAEncryption
42:a5:89:aa:ad:b5:86:af:a7:c3:c0:0a:f7:cf:dd:c9:65:a3:
69:28:e6:d7:a8:7e:78:33:6f:da:e2:0e:48:38:0c:5c:ee:ec:
ae:2c:9a:5f:68:20:15:0c:be:8c:4c:a1:25:29:0b:b5:e8:4f:
de:6d:c6:fa:af:c0:0f:60:94:5d:a3:ef:09:46:cc:66:a6:05:
89:41:1e:83:bd:e4:1a:4e:0b:26:b3:e7:d5:33:fe:d5:ff:c0:
44:af:49:68:a7:a2:73:66:1e:34:bf:cb:e9:4e:17:1e:c9:83:
b5:21:27:56:a7:5c:86:df:6a:ff:f8:50:fe:59:55:38:17:35:
50:43:d9:fd:17:a9:58:ec:11:0f:31:d6:04:ef:46:5e:1e:4d:
3f:1a:6b:8f:d8:df:94:5c:ca:a8:3e:84:f6:04:71:f5:69:da:
c2:fe:65:7a:11:9f:2a:be:d6:bd:ed:8e:f6:c8:c8:10:33:ab:
78:b9:b3:99:0c:e2:99:0c:d3:40:f5:b2:6c:f5:42:a5:0f:8b:
95:11:0a:ca:7f:1d:fc:ce:19:5e:9e:9b:aa:49:e7:d1:aa:b2:
d0:e9:c8:11:8b:8c:4f:b1:59:28:7a:1e:e3:a9:5b:f2:9e:f9:
93:ad:bf:9e:2f:62:24:77:ef:28:7c:6e:fc:61:0e:a4:44:3d:
6d:94:0e:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 1 13:29:04 2024 by rpki-client on console-fra.rpki-client.org