Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/8eabcd-e6e9-4f43-ba6c-da2312b65a50/1/ieqXtNCuMi7i4oA23CYmUNIGUhU.roa
File: ieqXtNCuMi7i4oA23CYmUNIGUhU.roa (raw, json)
Hash identifier: CrrWNDHGH8lIL3l1Q6AdixcO8IL2vTjiYq+PUrVCJ6g=
Subject key identifier: 89:EA:97:B4:D0:AE:32:2E:E2:E2:80:36:DC:26:26:50:D2:06:52:15
Certificate issuer: /CN=6c5e330cfa26fd44d4294fcdbddfbd89510c6a48
Certificate serial: 018612A63C76F96B5D06050891895BADE7EC
Authority key identifier: 6C:5E:33:0C:FA:26:FD:44:D4:29:4F:CD:BD:DF:BD:89:51:0C:6A:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bF4zDPom_UTUKU_Nvd-9iVEMakg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/8eabcd-e6e9-4f43-ba6c-da2312b65a50/1/ieqXtNCuMi7i4oA23CYmUNIGUhU.roa
Signing time: Thu 02 Feb 2023 15:02:09 +0000
ROA not before: Thu 02 Feb 2023 15:02:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6718
IP address blocks: 193.93.142.0/23 maxlen: 23
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:12:a6:3c:76:f9:6b:5d:06:05:08:91:89:5b:ad:e7:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c5e330cfa26fd44d4294fcdbddfbd89510c6a48
Validity
Not Before: Feb 2 15:02:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=89ea97b4d0ae322ee2e28036dc262650d2065215
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:61:50:11:4d:b3:4d:12:76:49:fa:75:67:95:
15:28:30:74:d8:fa:34:6d:b7:c9:49:77:3e:f1:7e:
60:8a:df:61:71:fb:63:35:3e:c0:63:35:b8:c6:25:
6b:ef:cf:62:16:ea:13:e7:e3:61:8d:71:98:5d:ae:
9c:8d:2c:de:f5:ca:0c:9b:e5:ab:cb:63:60:56:d6:
a8:f2:5c:54:a1:ef:40:b1:95:22:60:38:77:3b:b0:
27:19:8a:c5:54:fd:2e:09:3b:17:47:47:fd:eb:5f:
78:e6:ef:d2:1b:da:f0:14:b4:68:5f:a4:90:13:9d:
ef:2d:dd:4c:4d:83:dd:28:1f:12:1c:35:ad:44:32:
a5:f1:68:af:58:0b:30:b0:7d:ae:98:a6:bb:86:17:
56:4a:41:76:1b:10:f0:98:e3:e1:0b:04:bf:27:f1:
4a:6c:62:46:6e:47:be:ad:80:73:35:95:e7:5e:4f:
27:52:de:9e:c2:9c:22:34:3e:76:c4:a3:2f:03:2a:
e6:75:60:ff:9c:45:da:c6:98:dc:31:fb:bb:d3:d6:
ea:2f:61:71:dd:ff:7e:df:c8:4e:fa:68:a2:b7:20:
b2:48:26:89:aa:3e:d6:b0:c1:4f:6e:31:bd:62:2b:
ce:25:71:ab:04:d1:dc:aa:2d:c7:57:96:ad:b5:78:
ca:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:EA:97:B4:D0:AE:32:2E:E2:E2:80:36:DC:26:26:50:D2:06:52:15
X509v3 Authority Key Identifier:
keyid:6C:5E:33:0C:FA:26:FD:44:D4:29:4F:CD:BD:DF:BD:89:51:0C:6A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bF4zDPom_UTUKU_Nvd-9iVEMakg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8eabcd-e6e9-4f43-ba6c-da2312b65a50/1/ieqXtNCuMi7i4oA23CYmUNIGUhU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8eabcd-e6e9-4f43-ba6c-da2312b65a50/1/bF4zDPom_UTUKU_Nvd-9iVEMakg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.93.142.0/23
Signature Algorithm: sha256WithRSAEncryption
86:70:6b:bd:2c:b4:5e:ee:7b:0b:41:76:4c:3a:d6:27:f7:0e:
09:2a:2c:15:98:c3:50:32:4c:77:31:91:c5:f0:aa:f9:b2:9a:
26:b6:f6:42:f8:a5:05:05:a9:da:dd:18:35:67:1b:ad:9b:74:
b1:6c:72:7d:a2:72:12:78:96:18:99:51:62:62:62:15:2b:48:
00:82:c1:3b:38:bd:71:5c:cc:a6:33:12:da:c3:78:2e:2a:cb:
c5:70:2b:a9:4e:36:b0:57:ce:4a:9a:9c:b1:2e:bb:2d:f3:e1:
f2:31:e0:65:81:bf:d1:2c:82:49:41:d9:22:b4:61:7d:ed:e9:
8d:93:fe:4d:fe:56:ea:85:7b:fc:3e:d7:78:79:47:9d:ad:ee:
c1:73:0c:af:8d:f8:7f:e6:00:05:4c:1c:1c:6a:17:33:75:50:
81:76:cd:08:d4:6c:18:71:d3:16:89:60:e1:6b:db:bf:75:6e:
de:ba:3b:56:cf:c0:77:41:55:3c:c1:36:31:88:7d:1a:37:3b:
0d:79:71:eb:70:13:83:9e:f7:c6:8e:a5:a0:6e:ae:d7:4d:31:
54:27:cb:1d:cb:6c:b6:50:8a:b2:c8:38:b8:24:f9:7e:86:85:
2b:b5:9a:82:35:f7:6f:2e:65:3a:8a:91:db:ff:be:04:05:4d:
ed:2c:bb:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:39:34 2025 by rpki-client