Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/u0trRcQgSoJ3cOdUdNG7s68Kq-0.roa
File: u0trRcQgSoJ3cOdUdNG7s68Kq-0.roa (raw, json)
Hash identifier: W4ahRMWusTRmj6wRRpcdHGLpmOJzPsQa7N07QrVL0o0=
Subject key identifier: BB:4B:6B:45:C4:20:4A:82:77:70:E7:54:74:D1:BB:B3:AF:0A:AB:ED
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 0183DFFCE85AFCF483ED977E7CD49F44B406
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/u0trRcQgSoJ3cOdUdNG7s68Kq-0.roa
Signing time: Sun 16 Oct 2022 08:50:37 +0000
ROA not before: Sun 16 Oct 2022 08:50:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 5606
IP address blocks: 188.214.107.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:df:fc:e8:5a:fc:f4:83:ed:97:7e:7c:d4:9f:44:b4:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Oct 16 08:50:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bb4b6b45c4204a827770e75474d1bbb3af0aabed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:79:44:c3:3f:9e:97:46:9e:8a:08:5f:74:dd:
03:d7:d6:46:29:62:a1:90:ba:2c:c0:be:c9:35:a3:
34:63:18:f7:5c:bd:d2:c5:9f:5b:24:12:d3:01:09:
eb:53:84:9f:ed:1e:24:6a:59:79:90:2c:10:52:78:
4e:4d:30:13:9f:fc:06:d3:5a:46:0f:35:42:02:f8:
f0:d5:f6:e1:f6:fb:3f:a7:b6:57:27:2b:e9:46:f2:
24:42:84:71:c5:1d:a2:33:20:7f:66:93:d2:bf:4e:
1d:17:77:68:fb:2d:9e:7a:88:68:ae:41:37:f0:0b:
82:b4:6f:8b:07:0a:e1:77:da:e8:d3:f1:ea:a7:1e:
ea:13:e4:5a:27:19:d0:29:db:6e:ac:7b:7a:83:77:
5a:79:3c:e6:1b:8f:06:5e:f0:7a:56:c4:36:c0:9a:
e9:e2:7f:31:cd:f6:0c:b2:6e:9c:71:17:a2:a3:f8:
12:47:73:1b:66:e3:32:f6:b7:1e:df:01:68:51:e4:
40:a0:82:f3:43:37:bf:53:ba:08:2c:f7:48:13:d2:
b0:99:7a:03:44:cf:03:c6:54:b9:86:81:92:9b:a4:
70:4b:79:ee:93:9e:fc:0a:05:4c:4c:c0:c1:f4:c3:
e5:70:16:19:9c:51:9a:63:0e:3b:95:8b:61:e8:fd:
d6:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:4B:6B:45:C4:20:4A:82:77:70:E7:54:74:D1:BB:B3:AF:0A:AB:ED
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/u0trRcQgSoJ3cOdUdNG7s68Kq-0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.214.107.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:4c:b2:6e:79:73:25:44:77:38:e3:33:99:08:b7:60:02:4e:
9f:3a:e2:cd:12:c3:2f:f0:2d:50:71:be:5a:9e:50:a6:df:4b:
00:a2:54:99:36:3f:f1:ed:ef:7e:0c:c2:2e:58:f2:9c:2d:d7:
92:04:cb:d4:4f:cd:04:72:dd:90:6e:f5:9d:de:87:de:89:38:
71:67:ae:ab:8a:cf:f2:a4:f4:0b:20:60:a0:d5:e5:9b:7a:66:
6c:04:a6:a1:fb:d7:ca:b7:28:17:2e:b3:5b:48:e5:d4:af:ba:
ea:74:f1:a2:72:6b:e4:80:99:38:a9:30:96:78:4c:0b:84:46:
c8:e8:b2:82:ab:91:c4:3d:ef:05:8c:65:97:e6:cd:e9:4c:07:
aa:f6:8a:bc:e4:99:40:29:66:fd:20:3a:3b:b8:ef:48:fa:0d:
e8:f5:9a:e1:ba:6c:9a:54:3a:14:ab:df:5e:47:f9:bc:47:ac:
95:49:e3:c5:5e:b9:7f:30:58:31:3f:2f:cd:01:61:7c:12:a1:
38:ef:39:1e:c7:66:2a:6c:04:8d:61:9f:e0:dc:e6:82:93:c0:
72:37:b8:8b:20:79:f6:9d:c3:a8:df:a8:1f:89:43:60:0b:6b:
7f:75:43:02:b6:94:cd:62:06:d9:ce:44:ec:a6:e7:99:d6:35:
cc:3f:97:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:38:22 2025 by rpki-client