Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/031100-458a-474e-927c-df027916ce50/1/UAGNYleyGEkrORK1zDfwPqIHbCE.roa
File: UAGNYleyGEkrORK1zDfwPqIHbCE.roa (raw, json)
Hash identifier: DJlujHfApuTRcogeh4hflrT2y91hpZ4xPmokc8Twb1k=
Subject key identifier: 50:01:8D:62:57:B2:18:49:2B:39:12:B5:CC:37:F0:3E:A2:07:6C:21
Certificate issuer: /CN=7cd162dec78209bc03add081527d54b27e84d26e
Certificate serial: 018CC8DCEFD04C34B5948F404A9ECA70035A
Authority key identifier: 7C:D1:62:DE:C7:82:09:BC:03:AD:D0:81:52:7D:54:B2:7E:84:D2:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fNFi3seCCbwDrdCBUn1Usn6E0m4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/031100-458a-474e-927c-df027916ce50/1/UAGNYleyGEkrORK1zDfwPqIHbCE.roa
Signing time: Tue 02 Jan 2024 06:29:31 +0000
ROA not before: Tue 02 Jan 2024 06:29:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43073
IP address blocks: 91.240.106.0/23 maxlen: 23
193.32.36.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:dc:ef:d0:4c:34:b5:94:8f:40:4a:9e:ca:70:03:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cd162dec78209bc03add081527d54b27e84d26e
Validity
Not Before: Jan 2 06:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=50018d6257b218492b3912b5cc37f03ea2076c21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:88:bf:3a:61:9b:c5:a3:92:10:bf:ab:fd:f5:
d8:c4:5a:87:e4:25:9d:be:e8:13:df:61:78:b0:be:
eb:ed:94:b0:5c:46:42:55:b9:85:71:4e:ab:0e:8d:
03:c7:b8:78:81:57:6d:73:b5:c8:a2:05:50:63:02:
7e:a1:16:f5:a4:ad:e4:54:15:3b:25:65:f0:90:fb:
6c:91:3e:e9:ba:d0:2c:20:b3:1d:21:dd:ef:87:36:
36:ab:3b:0b:a9:aa:0c:a2:5b:9e:cb:a0:1f:f3:a9:
9a:77:a3:b6:23:03:f9:35:39:69:ca:0d:57:0c:52:
17:2a:71:2c:47:c7:24:65:26:ab:98:08:85:d3:7d:
56:2d:7a:4c:d9:88:0c:b6:3f:9a:cf:81:be:e7:97:
4d:19:76:e6:83:cf:15:37:7c:76:0f:0b:7f:8f:33:
eb:d0:ca:94:ec:80:0b:ca:7b:ae:83:9e:d1:0e:40:
bd:81:37:9c:97:ae:2c:10:d4:0c:11:29:66:81:64:
d1:c8:7e:72:52:a1:c6:5d:a7:61:8e:2a:9a:9d:85:
ad:05:03:b4:b3:0f:eb:3a:63:55:75:98:75:aa:23:
96:ef:9d:2e:c9:8c:4a:38:a9:f0:10:f0:47:50:d5:
30:77:2e:41:76:be:f0:0e:4b:d2:bf:e0:51:b2:5f:
07:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:01:8D:62:57:B2:18:49:2B:39:12:B5:CC:37:F0:3E:A2:07:6C:21
X509v3 Authority Key Identifier:
keyid:7C:D1:62:DE:C7:82:09:BC:03:AD:D0:81:52:7D:54:B2:7E:84:D2:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fNFi3seCCbwDrdCBUn1Usn6E0m4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/031100-458a-474e-927c-df027916ce50/1/UAGNYleyGEkrORK1zDfwPqIHbCE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/031100-458a-474e-927c-df027916ce50/1/fNFi3seCCbwDrdCBUn1Usn6E0m4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.240.106.0/23
