Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/UHXTjXJxC4fU07SiPB3-W-u_OWw.roa
File: UHXTjXJxC4fU07SiPB3-W-u_OWw.roa (raw, json)
Hash identifier: Xp1/bkWOW+HFI+LRd1Hq3GzoMtePGtVaqZIi1n/2Bto=
Subject key identifier: 50:75:D3:8D:72:71:0B:87:D4:D3:B4:A2:3C:1D:FE:5B:EB:BF:39:6C
Certificate issuer: /CN=e4a2b8e90d157ea022f8e700024a93dc356a514d
Certificate serial: 018CC501271DD2FD3CC5C6F09F9D6182A445
Authority key identifier: E4:A2:B8:E9:0D:15:7E:A0:22:F8:E7:00:02:4A:93:DC:35:6A:51:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5KK46Q0VfqAi-OcAAkqT3DVqUU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/UHXTjXJxC4fU07SiPB3-W-u_OWw.roa
Signing time: Mon 01 Jan 2024 12:30:36 +0000
ROA not before: Mon 01 Jan 2024 12:30:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216146
IP address blocks: 188.132.240.0/24 maxlen: 24
31.210.41.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:27:1d:d2:fd:3c:c5:c6:f0:9f:9d:61:82:a4:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4a2b8e90d157ea022f8e700024a93dc356a514d
Validity
Not Before: Jan 1 12:30:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5075d38d72710b87d4d3b4a23c1dfe5bebbf396c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:9d:49:b9:37:76:ab:ef:43:f5:26:a1:57:09:
b7:f5:f5:92:a6:8a:65:4f:43:66:91:89:17:ec:b5:
38:ea:0d:ce:63:d2:ad:68:27:26:0c:57:35:01:f3:
ff:37:77:2f:52:e4:fb:50:d8:be:f5:17:ab:aa:18:
03:05:f9:ec:c8:28:7b:54:63:77:8b:e6:66:33:84:
74:3d:74:d0:1d:c2:71:88:31:01:3a:2c:84:44:b6:
60:75:61:7f:6d:20:94:56:f9:06:5e:37:25:e1:1c:
5b:a0:1b:0e:b4:fe:89:88:b7:b3:75:5a:ca:39:61:
58:92:57:38:76:c7:9d:03:b6:29:a2:37:b5:49:0d:
89:d1:5b:ba:f2:1f:c4:d6:27:aa:8d:c5:b8:5c:c0:
95:93:bc:49:e5:e8:96:7b:09:51:2c:4e:ef:f0:41:
5c:c0:ac:b1:8e:7c:f3:4f:c6:a7:ff:6f:a0:ef:e2:
c5:cf:06:15:26:33:ba:da:65:66:b1:80:09:d4:c8:
23:b5:f8:e7:ca:86:d5:b4:0c:fb:45:e3:c3:ab:35:
bc:7e:99:80:19:2e:79:67:c5:49:67:80:55:1d:58:
71:e6:e2:d1:80:62:52:13:9c:60:79:ea:8c:40:80:
bb:23:4f:d8:26:11:51:5c:d3:b4:95:bb:79:de:25:
1e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:75:D3:8D:72:71:0B:87:D4:D3:B4:A2:3C:1D:FE:5B:EB:BF:39:6C
X509v3 Authority Key Identifier:
keyid:E4:A2:B8:E9:0D:15:7E:A0:22:F8:E7:00:02:4A:93:DC:35:6A:51:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5KK46Q0VfqAi-OcAAkqT3DVqUU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/UHXTjXJxC4fU07SiPB3-W-u_OWw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/5KK46Q0VfqAi-OcAAkqT3DVqUU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.41.0/24
188.132.240.0/24
Signature Algorithm: sha256WithRSAEncryption
d6:79:6c:d7:9a:95:06:e7:0c:81:18:c7:fd:ed:7b:c1:b0:53:
5d:8a:21:81:22:df:bd:5e:22:ff:94:e1:f1:00:e3:f0:2a:01:
e9:07:c8:b3:8c:52:41:57:de:a5:4d:c7:65:f0:e7:d2:fc:95:
45:ad:6e:da:7b:06:7f:82:9d:f5:c4:03:4f:33:f4:d4:46:0a:
2c:77:11:f9:27:34:c2:c3:86:de:2e:b5:60:cf:77:cd:07:7e:
11:f4:c5:59:d9:f3:79:e4:b5:43:a1:a4:65:e3:7a:e3:2d:05:
e3:fa:a3:af:68:ff:a0:33:72:e0:c6:33:b5:37:0e:40:3c:a8:
15:91:52:4f:ec:4e:e0:7b:51:11:ac:71:06:e0:f5:fb:b0:fe:
a7:8f:f4:6b:d7:ef:d8:81:34:d6:e1:00:9a:b8:0e:19:d5:53:
6f:18:97:fa:f1:c3:f6:fb:47:aa:ab:6f:25:34:b1:7a:2d:d2:
73:32:83:dc:2b:c2:8c:29:0a:a0:36:21:0e:12:c0:85:04:b7:
47:43:ad:29:70:76:19:f4:d6:8a:21:ec:8f:a2:06:61:d6:76:
00:a4:01:e1:dc:65:04:09:1d:52:a5:e0:09:48:0e:4b:80:31:
c0:dd:ab:d2:3b:ff:cd:c0:66:24:a0:74:7c:fd:7c:df:bd:b7:
02:73:74:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 14 15:10:46 2024 by rpki-client on console-ams.rpki-client.org