Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/tjhVZ8owazF5X9HU21nXD9A6rKY.roa
File: tjhVZ8owazF5X9HU21nXD9A6rKY.roa (raw, json)
Hash identifier: KFTHJO0c1EMx0aoIVN/2ueC+Jb7xt5l7ErEvfkeDHS8=
Subject key identifier: B6:38:55:67:CA:30:6B:31:79:5F:D1:D4:DB:59:D7:0F:D0:3A:AC:A6
Certificate issuer: /CN=2c96946c501ddf48696da2cf110fdceb286fac98
Certificate serial: 018CC86F2E8846A072DF11ED8609EBD7CFA4
Authority key identifier: 2C:96:94:6C:50:1D:DF:48:69:6D:A2:CF:11:0F:DC:EB:28:6F:AC:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LJaUbFAd30hpbaLPEQ_c6yhvrJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/tjhVZ8owazF5X9HU21nXD9A6rKY.roa
Signing time: Tue 02 Jan 2024 04:29:38 +0000
ROA not before: Tue 02 Jan 2024 04:29:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42812
IP address blocks: 193.202.75.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:2e:88:46:a0:72:df:11:ed:86:09:eb:d7:cf:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c96946c501ddf48696da2cf110fdceb286fac98
Validity
Not Before: Jan 2 04:29:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b6385567ca306b31795fd1d4db59d70fd03aaca6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b0:4e:9b:03:be:23:de:62:34:6a:a1:15:cc:
7a:be:40:39:d7:b2:60:8c:38:0a:d0:d7:c1:e6:72:
66:00:1a:79:96:a8:4b:95:30:1f:a9:42:16:46:58:
e9:47:11:f1:75:f3:31:21:54:8f:49:46:65:4b:d1:
ed:c8:c9:26:31:a4:11:33:f5:05:2f:4c:7a:10:01:
e1:f3:88:00:42:56:06:ad:53:50:9b:21:ff:8f:6d:
58:c7:31:b5:18:b6:8b:17:e8:35:db:71:a8:88:72:
65:53:9a:72:8b:eb:39:bc:9d:cf:29:3d:87:c5:ff:
f0:10:da:fa:4a:1b:c6:1b:87:cb:9d:48:8c:56:8f:
03:28:a0:af:9b:f7:c5:23:2d:b5:3c:5c:c1:74:78:
e9:1d:e6:58:1e:0c:4f:09:01:77:6e:5e:02:76:05:
37:36:46:f6:e0:b4:2e:c2:25:1e:8c:20:44:41:5d:
30:cc:96:1b:58:75:a5:39:0e:3c:cb:ca:e6:24:b2:
73:c5:7f:11:8b:a1:66:f6:42:4f:c1:84:96:9f:f6:
f4:03:14:89:ac:26:e7:d1:7c:d2:cd:01:73:b4:5a:
84:1b:aa:05:89:69:f9:4a:55:9b:91:3f:f5:ee:bf:
42:a0:67:b8:5b:95:20:7d:79:29:17:dc:e8:af:f3:
e9:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:38:55:67:CA:30:6B:31:79:5F:D1:D4:DB:59:D7:0F:D0:3A:AC:A6
X509v3 Authority Key Identifier:
keyid:2C:96:94:6C:50:1D:DF:48:69:6D:A2:CF:11:0F:DC:EB:28:6F:AC:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LJaUbFAd30hpbaLPEQ_c6yhvrJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/tjhVZ8owazF5X9HU21nXD9A6rKY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/LJaUbFAd30hpbaLPEQ_c6yhvrJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.202.75.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:27:c9:95:d2:09:45:23:e9:15:ac:08:aa:b4:f5:e6:00:ec:
fb:27:c5:a3:c4:24:91:b1:6d:a9:ab:68:c9:b0:b2:37:9e:90:
07:b6:5e:79:0f:0b:bd:99:45:bf:5e:ef:93:d5:94:a3:93:ba:
4d:fe:a8:ef:f7:fa:0a:45:f3:cc:f2:e0:55:e0:9a:e7:95:58:
28:60:72:57:d0:ef:b1:74:9d:c0:72:5a:43:5d:0b:14:27:b8:
e5:5c:21:ec:f2:3a:d8:ad:b8:bc:7a:f7:47:e1:e8:73:50:9b:
f2:28:0b:f5:4c:71:9d:e5:45:03:18:7e:22:5f:75:60:b9:ee:
b5:1e:28:e6:e5:29:ee:a0:c8:66:a8:80:26:3f:27:92:25:1b:
e0:ee:f8:73:5c:f4:15:77:c3:0a:2c:12:53:f1:3e:83:dc:2f:
ea:11:48:07:82:01:d3:41:1a:c1:75:38:74:0f:e3:1b:77:85:
c1:55:f6:60:18:25:43:62:6c:7c:af:53:06:fd:2b:c1:98:68:
7a:6f:96:83:a6:ee:02:72:5f:f1:3f:f7:c3:12:2e:23:94:ee:
6c:3a:f2:5a:45:e2:2c:11:0a:18:7a:e5:f0:a2:91:40:ff:11:
43:16:90:41:7c:29:9c:d1:06:c9:47:62:33:f0:b8:2d:58:30:
9d:8f:22:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:00 2024 by rpki-client on console-fra.rpki-client.org