Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/iwhMug5HYIGCDxn9bZvQ08GY2Xw.roa
File: iwhMug5HYIGCDxn9bZvQ08GY2Xw.roa (raw, json)
Hash identifier: +YTKorQXztGxso6kUEOzu+Xg1WrZXmOvDBHaFgCzfco=
Subject key identifier: 8B:08:4C:BA:0E:47:60:81:82:0F:19:FD:6D:9B:D0:D3:C1:98:D9:7C
Certificate issuer: /CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Certificate serial: 018A288686ED75540FA15C73212E95F2D5EB
Authority key identifier: 74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/iwhMug5HYIGCDxn9bZvQ08GY2Xw.roa
Signing time: Thu 24 Aug 2023 17:10:19 +0000
ROA not before: Thu 24 Aug 2023 17:10:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3257
IP address blocks: 155.193.1.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:28:86:86:ed:75:54:0f:a1:5c:73:21:2e:95:f2:d5:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Validity
Not Before: Aug 24 17:10:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8b084cba0e476081820f19fd6d9bd0d3c198d97c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:75:ff:e1:59:2e:89:8b:76:be:61:30:6c:71:
9a:b2:c0:5a:54:29:50:6f:7a:8b:d5:f8:56:68:14:
92:62:f3:7c:58:c5:7b:9b:e2:10:80:7f:43:ac:fa:
a6:ad:0c:28:20:4b:9f:34:e1:52:01:ac:7f:14:41:
73:2f:ad:3b:52:21:6d:8d:7e:ac:c7:6d:f8:b4:5b:
68:9d:f0:74:82:bb:c4:be:6f:df:63:43:e3:26:3d:
63:d0:87:c4:97:a5:0e:4a:52:10:7c:96:09:70:ee:
cd:83:36:3b:53:8a:1b:6e:90:54:eb:b3:74:8b:77:
56:80:eb:26:5e:85:ed:a4:93:8e:8d:a4:4d:c3:76:
00:97:6d:fb:84:70:0a:d5:69:70:c1:a6:dc:c7:ee:
55:fd:b6:e3:a0:7c:82:ba:2a:46:4c:be:6c:30:13:
02:5d:34:25:73:f1:2a:81:87:c0:c7:83:64:a2:f8:
29:2d:98:32:98:ab:68:28:ef:d8:b6:e2:e2:a9:82:
b1:d3:30:ac:7d:3a:61:e3:de:75:60:b9:7b:0b:39:
54:24:6c:cb:ea:f2:e0:fe:e8:ae:b7:b3:dc:6e:61:
0f:fc:e4:4b:03:d7:6a:d6:1b:10:64:c5:5a:40:70:
b6:24:a8:0b:6c:64:da:60:2f:6a:72:37:c0:57:f9:
55:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:08:4C:BA:0E:47:60:81:82:0F:19:FD:6D:9B:D0:D3:C1:98:D9:7C
X509v3 Authority Key Identifier:
keyid:74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/iwhMug5HYIGCDxn9bZvQ08GY2Xw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.193.1.0/24
Signature Algorithm: sha256WithRSAEncryption
13:e8:87:a5:d8:6d:63:e7:ac:95:75:0f:c8:e8:50:20:52:f5:
97:8f:39:05:31:16:88:4e:78:0c:f1:23:2c:cd:7d:27:59:b5:
ef:58:89:8e:36:d8:06:23:d7:33:f8:9e:6e:84:0a:0f:32:e6:
80:77:c6:1b:0e:2e:ff:be:79:b1:65:47:77:50:04:97:e7:99:
9c:f7:5b:5e:13:47:d9:00:e8:f6:1f:d9:e3:07:3b:3e:0c:34:
0d:73:36:a6:2a:59:c4:dc:d1:fb:f5:aa:da:0a:93:a1:28:3c:
9c:91:54:4b:c3:56:71:cd:90:1f:a2:9f:61:2d:9c:8d:eb:4c:
61:76:52:ea:9c:bd:3c:f3:73:28:69:a4:7b:da:5f:21:3e:e3:
4e:2a:10:97:91:30:ea:e7:c8:d9:3e:b4:34:41:97:aa:6e:fa:
67:43:0f:1a:a8:7b:4a:9f:54:b0:ad:3a:3d:4b:57:6f:ae:c3:
04:7d:3e:76:03:45:c2:f0:60:d8:44:47:3c:1f:be:76:f5:de:
8a:8f:33:b1:5a:4e:6c:0d:46:85:36:a8:20:de:2d:77:98:f0:
0e:a1:e4:7c:b8:ce:07:3a:3d:ce:de:fd:98:1e:e1:e4:16:2e:
43:e0:d5:c2:32:34:29:90:43:38:da:46:39:f6:dc:3a:05:41:
a9:e3:6e:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:17 2024 by rpki-client on console-ams.rpki-client.org