Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/2ILcaez_JOoakL4By9z-VBdQRAg.roa
File: 2ILcaez_JOoakL4By9z-VBdQRAg.roa (raw, json)
Hash identifier: +0SpZdEGzJ+YB2bLe1Y+kSqSl2eNTFCoeFxnkU0zwdY=
Subject key identifier: D8:82:DC:69:EC:FF:24:EA:1A:90:BE:01:CB:DC:FE:54:17:50:44:08
Certificate issuer: /CN=a7fd3f89335dcf828666b28fad8ae993bd448878
Certificate serial: 018DF51B5FC0354BB72C7608560DD7534F35
Authority key identifier: A7:FD:3F:89:33:5D:CF:82:86:66:B2:8F:AD:8A:E9:93:BD:44:88:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_0_iTNdz4KGZrKPrYrpk71EiHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/2ILcaez_JOoakL4By9z-VBdQRAg.roa
Signing time: Thu 29 Feb 2024 13:43:48 +0000
ROA not before: Thu 29 Feb 2024 13:43:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 193.53.82.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:f5:1b:5f:c0:35:4b:b7:2c:76:08:56:0d:d7:53:4f:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7fd3f89335dcf828666b28fad8ae993bd448878
Validity
Not Before: Feb 29 13:43:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d882dc69ecff24ea1a90be01cbdcfe5417504408
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:0f:92:10:3f:e5:ea:2c:b0:c5:97:5f:c5:aa:
f2:37:ee:e0:f8:49:98:e3:71:5a:09:bc:9b:7f:2b:
9a:d7:29:80:3f:e1:12:98:14:e9:0b:39:cc:ff:82:
67:b6:f5:26:59:34:3f:5a:b8:cf:10:13:16:cb:cc:
45:83:4d:93:b8:95:e7:75:e8:6a:41:13:3b:1d:d0:
f1:35:77:2c:87:ef:14:87:d9:b2:6d:6d:66:64:20:
6b:50:86:bb:19:0e:6c:0d:69:7f:81:1a:ff:60:db:
b6:30:de:24:09:46:e6:3a:75:33:c7:89:47:1b:f1:
0d:9a:f2:42:a3:82:bb:7c:18:a7:a2:64:2a:74:bc:
f3:cf:0b:a6:ba:b0:55:93:27:6e:cd:71:99:63:87:
51:ca:85:45:5d:4f:ed:b6:28:2a:42:e8:ab:1f:3f:
6f:b9:64:f0:ba:7e:a7:c8:f5:71:12:b0:36:8d:ce:
d8:29:95:01:7f:8a:74:b6:71:d1:84:0a:66:c9:ab:
c9:16:61:06:b1:77:91:ee:33:75:25:12:c0:6c:b5:
68:01:e3:7c:ae:d4:e8:b0:dc:81:d8:47:f3:8f:b6:
3b:23:10:9e:ae:6f:ae:b9:54:a5:41:6d:08:9b:2b:
2e:8b:ba:34:67:91:63:79:ca:26:85:ac:db:0c:c5:
3a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:82:DC:69:EC:FF:24:EA:1A:90:BE:01:CB:DC:FE:54:17:50:44:08
X509v3 Authority Key Identifier:
keyid:A7:FD:3F:89:33:5D:CF:82:86:66:B2:8F:AD:8A:E9:93:BD:44:88:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_0_iTNdz4KGZrKPrYrpk71EiHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/2ILcaez_JOoakL4By9z-VBdQRAg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.53.82.0/24
Signature Algorithm: sha256WithRSAEncryption
38:b1:5f:7a:2c:f4:58:77:7e:81:0e:3f:8f:fc:37:af:f4:88:
cf:53:d8:89:5b:ce:7f:87:99:38:8f:19:16:e1:af:3c:d8:3b:
9b:61:da:79:f5:46:d2:f9:f0:0c:06:8d:20:ff:4b:64:24:8c:
c1:d2:dc:a9:dc:53:ad:51:39:d2:ad:4e:87:2e:62:56:b6:10:
56:74:fc:34:ac:75:6f:a6:03:c5:d2:cb:20:49:94:32:20:39:
15:36:86:a3:5f:5a:d0:77:05:3c:63:e1:da:db:d7:99:4a:3f:
dc:b5:53:82:28:a1:f2:d9:a1:ea:28:8b:3e:5f:da:ba:a6:bc:
20:0a:fa:7c:d0:d3:8d:b0:bc:61:4b:9a:fa:f4:ad:11:6c:77:
c5:b2:ea:1e:65:e4:84:32:25:1e:bb:11:a0:2d:ec:ca:a2:a4:
4b:43:ff:a9:07:a7:de:92:6c:05:b9:50:11:4b:90:b0:cb:b1:
2c:30:b3:68:58:3a:1b:91:25:72:bb:24:d1:21:46:7b:26:31:
69:12:32:bc:61:ba:3b:92:80:09:fd:0a:3a:ad:17:ff:00:29:
ef:e8:81:1f:94:33:81:39:19:c8:36:3e:32:d1:8b:1e:48:a5:
78:78:76:02:8a:77:4b:87:f2:d4:24:7b:e6:ce:6d:df:8c:df:
9a:fc:8b:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:48 2024 by rpki-client on console-ams.rpki-client.org