Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/KcYnFHb_KOZxyECN1ZQeLmADX4k.roa
File: KcYnFHb_KOZxyECN1ZQeLmADX4k.roa (raw, json)
Hash identifier: k2gGbqp9dajNm15x5mhevC2twiT6F7by/DEBi/U0Wno=
Subject key identifier: 29:C6:27:14:76:FF:28:E6:71:C8:40:8D:D5:94:1E:2E:60:03:5F:89
Certificate issuer: /CN=9c542f5df3c1acb857fd50eeb016eed07385ff8c
Certificate serial: 018CDE18ACD0756C1FD013F01F697A93CFF1
Authority key identifier: 9C:54:2F:5D:F3:C1:AC:B8:57:FD:50:EE:B0:16:EE:D0:73:85:FF:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/KcYnFHb_KOZxyECN1ZQeLmADX4k.roa
Signing time: Sat 06 Jan 2024 09:26:48 +0000
ROA not before: Sat 06 Jan 2024 09:26:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41236
IP address blocks: 93.190.122.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:de:18:ac:d0:75:6c:1f:d0:13:f0:1f:69:7a:93:cf:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c542f5df3c1acb857fd50eeb016eed07385ff8c
Validity
Not Before: Jan 6 09:26:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=29c6271476ff28e671c8408dd5941e2e60035f89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:71:63:52:a6:12:7f:44:fd:9d:a2:59:1a:67:
d1:19:4c:03:49:b5:89:be:ee:45:8b:f7:61:0c:f8:
16:59:18:ed:6a:79:21:7e:d1:06:03:0e:a1:7e:56:
cd:85:c6:ec:49:3c:1e:a5:50:8c:b8:bf:01:af:f2:
db:70:cc:85:e1:63:fe:3a:e0:99:7c:9c:7e:c6:a2:
06:73:8d:77:d8:ff:68:a4:e8:b9:33:71:c3:72:62:
9e:6d:95:fb:2e:bd:90:e4:a4:a9:81:7d:29:ba:6e:
6e:62:de:ac:9f:3d:b2:49:75:21:5b:2f:5e:9e:18:
2c:cd:4b:31:fb:a5:d2:f3:9a:a3:3a:e1:1f:48:70:
70:e6:3c:5f:3c:23:ab:90:f1:8a:49:0d:73:33:cf:
9f:67:c9:01:00:29:40:9b:15:22:ef:29:e9:55:d1:
41:e2:04:9c:2a:fe:b0:b0:42:9b:84:ba:df:bd:01:
03:b2:5b:38:8c:45:f6:67:04:a5:d1:34:b2:07:46:
6b:c8:72:55:dd:d4:78:b2:3b:b0:8d:5a:70:85:f7:
c0:75:b8:b8:de:45:b0:2d:5b:31:c0:14:fb:a4:5c:
7d:29:16:69:36:e6:43:59:d3:97:38:c5:23:70:23:
c4:34:f6:ab:4e:04:80:59:4e:aa:83:c3:b3:25:27:
56:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:C6:27:14:76:FF:28:E6:71:C8:40:8D:D5:94:1E:2E:60:03:5F:89
X509v3 Authority Key Identifier:
keyid:9C:54:2F:5D:F3:C1:AC:B8:57:FD:50:EE:B0:16:EE:D0:73:85:FF:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/KcYnFHb_KOZxyECN1ZQeLmADX4k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.190.122.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:91:23:9c:3b:50:b7:70:cf:4b:8e:50:df:0e:06:2e:91:51:
25:5f:ee:d6:0c:3e:d6:2c:00:86:d4:56:86:74:c2:b1:83:0d:
5a:6e:51:f9:ea:49:0e:41:c1:59:f6:2c:db:72:13:f1:19:a8:
a7:58:4a:b8:61:76:38:ba:33:d7:8a:75:6f:bf:a1:b3:1f:e4:
04:23:3e:c9:21:f6:5e:35:07:8a:8c:6a:fa:19:28:c0:0e:e2:
d7:92:b1:1f:67:05:23:f9:0d:08:af:55:43:e0:68:0d:5c:72:
26:f4:69:26:55:e3:9a:be:f8:3e:4c:82:80:cb:5a:0d:4e:b3:
49:80:bd:a9:14:b0:8a:31:9a:5c:15:70:ea:bc:a0:f6:35:a8:
83:92:fc:f4:c9:ea:fb:1f:28:5c:48:51:5c:cd:c2:4c:04:61:
d8:83:56:11:47:18:a6:df:56:04:ee:4c:fc:7e:e0:f2:aa:41:
30:f5:f5:f7:e9:8e:b2:40:2c:45:bd:1b:a7:83:c9:c4:6c:64:
be:d7:14:12:9d:83:e7:e5:4b:07:d2:c6:8b:cc:0d:07:48:c6:
07:e9:e0:36:2d:b5:74:8b:8d:5a:a2:5c:c6:eb:73:12:b9:aa:
d7:f2:85:2c:a7:66:d0:9a:89:82:1b:ff:72:c5:7c:6c:a8:02:
5f:10:0f:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:40:39 2025 by rpki-client