Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/DhNMdjf-XsIkqtPszLAJo73fQTQ.roa
File: DhNMdjf-XsIkqtPszLAJo73fQTQ.roa (raw, json)
Hash identifier: gRK7wtifvrYBtvTm4hP8T34YSX6p4lj7pRMFJGpIJhA=
Subject key identifier: 0E:13:4C:76:37:FE:5E:C2:24:AA:D3:EC:CC:B0:09:A3:BD:DF:41:34
Certificate issuer: /CN=e4a2b8e90d157ea022f8e700024a93dc356a514d
Certificate serial: 018C265A4D71C450C7DD0FD2A4A23ACEFD9A
Authority key identifier: E4:A2:B8:E9:0D:15:7E:A0:22:F8:E7:00:02:4A:93:DC:35:6A:51:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5KK46Q0VfqAi-OcAAkqT3DVqUU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/DhNMdjf-XsIkqtPszLAJo73fQTQ.roa
Signing time: Fri 01 Dec 2023 17:08:21 +0000
ROA not before: Fri 01 Dec 2023 17:08:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197450
IP address blocks: 188.132.232.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:26:5a:4d:71:c4:50:c7:dd:0f:d2:a4:a2:3a:ce:fd:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4a2b8e90d157ea022f8e700024a93dc356a514d
Validity
Not Before: Dec 1 17:08:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0e134c7637fe5ec224aad3ecccb009a3bddf4134
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:57:54:3f:8c:a2:a0:7c:40:b9:c6:19:1f:ee:
de:77:2a:64:89:d3:93:22:6e:ca:05:5c:78:77:34:
14:b0:9e:da:6f:d7:6e:74:1b:4e:62:40:63:2c:fb:
ae:25:03:b5:fb:49:9c:9c:13:34:38:da:46:bd:0e:
c6:a7:9b:60:e8:c4:3e:6b:cd:a1:8d:b9:3d:51:d1:
a5:26:7b:c4:45:31:c5:b7:02:06:cf:3e:f9:ca:3b:
83:b4:9c:6e:73:ad:b0:ee:80:9e:37:2f:de:c9:43:
0b:68:62:ed:15:b1:3f:12:28:31:82:ac:a4:c7:e2:
11:ac:8b:ea:68:e1:5a:b7:a0:3b:d1:51:5f:21:b1:
3f:3d:98:b6:b0:b3:41:26:f6:0e:61:67:f0:ac:0d:
cc:cf:12:4e:8a:72:51:18:e6:17:a1:d3:56:33:65:
9a:36:a9:96:d1:72:8d:73:62:8d:b5:a2:f0:aa:87:
b2:e9:ca:af:f3:6a:36:88:62:28:9e:57:cf:d7:4d:
1e:6a:f8:6d:36:30:ea:b0:74:0e:d1:dc:b7:f6:87:
bc:61:df:c7:d9:3f:c9:c9:d4:9e:65:c4:00:5c:69:
f8:b3:21:28:28:76:31:dc:8c:9b:80:f6:54:b2:86:
b5:31:ba:5e:b9:e8:37:05:61:81:fe:9c:2e:87:43:
5b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:13:4C:76:37:FE:5E:C2:24:AA:D3:EC:CC:B0:09:A3:BD:DF:41:34
X509v3 Authority Key Identifier:
keyid:E4:A2:B8:E9:0D:15:7E:A0:22:F8:E7:00:02:4A:93:DC:35:6A:51:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5KK46Q0VfqAi-OcAAkqT3DVqUU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/DhNMdjf-XsIkqtPszLAJo73fQTQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/5KK46Q0VfqAi-OcAAkqT3DVqUU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.132.232.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:0d:9c:c9:19:73:9b:3d:31:ce:1c:fa:bf:e9:01:da:0d:fd:
fc:da:a9:11:69:ee:71:ca:00:09:09:45:8f:9e:11:32:06:98:
e0:35:a5:73:89:42:a1:17:df:d4:1c:3a:89:0a:32:5c:d6:a3:
23:92:5c:50:9e:9b:33:4f:50:b2:8d:5c:63:55:db:5b:bf:0c:
f8:36:37:f5:55:36:0d:cf:01:8a:f1:c9:4b:f9:17:e7:8e:16:
f4:58:05:72:33:cc:37:fe:98:b4:09:28:3b:c7:ef:56:f6:f5:
43:27:ff:e8:f6:c2:03:4a:dd:90:d4:7f:ba:18:5b:b4:d7:c4:
89:dd:f6:9b:e7:61:85:3d:a4:f4:c2:65:36:7c:69:9a:99:c2:
01:01:19:43:07:06:18:b8:cd:aa:82:ac:e8:ae:a2:56:12:87:
30:e5:c5:0b:31:f6:5e:64:25:b3:fb:a9:01:b2:ec:da:29:0c:
71:ec:a0:9e:81:77:bc:1e:36:19:10:cc:03:72:5e:d7:1a:db:
5d:b0:11:66:ef:2b:5a:76:da:50:49:7c:a3:c7:92:9a:d4:84:
53:2b:23:9e:bb:6d:0f:8f:3a:8e:1b:85:79:08:f4:e0:ea:89:
58:b8:58:d1:01:d5:96:a6:ef:39:ae:3b:6c:fa:2a:f0:3f:1f:
ae:15:21:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:01 2024 by rpki-client on console-fra.rpki-client.org