Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/UQkgAH1MuRwoEdDCrP6sbqAlORs.roa
File: UQkgAH1MuRwoEdDCrP6sbqAlORs.roa (raw, json)
Hash identifier: ZVoHV6VC5Czr4KKPLm3aREXjQBCH5YDg+GeXv1L3CGw=
Subject key identifier: 51:09:20:00:7D:4C:B9:1C:28:11:D0:C2:AC:FE:AC:6E:A0:25:39:1B
Certificate issuer: /CN=e4a2b8e90d157ea022f8e700024a93dc356a514d
Certificate serial: 018C399944D6EECA50A81A25F84D3D91B455
Authority key identifier: E4:A2:B8:E9:0D:15:7E:A0:22:F8:E7:00:02:4A:93:DC:35:6A:51:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5KK46Q0VfqAi-OcAAkqT3DVqUU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/UQkgAH1MuRwoEdDCrP6sbqAlORs.roa
Signing time: Tue 05 Dec 2023 10:49:55 +0000
ROA not before: Tue 05 Dec 2023 10:49:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 215902
IP address blocks: 188.132.229.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:39:99:44:d6:ee:ca:50:a8:1a:25:f8:4d:3d:91:b4:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4a2b8e90d157ea022f8e700024a93dc356a514d
Validity
Not Before: Dec 5 10:49:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=510920007d4cb91c2811d0c2acfeac6ea025391b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2b:2d:da:07:b1:25:10:19:51:e4:02:ff:ca:
f2:02:e3:43:8a:e4:0f:57:41:fd:1d:f3:47:a7:de:
26:87:d5:29:0c:6b:28:01:f6:db:2c:be:da:04:2a:
83:fc:55:cd:c7:21:22:77:32:03:f5:25:37:06:7c:
9c:07:84:42:9b:4b:3a:99:e5:4a:5b:a2:74:d8:fa:
f9:22:b5:ee:38:23:3d:bd:4e:54:1a:7d:b6:1d:e0:
18:1c:36:f6:3e:92:2f:5e:cf:31:84:4e:07:dc:29:
7c:02:9d:9e:75:39:2a:0e:93:2c:10:af:0c:e3:90:
22:3d:4c:a5:be:08:df:c2:d5:24:bf:0b:3e:1f:0d:
2a:a8:5c:eb:a2:a7:b0:c0:4d:99:47:f2:f5:81:a2:
d6:cc:de:bc:4e:a8:db:35:7e:e3:dc:f5:64:a0:0f:
d4:ca:e3:8f:a1:bb:f6:03:6b:d5:92:dd:09:ae:9f:
2f:f6:91:8a:49:e7:84:99:f8:cc:44:24:6d:7f:c7:
d4:9d:86:e0:23:a6:a8:84:c0:2e:ee:d8:d8:75:b9:
ee:b9:8f:08:2d:52:7c:ec:8d:4e:b5:38:df:56:77:
35:c9:d2:6b:8e:4a:bd:03:43:5d:19:6a:49:4a:cd:
e1:0a:9b:73:8c:d9:1a:9a:97:0e:46:01:c8:31:c0:
dc:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:09:20:00:7D:4C:B9:1C:28:11:D0:C2:AC:FE:AC:6E:A0:25:39:1B
X509v3 Authority Key Identifier:
keyid:E4:A2:B8:E9:0D:15:7E:A0:22:F8:E7:00:02:4A:93:DC:35:6A:51:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5KK46Q0VfqAi-OcAAkqT3DVqUU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/UQkgAH1MuRwoEdDCrP6sbqAlORs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/5KK46Q0VfqAi-OcAAkqT3DVqUU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.132.229.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:00:5c:61:71:9a:e2:b9:4e:2f:55:ca:3f:df:5b:5d:1a:fc:
