Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/bkWe4WezxuN_5k39QaiTxfG5uYA.roa
File: bkWe4WezxuN_5k39QaiTxfG5uYA.roa (raw, json)
Hash identifier: rL07oxZELA8DjCwEV/xg6dA9QgjHzul5LvnqOFFZ1sk=
Subject key identifier: 6E:45:9E:E1:67:B3:C6:E3:7F:E6:4D:FD:41:A8:93:C5:F1:B9:B9:80
Certificate issuer: /CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Certificate serial: 0184A501E0AD9F84A87201583A1A48A07BDC
Authority key identifier: 5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/bkWe4WezxuN_5k39QaiTxfG5uYA.roa
Signing time: Wed 23 Nov 2022 15:01:14 +0000
ROA not before: Wed 23 Nov 2022 15:01:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44477
IP address blocks: 193.38.54.0/24 maxlen: 24
193.38.55.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:a5:01:e0:ad:9f:84:a8:72:01:58:3a:1a:48:a0:7b:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Validity
Not Before: Nov 23 15:01:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6e459ee167b3c6e37fe64dfd41a893c5f1b9b980
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:73:b6:66:ec:c9:6e:b3:d2:e2:85:e7:ef:69:
85:5f:1e:22:54:13:5b:49:be:4c:cb:b6:2c:a3:b3:
29:68:7e:22:01:f6:7b:b2:a8:ca:d4:4e:fa:9f:f8:
9b:bc:b5:78:53:89:17:e1:4c:7e:46:f6:bd:66:96:
4f:1c:3c:e5:15:57:1e:0a:a7:32:d1:03:31:a1:38:
31:96:b3:b3:be:9a:55:e2:08:3d:b5:b7:49:5f:e1:
a2:0b:64:25:e9:29:11:ec:d8:f1:28:c9:5c:9a:be:
4f:34:4c:a7:ea:67:2a:a4:75:d8:61:7b:2e:36:25:
cd:33:95:1e:82:1f:e2:30:1b:92:dd:8e:be:cc:f5:
a1:b1:7b:7b:f7:3f:8a:d1:16:3b:64:62:2b:14:4b:
a3:82:85:d4:d6:a6:7a:cb:83:9d:b1:54:87:72:0b:
33:f4:7b:34:d5:12:08:ec:47:84:5e:bc:b1:dd:55:
26:4f:2d:b5:4c:e0:04:29:9b:87:85:eb:c5:e0:99:
9c:53:64:35:8e:ca:db:a6:55:39:39:28:95:39:02:
17:bf:b4:0c:20:ad:b2:76:91:29:6c:37:86:c8:22:
b9:79:3e:51:f5:c3:6d:9b:9d:b4:85:df:2d:44:9a:
09:c7:c7:b5:da:08:f7:a8:d1:90:ac:6e:4b:86:f2:
76:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:45:9E:E1:67:B3:C6:E3:7F:E6:4D:FD:41:A8:93:C5:F1:B9:B9:80
X509v3 Authority Key Identifier:
keyid:5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/bkWe4WezxuN_5k39QaiTxfG5uYA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.38.54.0/23
Signature Algorithm: sha256WithRSAEncryption
0f:b0:7b:3d:1d:ab:9f:77:f1:ea:42:41:6e:aa:eb:3f:be:e5:
0d:cf:62:ee:da:e8:9a:75:93:e7:e2:e5:6a:ac:52:34:95:f7:
36:aa:f9:38:72:c2:c0:44:aa:02:e8:54:f1:cf:cb:1a:6e:11:
c8:dd:21:e5:3f:dc:ba:12:64:9b:cc:65:19:64:50:d5:2b:e8:
03:d7:56:55:b9:78:bc:b1:b7:6c:e6:c4:9c:98:26:8a:d0:d6:
f8:a8:a4:6e:07:f3:e0:4d:30:83:72:bf:88:c9:88:b6:f3:cc:
c7:b9:7d:a4:08:30:5a:84:55:15:6f:25:15:d1:60:0a:73:5f:
80:eb:6e:1b:1c:df:df:28:d7:83:45:7a:01:70:ea:ac:11:e4:
e7:63:02:05:23:27:26:02:08:1f:b8:4f:60:fa:da:d5:f7:35:
6b:5a:a8:fd:d3:5e:03:7c:df:db:c4:a1:d0:2b:d8:ae:b6:db:
e9:dd:c7:56:f7:df:1d:31:38:78:0f:b4:2d:89:cf:03:04:4a:
14:ce:8f:0c:b9:38:5d:70:83:3b:d8:b9:b1:ee:46:e7:f6:7b:
55:09:95:2d:c7:bd:7d:99:26:74:a1:4a:24:23:b0:33:92:7f:
a1:5f:98:03:78:bc:a3:25:77:83:93:48:48:c4:13:fe:83:f1:
6c:fc:ba:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:47 2024 by rpki-client on console-fra.rpki-client.org