193.32.36.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:b8:24:e7:37:c1:8f:e1:2c:55:92:42:3e:07:aa:8c:c8:0a:
43:2a:8c:70:be:9c:00:d0:66:81:79:08:24:c8:14:bf:63:87:
06:cf:a4:97:f7:cc:c7:db:55:6a:ec:f2:a2:31:cb:60:22:3f:
ab:b5:83:b9:b6:da:d7:d4:a0:ca:1a:9c:32:4f:bb:2d:cf:76:
12:dd:57:cf:37:83:70:32:6b:20:71:3c:19:80:6e:d0:0d:8d:
64:07:3a:8a:74:49:3e:4f:67:fa:13:4c:91:bf:09:74:d9:73:
b2:10:64:5c:fa:a8:db:a5:77:85:1c:4d:c8:ec:49:2a:94:9c:
51:a3:62:aa:7a:6a:c1:a7:c2:d6:c5:36:0c:4e:77:42:23:b0:
cb:f3:02:12:ce:1a:6c:89:a8:db:5c:77:f0:a2:ee:2d:5a:ea:
a0:8f:e4:b6:ac:67:c4:19:7a:09:08:66:e6:2c:6d:03:24:b6:
8b:53:cd:8b:8b:23:ac:b9:57:11:3a:dc:b3:c8:12:df:36:48:
6e:94:2d:40:91:9a:ea:af:10:18:87:d5:6c:12:f3:39:fc:bb:
3f:a1:2f:fb:b2:bb:3d:e3:20:fb:7b:c2:05:59:75:12:b4:4c:
d6:b8:24:9c:91:ac:96:ad:48:f7:da:36:27:1e:73:59:7b:b0:
6e:8d:5f:e1
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzI3O/QTDS1lI9ASp7KcANaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjZDE2MmRlYzc4MjA5YmMwM2FkZDA4MTUyN2Q1NGIyN2U4
NGQyNmUwHhcNMjQwMTAyMDYyOTMxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MDAxOGQ2MjU3YjIxODQ5MmIzOTEyYjVjYzM3ZjAzZWEyMDc2YzIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj4i/OmGbxaOSEL+r/fXYxFqH5CWd
vugT32F4sL7r7ZSwXEZCVbmFcU6rDo0Dx7h4gVdtc7XIogVQYwJ+oRb1pK3kVBU7
JWXwkPtskT7putAsILMdId3vhzY2qzsLqaoMoluey6Af86mad6O2IwP5NTlpyg1X
DFIXKnEsR8ckZSarmAiF031WLXpM2YgMtj+az4G+55dNGXbmg88VN3x2Dwt/jzPr
0MqU7IALynuug57RDkC9gTecl64sENQMESlmgWTRyH5yUqHGXadhjiqanYWtBQO0
sw/rOmNVdZh1qiOW750uyYxKOKnwEPBHUNUwdy5Bdr7wDkvSv+BRsl8HkQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFABjWJXshhJKzkStcw38D6iB2whMB8GA1UdIwQY
MBaAFHzRYt7Hggm8A63QgVJ9VLJ+hNJuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZk5GaTNzZUNDYndEcmRDQlVuMVVzbjZFMG00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni8wMzExMDAtNDU4YS00NzRlLTkyN2Mt
ZGYwMjc5MTZjZTUwLzEvVUFHTllsZXlHRWtyT1JLMXpEZndQcUlIYkNFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni8wMzExMDAtNDU4YS00NzRlLTkyN2MtZGYwMjc5MTZjZTUw
LzEvZk5GaTNzZUNDYndEcmRDQlVuMVVzbjZFMG00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBW/BqAwQA
wSAkMA0GCSqGSIb3DQEBCwUAA4IBAQCeuCTnN8GP4SxVkkI+B6qMyApDKoxwvpwA
0GaBeQgkyBS/Y4cGz6SX98zH21Vq7PKiMctgIj+rtYO5ttrX1KDKGpwyT7stz3YS
3VfPN4NwMmsgcTwZgG7QDY1kBzqKdEk+T2f6E0yRvwl02XOyEGRc+qjbpXeFHE3I
7EkqlJxRo2KqemrBp8LWxTYMTndCI7DL8wISzhpsiajbXHfwou4tWuqgj+S2rGfE
GXoJCGbmLG0DJLaLU82LiyOsuVcROtyzyBLfNkhulC1AkZrqrxAYh9VsEvM5/Ls/
oS/7srs94yD7e8IFWXUStEzWuCSckayWrUj32jYnHnNZe7BujV/h
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:22 2024 by rpki-client on console-ams.rpki-client.org