Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/uBZm1G-bLJ79bZf3u1pcssEmJpQ.roa
File: uBZm1G-bLJ79bZf3u1pcssEmJpQ.roa (raw, json)
Hash identifier: XBAATuHCYQ9LtGRlMkP8DM/ITHLLCRAlr5ILpNxK2e4=
Subject key identifier: B8:16:66:D4:6F:9B:2C:9E:FD:6D:97:F7:BB:5A:5C:B2:C1:26:26:94
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 018636AE324E180197C46F55EFFD6DF5D568
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/uBZm1G-bLJ79bZf3u1pcssEmJpQ.roa
Signing time: Thu 09 Feb 2023 14:57:11 +0000
ROA not before: Thu 09 Feb 2023 14:57:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49468
IP address blocks: 188.211.238.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:36:ae:32:4e:18:01:97:c4:6f:55:ef:fd:6d:f5:d5:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Feb 9 14:57:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b81666d46f9b2c9efd6d97f7bb5a5cb2c1262694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:27:8c:fc:4d:69:69:26:ab:7c:d8:4f:75:31:
8f:19:62:90:56:fc:d3:1c:3c:f1:a1:2d:38:e0:d8:
23:2e:09:5a:de:a6:6e:e9:86:36:b0:5c:df:a2:b7:
a8:59:d9:c6:76:86:3c:b5:41:42:fc:b5:dd:36:72:
a5:90:a1:ab:fe:f7:1c:fa:8c:6e:29:05:46:50:e0:
9a:f1:d5:42:0f:b3:2e:e5:36:a0:9a:cb:59:85:0e:
dd:eb:a2:98:80:e3:61:e9:be:56:67:44:c2:ad:00:
86:12:d3:71:dc:d4:65:68:38:47:c1:50:2d:30:d4:
9b:d8:a2:a6:e3:e3:ac:83:7c:fc:02:f1:ba:96:bc:
f9:82:80:1d:dc:35:ce:6e:14:e2:66:0d:fe:e3:33:
da:91:f1:4a:40:88:15:84:03:23:0b:cc:ff:d2:e9:
46:6d:2a:9d:14:88:fb:f6:16:66:61:42:f9:ed:8c:
12:aa:6f:77:5f:06:73:9d:b9:bb:75:61:2f:0a:ba:
1b:93:92:5d:fc:40:72:22:e9:85:1b:38:9a:5c:65:
c7:93:ef:15:e7:57:fd:02:5a:a8:20:5b:f3:d6:de:
cf:e7:08:48:e2:69:8c:ac:dd:a4:62:c4:07:95:f8:
29:ea:de:78:08:4d:47:10:8b:4e:8e:03:77:e5:f3:
33:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:16:66:D4:6F:9B:2C:9E:FD:6D:97:F7:BB:5A:5C:B2:C1:26:26:94
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/uBZm1G-bLJ79bZf3u1pcssEmJpQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.211.238.0/24
Signature Algorithm: sha256WithRSAEncryption
19:8d:97:2f:be:87:d5:82:13:eb:7e:ec:32:fc:73:ed:11:88:
8b:92:1b:4a:1a:d8:40:ee:93:a1:d7:ba:f2:f2:8c:9c:e3:00:
6d:fe:25:91:7e:55:07:60:7d:c1:46:d8:52:f0:ee:43:a5:07:
ff:9d:b2:7f:57:ce:9f:4b:2e:ab:05:5f:46:7a:79:01:f5:62:
31:06:d3:33:41:e2:8a:8c:1d:af:82:8b:a6:bf:f5:ab:99:fa:
87:91:91:2f:7c:c3:a4:11:dd:6b:32:f9:e1:c2:9a:2e:02:18:
4b:e6:01:a5:e1:c6:51:e8:8b:17:a3:96:6d:55:35:51:98:46:
9d:1d:59:9f:16:5c:f7:2d:74:a4:97:aa:04:91:c0:a8:9f:33:
cf:73:a8:23:d3:44:5e:b5:f2:c9:c8:c8:6a:1f:8e:0a:d7:d4:
e9:74:4d:2e:fd:5e:05:1c:9a:a8:30:85:59:84:41:0c:58:b1:
54:62:61:a6:83:1b:01:db:45:a0:fd:d3:f5:60:be:7a:bb:a7:
60:7a:b7:64:25:78:9f:e0:e7:c3:03:c3:08:3c:42:7c:17:59:
02:95:9d:a2:94:ea:2a:52:9a:42:9c:a1:b3:36:85:91:85:17:
dc:87:e4:c1:06:2c:8b:e2:47:f5:61:ea:dc:d2:e3:33:2a:ef:
1b:ab:38:aa
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYY2rjJOGAGXxG9V7/1t9dVoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4ZTYyNjM0ZTFiZDUxMzNhOWRlNDUxMmFlOThjYWQxYjIy
MTliNTkwHhcNMjMwMjA5MTQ1NzExWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiODE2NjZkNDZmOWIyYzllZmQ2ZDk3ZjdiYjVhNWNiMmMxMjYyNjk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSeM/E1paSarfNhPdTGPGWKQVvzT
HDzxoS044NgjLgla3qZu6YY2sFzforeoWdnGdoY8tUFC/LXdNnKlkKGr/vcc+oxu
KQVGUOCa8dVCD7Mu5TagmstZhQ7d66KYgONh6b5WZ0TCrQCGEtNx3NRlaDhHwVAt
MNSb2KKm4+Osg3z8AvG6lrz5goAd3DXObhTiZg3+4zPakfFKQIgVhAMjC8z/0ulG
bSqdFIj79hZmYUL57YwSqm93XwZznbm7dWEvCrobk5Jd/EByIumFGziaXGXHk+8V
51f9AlqoIFvz1t7P5whI4mmMrN2kYsQHlfgp6t54CE1HEItOjgN35fMzZwIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFLgWZtRvmyye/W2X97taXLLBJiaUMB8GA1UdIwQY
MBaAFPjmJjThvVEzqd5FEq6YytGyIZtZMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1PWW1OT0c5VVRPcDNrVVNycGpLMGJJaG0xay5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFl
LTkyZTI1ZmUxNjMzMS8xL3VCWm0xRy1iTEo3OWJaZjN1MXBjc3NFbUpwUS5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFlLTkyZTI1ZmUxNjMz
MS8xLzEtT1ltTk9HOVVUT3Aza1VTcnBqSzBiSWhtMWsuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC80+4w
DQYJKoZIhvcNAQELBQADggEBABmNly++h9WCE+t+7DL8c+0RiIuSG0oa2EDuk6HX
uvLyjJzjAG3+JZF+VQdgfcFG2FLw7kOlB/+dsn9Xzp9LLqsFX0Z6eQH1YjEG0zNB
4oqMHa+Ci6a/9auZ+oeRkS98w6QR3Wsy+eHCmi4CGEvmAaXhxlHoixejlm1VNVGY
Rp0dWZ8WXPctdKSXqgSRwKifM89zqCPTRF618snIyGofjgrX1Ol0TS79XgUcmqgw
hVmEQQxYsVRiYaaDGwHbRaD90/Vgvnq7p2B6t2QleJ/g58MDwwg8QnwXWQKVnaKU
6ipSmkKcobM2hZGFF9yH5MEGLIviR/Vh6tzS4zMq7xurOKo=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:12 2023 by rpki-client on console-fra.rpki-client.org