Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/1-kZ5kcecm-G9LSilCMjsm-DCwOA.roa
File: 1-kZ5kcecm-G9LSilCMjsm-DCwOA.roa (raw, json)
Hash identifier: plekjq0N8ApdhJozq8kTfiyGcrm5xoP0mAiyhPVwsW4=
Subject key identifier: FA:46:79:91:C7:9C:9B:E1:BD:2D:28:A5:08:C8:EC:9B:E0:C2:C0:E0
Certificate issuer: /CN=542f633f76e8d8aaeaa32b5ace16a3db3943d80c
Certificate serial: 01857246B96DA8625F5CC21D0F3F0A612A9C
Authority key identifier: 54:2F:63:3F:76:E8:D8:AA:EA:A3:2B:5A:CE:16:A3:DB:39:43:D8:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VC9jP3bo2Krqoytazhaj2zlD2Aw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/1-kZ5kcecm-G9LSilCMjsm-DCwOA.roa
Signing time: Mon 02 Jan 2023 11:38:35 +0000
ROA not before: Mon 02 Jan 2023 11:38:35 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34984
IP address blocks: 188.125.162.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:46:b9:6d:a8:62:5f:5c:c2:1d:0f:3f:0a:61:2a:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=542f633f76e8d8aaeaa32b5ace16a3db3943d80c
Validity
Not Before: Jan 2 11:38:35 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fa467991c79c9be1bd2d28a508c8ec9be0c2c0e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:9b:4d:7d:52:36:45:ee:b3:4c:ff:0a:9e:58:
0c:dd:da:28:32:c3:87:d8:6d:ae:f3:9c:dd:f4:db:
b8:c2:47:d6:da:50:83:21:d7:66:54:70:59:f5:16:
8e:42:d6:9a:50:c3:f4:3c:cd:f5:89:08:1a:3a:b9:
04:78:d8:95:5e:01:8c:0b:37:b5:a6:72:40:21:fd:
8a:82:e8:2d:5c:78:52:d3:d0:14:29:ca:eb:e6:28:
bc:af:e3:2d:ee:b9:4f:11:fa:d8:8e:42:55:01:db:
1d:7a:c5:ac:6a:02:84:74:24:08:27:dc:56:05:90:
4b:1a:4a:e8:d8:e2:92:45:65:da:12:91:b3:01:bc:
ba:06:9f:58:7a:b9:e9:22:63:b1:a8:eb:02:c4:83:
83:dc:d7:a5:98:10:88:69:98:bf:70:c1:87:45:2a:
87:2c:81:ad:ac:7e:96:31:10:e4:c6:f9:dd:f6:2b:
2b:9f:cc:47:cf:0c:ee:22:04:37:2d:d1:bb:0a:e7:
cb:9b:e6:1b:2d:fe:7f:01:10:91:63:90:01:b9:1a:
a1:af:f0:43:53:ae:17:d3:98:77:49:27:93:1d:ee:
1f:be:da:4a:6c:43:8b:c1:8e:48:18:a4:dd:fd:7a:
03:49:f9:00:32:85:e3:37:78:03:cd:92:b4:ac:db:
cf:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:46:79:91:C7:9C:9B:E1:BD:2D:28:A5:08:C8:EC:9B:E0:C2:C0:E0
X509v3 Authority Key Identifier:
keyid:54:2F:63:3F:76:E8:D8:AA:EA:A3:2B:5A:CE:16:A3:DB:39:43:D8:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VC9jP3bo2Krqoytazhaj2zlD2Aw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/1-kZ5kcecm-G9LSilCMjsm-DCwOA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.125.162.0/24
Signature Algorithm: sha256WithRSAEncryption
03:6b:84:51:2b:bb:62:02:19:21:e5:58:1f:78:f1:1c:61:bc:
d8:4f:0c:cb:34:d8:c4:62:19:88:6d:7b:df:4e:da:f2:db:85:
b8:61:2b:eb:3d:64:f6:04:79:5f:1f:4c:67:33:27:21:18:57:
8f:52:db:3b:12:64:e5:0b:94:ff:12:d5:18:d6:0b:5f:4e:c5:
ba:b8:13:10:ac:0b:52:84:ee:e3:9b:5f:20:1b:58:7e:b2:9b:
14:db:f2:83:9a:b9:68:48:9b:b7:4e:f3:3c:ff:a8:ca:a0:37:
f8:e9:57:90:b4:e5:46:21:d4:31:f2:dc:93:c1:21:ba:fb:65:
cc:45:3f:95:f6:43:64:ba:9f:e5:3c:7e:5e:e3:c4:5f:18:96:
b4:d3:79:c8:0c:43:c8:76:19:dd:1b:a4:93:7e:e1:dd:8b:b2:
fb:50:dc:db:5d:cd:e5:ed:32:6f:6d:7a:fa:40:ba:0b:bd:4d:
8e:c4:83:79:ce:13:aa:92:a6:4f:3f:55:18:f7:86:15:b1:13:
ff:45:fa:e1:91:a8:aa:88:ce:19:01:54:83:8a:ac:e4:f2:57:
8d:83:0f:20:7f:5c:13:ee:5b:50:e8:62:5d:e4:c2:e4:bf:f7:
a0:4c:8d:ef:bd:e8:4e:8a:61:35:09:1f:9b:dc:21:98:e7:e0:
f4:fb:bf:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:47 2024 by rpki-client on console-fra.rpki-client.org