Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/9f4505-08f1-4da1-8f6d-1fb246d30101/1/JfMc-md57Guyn-sOst4THTlZSBA.roa
File: JfMc-md57Guyn-sOst4THTlZSBA.roa (raw, json)
Hash identifier: TrOU17HWx9e47b4MoONwL97jELS8sy9ipsZx7ZtgvHY=
Subject key identifier: 25:F3:1C:FA:67:79:EC:6B:B2:9F:EB:0E:B2:DE:13:1D:39:59:48:10
Certificate issuer: /CN=aae73121517086d93ac70e72e3c3f5a0b5e73b89
Certificate serial: 018570D546E5B9A6CB3A194E0ECF7EFF1B16
Authority key identifier: AA:E7:31:21:51:70:86:D9:3A:C7:0E:72:E3:C3:F5:A0:B5:E7:3B:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qucxIVFwhtk6xw5y48P1oLXnO4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/9f4505-08f1-4da1-8f6d-1fb246d30101/1/JfMc-md57Guyn-sOst4THTlZSBA.roa
Signing time: Mon 02 Jan 2023 04:55:03 +0000
ROA not before: Mon 02 Jan 2023 04:55:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61205
IP address blocks: 193.138.168.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:d5:46:e5:b9:a6:cb:3a:19:4e:0e:cf:7e:ff:1b:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aae73121517086d93ac70e72e3c3f5a0b5e73b89
Validity
Not Before: Jan 2 04:55:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=25f31cfa6779ec6bb29feb0eb2de131d39594810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:96:b4:d2:46:dc:74:00:ca:24:08:17:bc:5a:
f1:12:63:92:4f:2b:de:17:e9:b0:68:ae:a8:ce:fd:
b5:8c:12:ec:aa:e5:b2:cd:97:26:07:07:2e:43:1f:
94:2d:44:a8:db:f3:54:08:90:73:01:57:6a:89:5b:
00:f1:5f:e0:9f:d9:6e:e5:cf:98:07:e5:dc:38:f9:
79:fa:34:79:8f:1e:40:9f:6b:74:a6:4e:c0:2f:3a:
a7:e4:21:6c:2a:e7:78:4e:2e:67:f9:a6:fa:1b:62:
41:eb:72:ed:09:76:40:fe:b7:1f:7b:46:1b:1b:9f:
a5:58:09:64:bb:c2:e0:81:93:1f:6e:70:49:9f:bb:
92:48:4c:d8:12:54:ce:d6:ae:fb:76:68:9a:0a:4f:
0e:66:8e:a3:a9:7b:90:e6:e7:36:d3:d6:8d:f2:ed:
97:f4:61:f8:57:c2:92:e0:3a:5d:bb:26:08:ee:50:
81:d4:68:22:21:9c:ef:63:cf:a0:08:ce:e8:ed:57:
91:e6:83:fd:85:65:05:34:60:84:35:fb:f0:15:21:
85:49:7b:03:a7:08:13:be:1d:9e:e6:d6:89:4f:f2:
93:4a:1d:68:7e:40:a4:a1:b3:03:76:4b:56:15:f1:
dc:55:a5:25:01:8e:22:cb:5b:85:99:56:db:0d:57:
1d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:F3:1C:FA:67:79:EC:6B:B2:9F:EB:0E:B2:DE:13:1D:39:59:48:10
X509v3 Authority Key Identifier:
keyid:AA:E7:31:21:51:70:86:D9:3A:C7:0E:72:E3:C3:F5:A0:B5:E7:3B:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qucxIVFwhtk6xw5y48P1oLXnO4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/9f4505-08f1-4da1-8f6d-1fb246d30101/1/JfMc-md57Guyn-sOst4THTlZSBA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/9f4505-08f1-4da1-8f6d-1fb246d30101/1/qucxIVFwhtk6xw5y48P1oLXnO4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.138.168.0/22
Signature Algorithm: sha256WithRSAEncryption
ac:75:9d:82:7c:9d:82:ca:46:16:f5:83:ab:74:e2:47:b5:b2:
1a:47:ba:24:88:f3:26:8f:31:cf:b6:e4:2e:f7:8e:e1:1b:c5:
58:12:5c:8f:92:51:46:61:7d:97:9c:ed:4b:a4:30:c8:3b:bf:
80:30:55:c4:04:c8:c3:dc:f7:81:56:87:86:8c:ca:0b:83:c7:
0e:44:51:21:1a:86:7d:d8:23:a4:81:d3:e3:92:bb:ed:47:50:
42:4f:bb:ad:4f:f0:fe:03:b5:56:84:bc:8e:c6:c1:e0:ef:8a:
8c:25:5d:58:de:2d:b8:7a:f2:19:88:aa:14:55:6b:cc:ae:6e:
66:c3:71:d6:ac:db:54:4b:31:44:18:d5:fa:13:d9:73:42:48:
6e:f1:90:da:3b:1f:0d:cb:01:2c:dd:af:ed:e2:a6:36:82:de:
ef:bc:23:de:2f:e5:b5:29:0c:1a:70:0b:0e:83:a7:9a:c1:a9:
d0:e4:d5:d6:33:8b:51:95:77:4c:98:a0:42:bb:6b:76:ee:e9:
62:6f:4a:91:61:f9:58:3b:ae:4b:61:83:04:56:35:0b:f5:2c:
26:3f:a0:9d:a8:c7:38:2d:1d:99:d6:71:0e:60:8b:37:cd:47:
e4:55:3c:56:e5:ee:18:a3:99:0e:2f:72:42:4d:82:ed:06:06:
5b:65:9e:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 5 11:07:05 2023 by rpki-client on console-fra.rpki-client.org