5e:c2:e9:53:f5:5c:75:81:25:16:f2:b4:0c:94:36:0c:ce:35:
72:8b:e6:ed:71:5d:ca:14:4b:56:39:63:39:c2:94:b2:b8:fe:
6f:fc:ab:d9:12:8d:6b:a3:d8:f6:17:e0:bc:99:d9:1e:8d:64:
d2:57:d1:a3:cf:92:d8:b5:51:e7:dd:52:d1:54:60:db:cc:e3:
ba:3c:50:b9:8f:a7:d9:d8:fd:6b:33:65:00:ae:a0:5b:95:4a:
a6:8a:39:6b:2a:b8:c4:c5:1f:22:e6:eb:00:9c:1b:0e:f7:2d:
d1:44:83:4c:2e:d9:a7:f8:b6:47:86:c7:5c:41:50:c6:05:5b:
ac:b9:c7:cc:35:11:df:99:d6:88:8d:91:de:bb:2f:88:35:5e:
df:15:40:e4:14:6b:48:b6:ae:21:ad:3b:0a:99:e4:42:cf:fb:
66:87:38:69:90:ad:93:7b:0b:29:f0:4c:fc:ef:a6:b7:44:30:
1a:86:fa:f8:32:29:cd:bd:b3:b3:11:3b:13:c2:e2:91:3e:a8:
3a:9c:ae:77:a2:6f:84:a7:d6:55:48:23:fb:94:1f:ea:09:f8:
08:e3:ea:35:ba:76:03:9e:2f:9e:3b:95:b8:a2:d7:e4:89:2c:
2b:d2:eb:a2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYw5mUTW7spQqBol+E09kbRVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0YTJiOGU5MGQxNTdlYTAyMmY4ZTcwMDAyNGE5M2RjMzU2
YTUxNGQwHhcNMjMxMjA1MTA0OTU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MTA5MjAwMDdkNGNiOTFjMjgxMWQwYzJhY2ZlYWM2ZWEwMjUzOTFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvyst2gexJRAZUeQC/8ryAuNDiuQP
V0H9HfNHp94mh9UpDGsoAfbbLL7aBCqD/FXNxyEidzID9SU3BnycB4RCm0s6meVK
W6J02Pr5IrXuOCM9vU5UGn22HeAYHDb2PpIvXs8xhE4H3Cl8Ap2edTkqDpMsEK8M
45AiPUylvgjfwtUkvws+Hw0qqFzroqewwE2ZR/L1gaLWzN68TqjbNX7j3PVkoA/U
yuOPobv2A2vVkt0Jrp8v9pGKSeeEmfjMRCRtf8fUnYbgI6aohMAu7tjYdbnuuY8I
LVJ87I1OtTjfVnc1ydJrjkq9A0NdGWpJSs3hCptzjNkampcORgHIMcDc1QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFEJIAB9TLkcKBHQwqz+rG6gJTkbMB8GA1UdIwQY
MBaAFOSiuOkNFX6gIvjnAAJKk9w1alFNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUtLNDZRMFZmcUFpLU9jQUFrcVQzRFZxVVUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny82OTllODUtMTAyNy00YzdlLThhZTct
ZGY0YTJlNzYwY2NiLzEvVVFrZ0FIMU11UndvRWREQ3JQNnNicUFsT1JzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny82OTllODUtMTAyNy00YzdlLThhZTctZGY0YTJlNzYwY2Ni
LzEvNUtLNDZRMFZmcUFpLU9jQUFrcVQzRFZxVVUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvITlMA0G
CSqGSIb3DQEBCwUAA4IBAQC2AFxhcZriuU4vVco/31tdGvxewulT9Vx1gSUW8rQM
lDYMzjVyi+btcV3KFEtWOWM5wpSyuP5v/KvZEo1ro9j2F+C8mdkejWTSV9Gjz5LY
tVHn3VLRVGDbzOO6PFC5j6fZ2P1rM2UArqBblUqmijlrKrjExR8i5usAnBsO9y3R
RINMLtmn+LZHhsdcQVDGBVusucfMNRHfmdaIjZHeuy+INV7fFUDkFGtItq4hrTsK
meRCz/tmhzhpkK2Tewsp8Ez876a3RDAahvr4MinNvbOzETsTwuKRPqg6nK53om+E
p9ZVSCP7lB/qCfgI4+o1unYDni+eO5W4otfkiSwr0uui
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:53 2024 by rpki-client on console-ams.rpki-client.org