Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/jViur9IwOMjTMykVKp1P82tZmj8.roa
File: jViur9IwOMjTMykVKp1P82tZmj8.roa (raw, json)
Hash identifier: rS6orTcQGTJf8VSQ17+zfVcbwFOZRFBHY9Q0NS/hd8w=
Subject key identifier: 8D:58:AE:AF:D2:30:38:C8:D3:33:29:15:2A:9D:4F:F3:6B:59:9A:3F
Certificate issuer: /CN=e4a2b8e90d157ea022f8e700024a93dc356a514d
Certificate serial: 018D41D459028219F6D89F79DA997A991C04
Authority key identifier: E4:A2:B8:E9:0D:15:7E:A0:22:F8:E7:00:02:4A:93:DC:35:6A:51:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5KK46Q0VfqAi-OcAAkqT3DVqUU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/jViur9IwOMjTMykVKp1P82tZmj8.roa
Signing time: Thu 25 Jan 2024 18:14:11 +0000
ROA not before: Thu 25 Jan 2024 18:14:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61135
IP address blocks: 188.132.190.0/24 maxlen: 24
212.68.55.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:41:d4:59:02:82:19:f6:d8:9f:79:da:99:7a:99:1c:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4a2b8e90d157ea022f8e700024a93dc356a514d
Validity
Not Before: Jan 25 18:14:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8d58aeafd23038c8d33329152a9d4ff36b599a3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:0a:f6:04:87:87:2c:17:78:12:fe:98:c7:e1:
30:2e:6a:c8:ef:2b:b7:87:a2:24:b6:db:fd:fd:22:
0e:91:0e:67:e1:0c:1a:1e:93:e9:0f:54:30:81:7f:
74:86:0b:d2:32:17:40:89:bc:ca:cf:9d:fb:6a:17:
dc:84:ef:9e:74:ed:8a:a1:b3:fb:3b:cf:f8:d9:fc:
9b:c0:48:1a:ed:0b:91:01:9c:2c:4d:74:59:66:e7:
cb:a9:c0:b4:67:8a:15:2b:91:ae:da:b0:61:1a:b8:
46:e5:e8:65:80:da:7f:85:fa:e2:c6:bf:42:28:76:
01:06:5b:a0:cd:55:c2:fb:e8:92:8e:80:64:d5:12:
61:1e:0c:96:ed:06:a4:48:7e:3d:cd:60:6e:25:18:
34:99:8f:b9:bb:a5:e6:61:5d:e3:b2:2d:37:80:de:
27:72:09:c1:c8:18:66:5c:25:a2:e8:16:a9:cc:d3:
29:42:82:ad:f2:33:2c:e6:37:b5:7b:cc:aa:08:9b:
1e:73:da:71:39:67:8d:a3:e7:04:6f:bc:3a:74:a0:
3b:0a:45:83:05:fe:79:18:9c:c5:08:b8:32:19:db:
28:a1:85:43:24:01:26:63:8d:d5:c8:54:05:8f:fa:
7b:99:d0:4f:90:b8:9d:cc:90:53:d9:eb:b6:e4:eb:
e7:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:58:AE:AF:D2:30:38:C8:D3:33:29:15:2A:9D:4F:F3:6B:59:9A:3F
X509v3 Authority Key Identifier:
keyid:E4:A2:B8:E9:0D:15:7E:A0:22:F8:E7:00:02:4A:93:DC:35:6A:51:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5KK46Q0VfqAi-OcAAkqT3DVqUU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/jViur9IwOMjTMykVKp1P82tZmj8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/5KK46Q0VfqAi-OcAAkqT3DVqUU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.132.190.0/24
212.68.55.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:6e:73:2c:95:bd:9c:76:a8:b1:16:39:4d:ef:5d:80:a8:af:
8d:50:8f:11:f7:bd:49:82:f1:c4:06:a7:97:8f:98:26:42:58:
2b:9b:a2:88:f5:50:a2:ed:5c:6f:20:38:5b:85:f5:b9:9c:8e:
ba:26:29:73:25:99:a5:18:42:ab:8c:da:fc:7b:aa:c9:a2:40:
18:d2:e8:30:a6:49:34:50:94:f4:5a:fc:4c:9f:0c:49:95:23:
c0:4d:47:d3:0b:6f:81:a5:3e:2a:a1:b1:c5:eb:b2:37:9b:df:
c0:72:a2:a8:42:05:26:18:1b:0d:81:e8:8a:f6:f7:0c:dc:e8:
26:22:1a:74:cf:43:9e:e7:b7:f6:ee:06:7c:fd:61:61:3d:ab:
50:0c:76:c2:f4:ee:e0:cc:fe:9e:db:7a:0f:ff:15:66:25:a0:
c5:45:3c:27:a0:fd:2c:1f:f6:fe:43:80:c7:10:62:ca:5f:be:
30:71:d2:1c:50:60:f4:39:33:44:d9:05:45:8b:31:0d:a8:1e:
75:d4:37:21:a1:4f:12:34:0a:09:1f:46:11:5c:14:9c:c5:2e:
b5:70:c7:e7:78:d9:99:15:d2:70:8c:bb:fc:ac:3d:67:28:fd:
93:fa:13:8c:eb:dc:22:35:b0:ae:5b:24:6f:19:c6:12:2e:17:
a0:aa:cd:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 14 15:12:37 2024 by rpki-client on console-fra.rpki-client.org