Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/W9qzjphN8tJ2ZlbNT4KmXzvVRfk.roa
File: W9qzjphN8tJ2ZlbNT4KmXzvVRfk.roa (raw, json)
Hash identifier: eFB+G3cbeFggRKGdR86gaVIc11WiPTe+I6uMzFUuL10=
Subject key identifier: 5B:DA:B3:8E:98:4D:F2:D2:76:66:56:CD:4F:82:A6:5F:3B:D5:45:F9
Certificate issuer: /CN=ada25aafe3a9870e9524afa0265987ed5a5a4da3
Certificate serial: 0742B468
Authority key identifier: AD:A2:5A:AF:E3:A9:87:0E:95:24:AF:A0:26:59:87:ED:5A:5A:4D:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/W9qzjphN8tJ2ZlbNT4KmXzvVRfk.roa
Signing time: Sat 01 Jan 2022 03:57:58 +0000
ROA not before: Sat 01 Jan 2022 03:57:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 52000
IP address blocks: 193.200.16.0/23 maxlen: 23
2a0e:9846::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121812072 (0x742b468)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ada25aafe3a9870e9524afa0265987ed5a5a4da3
Validity
Not Before: Jan 1 03:57:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5bdab38e984df2d2766656cd4f82a65f3bd545f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:39:1c:41:f6:23:23:67:c2:fb:e8:2e:a0:74:
26:4a:b7:7a:6e:40:ac:6e:86:05:a6:06:a8:7c:99:
d0:0e:51:1d:c1:6f:73:36:79:ee:6c:74:71:59:ff:
07:76:37:ab:40:45:da:d3:38:26:68:12:34:47:92:
28:30:17:4f:f9:1b:7a:bc:39:9e:f9:75:6a:a7:d3:
bf:52:10:77:e0:a9:72:52:ee:33:a1:9e:c8:5f:8b:
8f:c9:95:1e:06:18:b7:f4:e3:36:50:17:fc:02:4f:
83:fe:82:51:d7:22:d9:ce:51:3d:85:23:73:2e:66:
61:f3:94:46:74:6c:69:b4:7e:73:ab:ac:1b:f8:31:
49:f7:bf:64:e6:43:8d:8f:e5:54:1b:3f:46:c8:fc:
77:7b:49:3c:65:b7:cc:7e:84:bd:d8:c2:d1:e9:7c:
c9:a8:3a:55:7c:48:38:82:40:47:6f:77:13:e9:b0:
de:7f:a1:0f:41:b4:2e:ed:92:22:2c:e9:0b:a5:b7:
e2:e8:58:60:47:8a:c9:7d:32:97:7a:1e:6a:1e:b4:
d6:96:8a:52:f5:3f:7d:85:fa:98:5c:37:80:27:25:
29:fb:57:ed:2b:68:80:c0:16:a6:84:ba:c5:29:fd:
01:2b:e4:92:dd:f8:aa:92:da:e4:4a:9d:75:1c:b8:
70:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:DA:B3:8E:98:4D:F2:D2:76:66:56:CD:4F:82:A6:5F:3B:D5:45:F9
X509v3 Authority Key Identifier:
keyid:AD:A2:5A:AF:E3:A9:87:0E:95:24:AF:A0:26:59:87:ED:5A:5A:4D:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/W9qzjphN8tJ2ZlbNT4KmXzvVRfk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.200.16.0/23
IPv6:
2a0e:9846::/32
Signature Algorithm: sha256WithRSAEncryption
89:21:ea:2d:3c:9d:f9:df:e2:36:5f:d6:0d:60:c0:31:20:e2:
76:91:df:11:27:05:ba:af:3f:5e:ea:9c:48:da:84:6e:5e:8b:
f1:56:02:1a:8a:d0:d7:a8:44:5f:b4:a9:85:3c:ef:fd:80:d9:
59:41:72:b9:86:3a:03:26:d0:a4:94:45:f9:67:30:05:9d:88:
07:c9:ef:62:4d:a7:d4:84:b3:61:c8:ce:a2:8f:1b:3e:9b:e4:
b1:a9:84:a1:05:15:8f:ba:02:59:d6:85:4d:ed:df:68:e6:06:
f8:df:06:31:be:8c:dc:d4:e4:cc:31:27:6a:95:87:7e:e8:0a:
cb:23:4d:50:66:f8:71:2f:84:03:aa:1b:17:79:d9:d4:40:f7:
5a:cf:48:4a:f1:e2:65:82:2b:81:58:2a:4a:24:f2:40:4b:19:
2e:51:bb:d6:38:e4:e1:06:2c:38:98:8f:de:0a:63:0d:9b:06:
db:12:53:31:c7:9c:8c:d0:eb:e0:f7:38:6f:a9:d0:e1:ff:f2:
05:59:a6:5f:60:9c:50:dc:83:4e:d1:b4:ba:ac:3e:20:2b:98:
df:31:12:76:ac:03:ad:b0:8f:7e:ff:f8:e9:3a:c2:83:42:e2:
ea:ee:e1:82:62:92:66:22:e6:dc:d7:5d:f4:7b:d1:78:2c:47:
57:b2:0b:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:01 2024 by rpki-client on console-fra.rpki-client.org