Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/6QJFUwg6bVk690NpWyVRuEdnCvY.roa
File: 6QJFUwg6bVk690NpWyVRuEdnCvY.roa (raw, json)
Hash identifier: x28IB8mj/X0fp3Imai97IF0rt2ytlh108b9cx3fFbUY=
Subject key identifier: E9:02:45:53:08:3A:6D:59:3A:F7:43:69:5B:25:51:B8:47:67:0A:F6
Certificate issuer: /CN=a7fd3f89335dcf828666b28fad8ae993bd448878
Certificate serial: 018D454340CBCBB842FF3A6B8158FCE1458D
Authority key identifier: A7:FD:3F:89:33:5D:CF:82:86:66:B2:8F:AD:8A:E9:93:BD:44:88:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_0_iTNdz4KGZrKPrYrpk71EiHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/6QJFUwg6bVk690NpWyVRuEdnCvY.roa
Signing time: Fri 26 Jan 2024 10:14:11 +0000
ROA not before: Fri 26 Jan 2024 10:14:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 193.53.82.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:45:43:40:cb:cb:b8:42:ff:3a:6b:81:58:fc:e1:45:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7fd3f89335dcf828666b28fad8ae993bd448878
Validity
Not Before: Jan 26 10:14:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e9024553083a6d593af743695b2551b847670af6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c6:61:aa:83:68:45:fc:9d:b3:57:35:ea:31:
58:30:e3:6d:8d:0a:8c:e9:e6:6e:b3:8a:5a:e0:29:
7f:19:d0:a4:a3:d2:36:da:8b:08:24:63:cf:0c:43:
15:97:21:1a:2d:ef:7b:e0:18:af:2a:ab:77:de:60:
fc:32:ba:3c:f4:79:0f:a1:0d:e2:85:be:d3:ef:4c:
36:2b:21:49:ee:ba:21:9c:40:a3:32:24:c7:02:85:
f4:81:74:68:8b:cd:77:6c:ea:80:2a:1b:2d:9c:81:
c9:50:fc:fd:09:a7:7d:af:21:2f:b7:df:31:67:ff:
dc:55:fd:ff:3a:c1:22:13:23:62:79:60:fd:da:46:
ef:ce:df:9d:42:d2:8b:8f:0b:29:a2:c5:76:10:dd:
d5:6d:2e:08:18:3a:7f:7f:ea:a5:8d:49:f6:63:b0:
8f:0b:9e:16:78:83:78:26:a6:89:e4:a4:aa:18:3e:
a8:d2:d9:1e:8e:59:fd:7f:3e:be:9e:a9:b9:ad:22:
cf:1b:a3:6a:ec:0a:5f:e9:4c:13:ba:d7:8e:61:05:
e3:13:38:5e:d5:d6:57:5e:f2:5d:6e:32:47:12:74:
5d:34:1b:0f:30:76:50:27:0a:e4:4f:7f:cd:25:03:
a6:4c:68:27:df:15:3a:e8:96:36:17:ae:12:c7:01:
b5:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:02:45:53:08:3A:6D:59:3A:F7:43:69:5B:25:51:B8:47:67:0A:F6
X509v3 Authority Key Identifier:
keyid:A7:FD:3F:89:33:5D:CF:82:86:66:B2:8F:AD:8A:E9:93:BD:44:88:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_0_iTNdz4KGZrKPrYrpk71EiHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/6QJFUwg6bVk690NpWyVRuEdnCvY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.53.82.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:22:19:b2:64:bd:fe:33:1b:0c:d5:44:98:3f:c3:b0:4d:cf:
eb:7f:1c:f8:09:b1:f2:98:e7:1d:57:f4:13:a7:42:0c:8c:e3:
cd:da:a7:35:92:e2:24:0b:dd:f1:78:61:78:b1:5f:56:d5:de:
6c:5a:2b:f0:a4:f1:2b:ee:4e:8e:94:74:b3:5f:ee:49:bd:94:
d2:e1:35:e1:d8:95:93:5d:b4:ad:db:c8:47:61:09:a1:eb:82:
7f:0f:6d:88:09:f3:6b:59:cd:5e:62:f3:e9:4c:d5:8d:a0:1f:
e3:7c:d3:e3:1a:61:6e:92:2b:94:8e:28:f6:f8:08:43:db:13:
0e:8e:5f:e8:d8:72:f3:f9:0c:68:34:97:a3:dd:f4:1a:a2:5d:
0d:b1:85:b4:1c:60:7d:7e:ad:1c:6c:7e:f0:8c:40:09:81:02:
4c:c1:f8:e8:b2:16:bf:67:cf:46:b7:82:ee:e4:c7:9e:fd:83:
8d:6c:ab:18:f2:89:16:b4:10:83:f8:48:be:78:c8:81:6c:a9:
6a:f9:20:22:fb:d5:e3:7d:f6:3f:0f:0a:7b:19:02:d1:c7:cd:
53:70:6a:88:f6:f0:ec:84:4b:01:c3:85:4a:dc:08:4d:4a:8e:
78:8c:55:40:c2:5e:69:8b:ee:a6:6f:76:f2:00:fb:03:27:0c:
ec:fd:68:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:22:38 2025 by rpki-client