Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/Finu92wed9--ZxmnYsLtOHXdRGA.roa
File: Finu92wed9--ZxmnYsLtOHXdRGA.roa (raw, json)
Hash identifier: IvQuZE3SmHJN3S+w00MUIqJ9bF02JXZAABRx/ncrwog=
Subject key identifier: 16:29:EE:F7:6C:1E:77:DF:BE:67:19:A7:62:C2:ED:38:75:DD:44:60
Certificate issuer: /CN=ada25aafe3a9870e9524afa0265987ed5a5a4da3
Certificate serial: 018A0343BDB2A51683A3DE4CF95248E3E68F
Authority key identifier: AD:A2:5A:AF:E3:A9:87:0E:95:24:AF:A0:26:59:87:ED:5A:5A:4D:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/Finu92wed9--ZxmnYsLtOHXdRGA.roa
Signing time: Thu 17 Aug 2023 11:31:25 +0000
ROA not before: Thu 17 Aug 2023 11:31:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62005
IP address blocks: 193.200.16.0/23 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:03:43:bd:b2:a5:16:83:a3:de:4c:f9:52:48:e3:e6:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ada25aafe3a9870e9524afa0265987ed5a5a4da3
Validity
Not Before: Aug 17 11:31:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1629eef76c1e77dfbe6719a762c2ed3875dd4460
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:50:3a:05:b7:ef:7e:2c:3c:32:f2:8e:09:f4:
36:1c:5b:13:e8:7f:73:48:ab:d1:7d:45:0f:bb:7a:
ca:b0:a7:d1:20:18:74:0b:9c:1b:b6:d7:11:8f:6b:
b6:43:11:3b:f7:e6:00:11:69:0e:fc:d4:29:d8:0f:
c6:17:e6:40:05:32:57:da:0d:96:9c:12:6f:94:53:
f0:4e:e0:52:2c:c8:d2:c8:44:87:ec:c0:1a:4e:f0:
49:cc:90:ae:1f:db:23:5e:e0:88:0b:30:19:36:a6:
48:28:3e:05:d1:ea:cb:b7:a0:61:7b:a8:c4:ed:c2:
f5:12:06:b9:d6:6f:a5:a8:7d:25:dd:1c:28:0f:46:
e3:b8:2a:1e:a3:2b:ce:67:85:23:1a:e0:50:52:cd:
32:61:7c:16:81:76:cd:bb:12:4d:a9:ce:03:b9:b6:
19:3d:81:30:91:7a:05:bc:3f:d3:b4:be:fc:ca:48:
7d:9b:d4:22:bc:17:4d:f1:83:3e:97:ce:00:12:73:
05:f9:0c:3a:80:f7:9b:07:9a:43:f1:4e:df:1c:13:
0a:46:da:d7:74:8e:f6:4d:28:53:c0:2a:62:ab:9a:
00:98:4f:13:df:58:06:d5:87:94:ed:0b:65:06:02:
01:85:cb:eb:cf:cf:11:ef:69:17:43:dd:00:44:2f:
b4:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:29:EE:F7:6C:1E:77:DF:BE:67:19:A7:62:C2:ED:38:75:DD:44:60
X509v3 Authority Key Identifier:
keyid:AD:A2:5A:AF:E3:A9:87:0E:95:24:AF:A0:26:59:87:ED:5A:5A:4D:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/Finu92wed9--ZxmnYsLtOHXdRGA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.200.16.0/23
Signature Algorithm: sha256WithRSAEncryption
7a:28:26:40:56:7b:83:91:0c:24:9b:3b:36:b9:6d:51:ea:35:
eb:0f:f5:28:0e:90:05:64:56:24:6d:63:88:6a:3b:c9:6b:f9:
22:e3:f7:9a:d2:a9:b5:39:0d:e6:97:81:28:b5:18:9d:56:bd:
06:ec:31:6b:62:bb:5e:fa:ab:d6:b9:10:20:4a:84:a1:c0:2d:
ba:12:43:09:b7:30:7e:07:0b:f8:7a:00:51:e3:1d:2c:7c:f3:
c7:f6:32:f3:b1:42:6d:bc:92:81:de:30:04:82:64:70:77:57:
88:ca:e8:3a:cd:84:77:67:db:63:64:c6:c8:57:e3:06:79:4b:
f4:73:4c:24:a9:e2:2d:0f:1f:67:6c:e0:19:b3:8e:87:d4:ad:
30:58:69:2d:0b:2d:59:39:3d:7b:89:78:0c:3b:57:9f:2a:78:
22:d7:1f:53:40:8f:bc:2f:97:32:0d:0d:81:16:7b:fd:79:37:
07:f3:80:b9:42:8a:35:c7:01:f4:f8:99:ed:29:61:82:45:19:
60:d1:3c:67:c9:f1:8b:e4:cf:c7:a7:52:77:bc:31:ef:1f:9d:
74:43:37:98:c4:25:a0:02:a4:5a:9a:8e:d7:92:76:ee:d4:85:
62:73:27:a2:15:69:69:e0:d2:ad:9d:d4:3c:bc:e7:ac:b2:ca:
d0:db:6a:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:01 2024 by rpki-client on console-fra.rpki-client.org