Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/e1d6b7-555c-4d9b-afe1-e63ce55370eb/1/GG4jeyBWo2ReQxpVvXl7glhL7UA.roa
File: GG4jeyBWo2ReQxpVvXl7glhL7UA.roa (raw, json)
Hash identifier: MTVIHBGGuydL2u1PPKGnFLQiXjJ5xraBeK+ma07pybo=
Subject key identifier: 18:6E:23:7B:20:56:A3:64:5E:43:1A:55:BD:79:7B:82:58:4B:ED:40
Certificate issuer: /CN=9076f77da841b7b94215b6fac2d41a71c2151601
Certificate serial: 018BB86B
Authority key identifier: 90:76:F7:7D:A8:41:B7:B9:42:15:B6:FA:C2:D4:1A:71:C2:15:16:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kHb3fahBt7lCFbb6wtQaccIVFgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/e1d6b7-555c-4d9b-afe1-e63ce55370eb/1/GG4jeyBWo2ReQxpVvXl7glhL7UA.roa
Signing time: Thu 24 Feb 2022 11:47:10 +0000
ROA not before: Thu 24 Feb 2022 11:47:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209010
IP address blocks: 130.193.4.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25933931 (0x18bb86b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9076f77da841b7b94215b6fac2d41a71c2151601
Validity
Not Before: Feb 24 11:47:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=186e237b2056a3645e431a55bd797b82584bed40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:61:51:3e:ae:dc:7a:82:09:c6:8a:05:36:6f:
c6:11:4c:12:4b:b8:bc:c4:1e:9b:e6:4c:4d:0f:ac:
80:9f:aa:40:30:79:fc:6c:38:9a:82:e0:d5:a3:7f:
c3:df:40:5e:6b:2a:f4:a5:42:d7:97:3e:f0:10:81:
8d:27:57:e0:7b:e2:5a:d9:f5:16:ff:ee:01:0d:8b:
2f:0c:6d:a0:b9:57:df:c5:b2:bd:d5:11:83:cb:af:
80:3b:30:24:49:cd:cd:9b:43:1c:23:88:17:5b:50:
cb:96:2f:8e:11:d5:95:79:24:0f:36:35:84:22:22:
c4:da:14:70:42:67:61:3e:7d:bd:6f:fc:00:6e:98:
8a:04:24:f2:5b:0e:2e:a6:d7:6a:f4:15:23:a4:f8:
36:ba:cf:7a:2d:c9:f2:5e:44:bc:b3:da:22:e6:a4:
43:ff:99:08:d8:bd:b9:5d:91:db:8c:92:15:48:9e:
00:76:d9:c8:3d:3f:57:68:5e:ab:4b:24:0f:83:bd:
01:2f:23:a8:a1:58:ad:79:ca:97:34:3e:23:e8:1f:
98:f6:ac:ef:ad:2b:33:0e:bd:11:1b:af:4f:19:0b:
44:c4:ce:c1:d8:79:a6:b1:30:b0:f0:3d:89:47:2a:
87:f2:31:2c:15:6b:8f:8b:b5:24:e5:84:2d:db:c8:
1d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:6E:23:7B:20:56:A3:64:5E:43:1A:55:BD:79:7B:82:58:4B:ED:40
X509v3 Authority Key Identifier:
keyid:90:76:F7:7D:A8:41:B7:B9:42:15:B6:FA:C2:D4:1A:71:C2:15:16:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kHb3fahBt7lCFbb6wtQaccIVFgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e1d6b7-555c-4d9b-afe1-e63ce55370eb/1/GG4jeyBWo2ReQxpVvXl7glhL7UA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e1d6b7-555c-4d9b-afe1-e63ce55370eb/1/kHb3fahBt7lCFbb6wtQaccIVFgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.193.4.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:82:20:0e:03:d7:49:14:26:91:92:59:84:fa:18:8b:bc:05:
b1:af:99:bf:82:8e:9a:7d:85:ba:6e:50:14:b7:43:ad:8a:0c:
c5:cb:eb:72:23:56:c2:33:93:64:14:99:77:b8:9d:ec:26:5d:
0a:3f:47:14:c7:a4:a9:15:72:4e:a0:d3:20:0d:a9:c7:f6:04:
9f:69:43:db:46:df:59:d7:b1:43:1d:42:8d:6e:9c:97:c0:bd:
e9:80:5e:99:d4:cc:42:ab:e9:0b:0b:ce:8e:69:af:dd:d0:a8:
1b:7d:db:31:db:17:2d:ae:9d:1d:5d:78:db:f5:ce:64:a7:59:
d7:0d:55:0e:19:1c:82:e3:e9:7e:47:27:5c:87:67:98:0a:d4:
d2:ed:60:cc:ed:c0:8d:ab:09:75:1a:fd:35:3e:7e:35:d5:cb:
f8:1a:27:d7:c5:13:a8:60:4f:c5:38:da:08:52:90:5e:ba:43:
47:65:a9:67:24:97:27:87:28:f6:1d:e1:aa:12:2a:4c:c4:bc:
f7:9a:09:23:60:19:94:9d:df:04:b8:ef:0c:b2:ad:8f:eb:70:
42:f1:0d:b2:8a:0d:5d:55:48:cc:ac:ff:7e:38:3d:2e:5c:a5:
dd:22:a7:7e:fd:2e:a8:56:a1:88:da:20:49:66:f8:76:42:ac:
1d:8d:45:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:01 2024 by rpki-client on console-ams.rpki-client.org