Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/cNYxN3lxMNejUG51iSM-6pIX9qw.roa
File: cNYxN3lxMNejUG51iSM-6pIX9qw.roa (raw, json)
Hash identifier: Amp+3cey1GGeodsyXM32VuH3JUGLHnMt66d4P6aHfXQ=
Subject key identifier: 70:D6:31:37:79:71:30:D7:A3:50:6E:75:89:23:3E:EA:92:17:F6:AC
Certificate issuer: /CN=f0521128cf634aa6afa7ef52d531f3fcd55628f9
Certificate serial: 01857328102049C263F6FCA93097CD2C4F47
Authority key identifier: F0:52:11:28:CF:63:4A:A6:AF:A7:EF:52:D5:31:F3:FC:D5:56:28:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/cNYxN3lxMNejUG51iSM-6pIX9qw.roa
Signing time: Mon 02 Jan 2023 15:44:43 +0000
ROA not before: Mon 02 Jan 2023 15:44:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35711
IP address blocks: 193.203.39.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:28:10:20:49:c2:63:f6:fc:a9:30:97:cd:2c:4f:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0521128cf634aa6afa7ef52d531f3fcd55628f9
Validity
Not Before: Jan 2 15:44:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=70d63137797130d7a3506e7589233eea9217f6ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:36:91:2e:da:80:4b:95:82:11:b0:eb:29:90:
c9:b6:ab:7f:65:80:1a:2a:71:ba:2d:02:0d:0c:35:
13:27:e9:f1:a3:a1:f2:eb:de:ff:b5:b2:c7:0e:5f:
c2:c5:2a:80:b0:b8:d7:6c:fb:2e:b0:8b:b8:0c:26:
53:c5:0c:8c:aa:f5:5b:ce:28:27:91:e0:5b:81:87:
43:d3:75:e4:80:af:99:0c:2a:fe:da:2f:fc:30:cd:
63:21:13:84:b2:19:df:f1:c6:98:84:8d:31:f4:be:
26:d3:97:b0:87:20:00:b4:5a:bb:ad:a5:f3:18:05:
38:78:cc:92:5c:d6:21:1c:64:81:c1:3e:4c:3b:90:
f6:1e:f4:98:73:61:c0:5f:c1:dc:85:1f:b3:55:73:
dd:3f:a1:d0:ca:3b:db:b5:e0:62:22:6f:aa:bd:f6:
f2:23:7d:05:95:83:c6:18:9d:4d:d4:ef:b8:c1:62:
ba:65:f5:5c:00:9d:a6:48:44:99:3a:a4:a8:e2:c9:
c0:8f:df:a4:92:93:ed:3b:23:3f:9c:d5:8e:ef:f9:
05:d0:44:9d:80:c7:7d:3f:27:b1:09:94:1b:6d:b1:
4a:fe:62:7b:33:a6:67:58:2f:d8:13:00:cf:96:94:
28:fa:57:2c:82:20:4b:c6:75:fd:06:db:0e:4f:ca:
ad:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:D6:31:37:79:71:30:D7:A3:50:6E:75:89:23:3E:EA:92:17:F6:AC
X509v3 Authority Key Identifier:
keyid:F0:52:11:28:CF:63:4A:A6:AF:A7:EF:52:D5:31:F3:FC:D5:56:28:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/cNYxN3lxMNejUG51iSM-6pIX9qw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.203.39.0/24
Signature Algorithm: sha256WithRSAEncryption
63:02:2d:e6:f1:f3:b8:16:96:88:df:5d:a9:0f:cf:1a:19:5b:
d0:ab:e9:aa:ad:8b:26:ed:0e:1d:71:80:f0:b5:75:20:c4:e9:
c2:b8:a4:5e:fd:4c:0f:10:4c:34:41:0b:bc:f8:cd:2a:05:af:
a1:47:4e:38:13:48:ea:96:5e:b0:a4:36:1c:d0:e8:1c:3c:ff:
32:c5:8f:8b:0e:80:a7:7a:f8:bb:2f:3b:76:1f:ee:43:85:da:
a2:7f:4f:97:04:71:ea:c6:b0:61:af:cf:96:ae:96:be:7e:11:
6c:c2:02:91:0e:fa:33:9a:1b:aa:2b:10:f1:d8:87:5e:56:2a:
e6:9d:85:78:f1:f0:3d:a1:09:31:b5:3b:52:d4:4f:9b:cd:6f:
24:c2:5c:b7:fd:84:de:68:e9:78:21:36:2b:ea:6b:a3:3f:3f:
81:0d:6e:b8:9b:79:ac:9e:56:cb:e6:62:2f:aa:2e:8e:6e:67:
47:33:4a:0a:58:c3:2f:6e:68:71:51:28:17:b7:e1:79:34:a8:
10:1f:88:00:d4:eb:4c:57:76:21:67:17:9a:b4:4e:bf:91:0b:
22:12:8e:26:f5:2f:28:59:43:eb:3f:d1:0f:da:31:6a:bb:4c:
7c:fc:a8:4a:db:76:d6:f2:b6:29:ae:10:fc:73:21:0c:89:8f:
12:a5:8b:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:27:22 2025 by rpki-client