Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/M-hhXd7-T8lWkUnNdofiVAcF_V4.roa
File: M-hhXd7-T8lWkUnNdofiVAcF_V4.roa (raw, json)
Hash identifier: IqyV1M+8b0QI8tsO3MfkgHpbN134OBGgKTcG5lMBle0=
Subject key identifier: 33:E8:61:5D:DE:FE:4F:C9:56:91:49:CD:76:87:E2:54:07:05:FD:5E
Certificate issuer: /CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Certificate serial: 018CC500311234B11C9A4E17ED433427C5FD
Authority key identifier: 1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/M-hhXd7-T8lWkUnNdofiVAcF_V4.roa
Signing time: Mon 01 Jan 2024 12:29:33 +0000
ROA not before: Mon 01 Jan 2024 12:29:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 40065
IP address blocks: 194.156.132.0/23 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:31:12:34:b1:1c:9a:4e:17:ed:43:34:27:c5:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Validity
Not Before: Jan 1 12:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=33e8615ddefe4fc9569149cd7687e2540705fd5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:66:b9:de:a2:87:c0:e3:41:c7:98:3c:16:c9:
0d:a5:d0:f5:86:78:52:f7:ce:11:6a:81:00:a2:1e:
ed:db:a0:71:8d:3f:f7:19:f3:2b:b7:ca:84:3c:2a:
61:aa:3e:39:71:d9:8a:0b:90:3c:d6:3d:20:ef:36:
8e:11:43:9f:bc:c6:3d:df:7c:15:9c:d1:18:7f:6c:
31:15:73:3b:4c:54:1e:4e:e8:18:a0:5a:27:71:1a:
3c:83:b9:88:4a:de:d6:47:27:a8:b7:0e:e7:9c:0c:
64:ee:d0:d7:f2:29:c9:26:2f:97:2f:03:37:fe:30:
73:74:42:04:99:a6:06:64:2d:e7:df:12:26:ef:ef:
c8:15:9d:79:c3:d0:de:8d:a1:0d:54:0a:4c:37:0d:
38:e3:c5:c2:aa:94:da:eb:78:0f:e1:9d:8e:76:bd:
ad:60:48:be:c2:33:57:53:75:7f:99:d4:54:17:e7:
05:d4:c4:aa:a8:ec:ab:de:11:43:9a:de:3f:25:00:
49:d2:ac:94:aa:85:db:1e:6e:a3:86:09:a6:27:1e:
3b:76:79:25:b9:df:43:8c:eb:36:c9:13:bb:5d:1c:
2f:ab:c3:90:e4:9f:98:3f:09:56:01:fd:22:5a:d9:
32:f5:57:29:79:83:d6:6d:ce:d4:fc:3a:ec:53:ab:
bd:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:E8:61:5D:DE:FE:4F:C9:56:91:49:CD:76:87:E2:54:07:05:FD:5E
X509v3 Authority Key Identifier:
keyid:1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/M-hhXd7-T8lWkUnNdofiVAcF_V4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.156.132.0/23
Signature Algorithm: sha256WithRSAEncryption
2a:56:f9:65:45:aa:da:e7:c0:02:0a:a2:1f:de:6f:c0:da:3c:
e6:5d:0e:56:c4:e6:bf:82:36:5b:08:91:15:c9:60:76:97:4a:
24:00:2f:27:ca:eb:69:42:01:50:90:20:21:61:a2:30:e1:f2:
4a:e3:64:e1:32:5c:6c:f3:2b:bc:91:90:fb:63:a7:24:f1:6e:
82:20:6c:5d:5e:22:79:d9:c0:5d:08:36:41:fb:23:b9:86:83:
3c:6d:e7:6b:77:dd:cf:2c:38:fa:eb:48:37:8b:8a:ce:2c:05:
70:91:0b:4f:07:60:14:4b:7a:45:e7:b3:3d:e7:5d:49:4d:a8:
3b:b7:d6:45:d0:70:7c:ff:ca:e3:f8:e0:35:80:fc:6e:2a:67:
fa:95:86:b4:a2:f5:5f:17:95:57:ce:6e:8b:79:44:33:e5:67:
3a:c8:90:1f:53:03:a5:ce:15:b3:30:6a:a3:b9:0a:aa:86:47:
35:16:c5:99:ab:ff:6b:ab:30:a2:76:c1:8f:7d:26:96:10:83:
c7:36:86:23:0e:88:26:f2:b4:2c:d8:ce:ba:b5:e6:06:60:b9:
8d:ac:b2:b5:78:ec:44:9a:ba:24:30:f7:6d:02:e3:ae:d2:d1:
a1:35:66:09:e6:58:09:b9:b0:1c:7e:be:58:13:a8:f1:9f:8d:
5e:98:6c:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 8 14:28:32 2024 by rpki-client on console-fra.rpki-client.org