Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/YiUHytfpiJofg0sNxLCooDfTkU0.roa
File: YiUHytfpiJofg0sNxLCooDfTkU0.roa (raw, json)
Hash identifier: Tdbz1cSrWaBYi4Z0xrqCpX5D9SYQZ/123WBnrihoV2s=
Subject key identifier: 62:25:07:CA:D7:E9:88:9A:1F:83:4B:0D:C4:B0:A8:A0:37:D3:91:4D
Certificate issuer: /CN=a7fd3f89335dcf828666b28fad8ae993bd448878
Certificate serial: 018BDD7A9AD3AC0A41110F9F2E6B130C50E5
Authority key identifier: A7:FD:3F:89:33:5D:CF:82:86:66:B2:8F:AD:8A:E9:93:BD:44:88:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_0_iTNdz4KGZrKPrYrpk71EiHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/YiUHytfpiJofg0sNxLCooDfTkU0.roa
Signing time: Fri 17 Nov 2023 13:31:21 +0000
ROA not before: Fri 17 Nov 2023 13:31:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 193.53.81.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:dd:7a:9a:d3:ac:0a:41:11:0f:9f:2e:6b:13:0c:50:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7fd3f89335dcf828666b28fad8ae993bd448878
Validity
Not Before: Nov 17 13:31:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=622507cad7e9889a1f834b0dc4b0a8a037d3914d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d7:6b:42:6b:c4:31:6b:d9:d6:6a:c3:d0:b7:
c9:df:9e:42:66:cd:20:26:57:e6:e2:b8:cf:74:e8:
34:4c:e3:dd:06:ce:47:c4:e5:9f:af:b9:1c:31:89:
b9:3b:12:e7:28:2f:55:06:af:4c:59:c8:25:81:e3:
4c:42:42:68:37:23:94:c1:ea:c7:ab:9a:8a:65:61:
20:8e:d3:91:59:3c:c2:ca:10:6d:a3:f0:a7:92:8f:
42:a5:91:11:bd:4a:ac:c8:84:f5:55:ca:40:10:37:
1d:ee:86:da:70:83:81:0e:c2:30:c7:bc:21:ee:01:
22:74:db:90:6a:4a:e3:4f:20:d6:28:18:18:df:99:
e6:cd:8f:4b:8b:94:ff:6f:7e:29:bd:c6:8b:09:cf:
3d:89:25:9d:0b:26:72:b6:37:11:37:3a:f7:4f:a7:
7d:bd:36:f4:87:4c:3d:7f:ee:39:ec:59:c6:29:e0:
b8:73:c6:63:ab:e9:bc:44:f8:c5:1c:bc:dd:5d:49:
59:6a:5e:a8:37:1f:77:81:f4:e2:b6:87:71:3d:15:
61:8b:33:0c:31:81:d7:9a:f6:8e:0d:39:27:8e:6b:
5c:cd:b4:1d:b3:43:ee:74:8c:23:ec:74:e5:d2:32:
ae:50:68:97:fb:b7:44:19:3a:8e:cb:bb:e7:75:f2:
ee:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:25:07:CA:D7:E9:88:9A:1F:83:4B:0D:C4:B0:A8:A0:37:D3:91:4D
X509v3 Authority Key Identifier:
keyid:A7:FD:3F:89:33:5D:CF:82:86:66:B2:8F:AD:8A:E9:93:BD:44:88:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_0_iTNdz4KGZrKPrYrpk71EiHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/YiUHytfpiJofg0sNxLCooDfTkU0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.53.81.0/24
Signature Algorithm: sha256WithRSAEncryption
85:48:66:72:ee:51:54:70:64:f2:61:77:14:90:fb:03:43:3a:
c7:09:2d:a7:81:0e:4a:66:58:49:7e:a0:dc:23:5f:d6:1e:bd:
ea:56:e4:70:f5:c4:ce:14:c0:69:bd:10:f1:7e:b8:04:57:cb:
d1:30:64:14:d8:1b:62:b0:d7:75:36:1e:48:c2:2e:b0:24:02:
04:ae:15:c5:f2:e5:31:03:c0:4e:71:fe:07:85:c6:84:60:c9:
4a:be:c7:cd:96:d5:69:76:93:cc:36:39:07:d4:69:10:6f:d2:
c8:3e:37:71:98:c6:fd:32:c0:0f:c9:04:a3:8b:ca:39:23:3e:
98:f1:54:70:95:ce:60:47:20:bb:f7:db:28:85:9f:16:90:b6:
f4:30:de:f5:e4:37:2d:ca:6c:02:7c:72:e6:9a:da:c1:56:2b:
8c:b5:17:d8:d1:e0:70:32:78:00:c7:b4:69:2e:4c:9d:1c:13:
7c:33:08:ad:19:ff:f6:92:31:2f:36:a0:f0:1b:a1:62:c9:50:
91:c5:04:95:1c:f7:5c:a7:a3:aa:27:4b:e0:cb:96:dd:ed:3f:
e3:83:48:b2:ee:85:4b:17:de:62:ce:07:3a:6d:9b:2a:52:f6:
5f:3c:90:d2:6a:4e:aa:53:ac:53:b4:99:62:06:29:04:0e:d6:
e7:38:9e:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:48 2024 by rpki-client on console-ams.rpki-client.org