Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/1l1uDeDUUjyUo8b1r1dEVbYW9jE.roa
File: 1l1uDeDUUjyUo8b1r1dEVbYW9jE.roa (raw, json)
Hash identifier: /6mqDlmbURjQv+26vdxYXmC81prgpPGOS6fLbTIByUI=
Subject key identifier: D6:5D:6E:0D:E0:D4:52:3C:94:A3:C6:F5:AF:57:44:55:B6:16:F6:31
Certificate issuer: /CN=e4a2b8e90d157ea022f8e700024a93dc356a514d
Certificate serial: 018CC50125CD17E85A3A826364F9F4D8E8FE
Authority key identifier: E4:A2:B8:E9:0D:15:7E:A0:22:F8:E7:00:02:4A:93:DC:35:6A:51:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5KK46Q0VfqAi-OcAAkqT3DVqUU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/1l1uDeDUUjyUo8b1r1dEVbYW9jE.roa
Signing time: Mon 01 Jan 2024 12:30:35 +0000
ROA not before: Mon 01 Jan 2024 12:30:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197450
IP address blocks: 188.132.232.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:25:cd:17:e8:5a:3a:82:63:64:f9:f4:d8:e8:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4a2b8e90d157ea022f8e700024a93dc356a514d
Validity
Not Before: Jan 1 12:30:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d65d6e0de0d4523c94a3c6f5af574455b616f631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:b9:b0:63:4f:b7:bd:69:69:82:99:85:b5:66:
20:e7:48:ca:4b:a4:0b:5f:7a:b6:44:de:de:19:01:
b3:24:99:93:02:51:80:31:de:d7:60:1d:ce:99:2d:
98:3c:03:04:ae:a7:75:4d:0f:24:b8:d2:15:3d:95:
0d:02:43:ec:90:b3:67:dd:4e:eb:81:f5:d1:b8:69:
08:5e:e6:28:03:a2:4d:6c:f0:d9:d9:b8:65:48:59:
67:8b:06:3c:ed:25:bb:74:db:b4:37:2e:7d:a9:0e:
16:41:f4:04:3f:1e:4e:8b:5f:54:14:7a:37:80:48:
9f:61:45:fa:f9:d4:60:93:12:f9:9a:c3:80:32:86:
71:d5:7d:32:bb:77:ce:ca:fd:03:68:c3:74:37:54:
d1:94:df:7c:f2:5a:7c:e9:97:8b:4f:56:2c:58:26:
5e:20:01:4f:28:76:bc:3f:63:3a:52:20:9b:d3:6a:
9d:0c:3d:2d:bb:ce:a5:1e:0c:24:4a:6d:12:ea:51:
91:c0:17:30:84:4a:2c:51:0e:4a:2e:c1:9f:0a:c6:
4e:79:f2:a4:f7:54:82:22:61:46:26:d7:a9:8b:ce:
88:ec:5a:4b:a0:47:91:d0:5c:df:ec:93:48:af:ab:
f1:9e:0d:66:ac:46:fe:9f:29:96:bb:d8:ee:7d:72:
9b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:5D:6E:0D:E0:D4:52:3C:94:A3:C6:F5:AF:57:44:55:B6:16:F6:31
X509v3 Authority Key Identifier:
keyid:E4:A2:B8:E9:0D:15:7E:A0:22:F8:E7:00:02:4A:93:DC:35:6A:51:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5KK46Q0VfqAi-OcAAkqT3DVqUU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/1l1uDeDUUjyUo8b1r1dEVbYW9jE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/5KK46Q0VfqAi-OcAAkqT3DVqUU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.132.232.0/24
Signature Algorithm: sha256WithRSAEncryption
60:ce:e6:3f:b7:92:09:4b:a2:61:e1:cf:a6:0f:93:b5:3e:d7:
b7:e1:ad:ad:b7:27:e1:4f:24:22:cc:d6:2f:f6:43:c8:0d:b6:
14:7f:7a:17:e2:2c:6c:3e:0d:95:9c:a6:91:97:3c:1a:b9:00:
a5:e5:b7:de:68:d6:c9:ef:93:7a:72:9a:6c:07:e3:22:0f:db:
c6:b1:30:93:1e:48:16:35:36:0d:a3:9c:ef:4b:bb:b1:3f:5d:
e6:96:2b:8f:c8:ca:9b:00:16:19:b1:37:d7:a7:6d:61:11:f8:
d9:18:b8:5e:be:5f:06:e3:47:6e:dd:e3:0d:d0:c5:7c:14:a7:
c5:a2:05:36:b3:dd:41:34:c4:96:50:b0:6f:8c:94:d5:15:24:
00:4e:41:df:90:4f:55:9f:f9:32:c8:44:19:2d:37:3d:d3:d0:
13:61:d4:62:90:84:66:d7:f6:eb:00:9a:3c:8e:69:e9:6d:fe:
e5:9b:cc:83:c9:d8:66:f1:80:e5:2b:44:f5:5c:2c:37:c5:2b:
46:d8:08:d3:78:76:1a:8c:de:96:da:f7:94:89:ce:64:41:3c:
f5:94:a1:2e:63:31:c9:06:9f:f9:6b:9f:fe:81:5e:b9:79:b0:
bd:a9:75:ea:d3:70:22:03:a4:f9:de:ab:6f:ca:60:64:6d:3e:
09:22:a8:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 14 15:12:37 2024 by rpki-client on console-fra.rpki-client.org