Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/1-mEOz1QhH5qiSq05NM9If9vxbbA.roa
File: 1-mEOz1QhH5qiSq05NM9If9vxbbA.roa (raw, json)
Hash identifier: TxDUT3PFtFrJIC/GAC0uMHooIlbt5yGsILTn9fWXvBw=
Subject key identifier: FA:61:0E:CF:54:21:1F:9A:A2:4A:AD:39:34:CF:48:7F:DB:F1:6D:B0
Certificate issuer: /CN=dc7821e1bcbf6e074ea4814aaa5c63e3ba813c5f
Certificate serial: 019348E690277C99E8AC5F837880674093BB
Authority key identifier: DC:78:21:E1:BC:BF:6E:07:4E:A4:81:4A:AA:5C:63:E3:BA:81:3C:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Hgh4by_bgdOpIFKqlxj47qBPF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/1-mEOz1QhH5qiSq05NM9If9vxbbA.roa
Signing time: Wed 20 Nov 2024 09:28:09 +0000
ROA not before: Wed 20 Nov 2024 09:28:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20668
IP address blocks: 193.164.143.0/24 maxlen: 24
195.189.244.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:48:e6:90:27:7c:99:e8:ac:5f:83:78:80:67:40:93:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc7821e1bcbf6e074ea4814aaa5c63e3ba813c5f
Validity
Not Before: Nov 20 09:28:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fa610ecf54211f9aa24aad3934cf487fdbf16db0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a9:ea:60:c9:5e:cc:7b:37:5d:b1:65:c9:41:
cc:16:2b:4b:a4:13:b0:02:a6:0a:b0:74:fc:cf:6b:
6b:d7:c6:1e:aa:69:78:c0:16:64:7c:ed:3f:be:b8:
c7:d2:61:a8:6d:af:80:19:49:e5:c0:df:9c:39:d9:
38:b6:b0:8d:2a:36:0c:61:c2:10:12:4b:cd:21:fa:
9a:ca:d8:39:b0:5d:84:9b:2b:8f:87:71:ea:99:13:
df:b5:3a:fc:0d:02:ae:0b:42:f0:c7:e1:41:f5:52:
d6:76:ef:9e:7a:52:c6:e4:63:08:f0:70:dc:80:3a:
f0:2c:5d:ce:4c:4d:56:85:16:9c:03:f9:8d:43:0f:
a6:dc:f4:d5:cd:c5:15:bf:62:96:eb:05:0b:f7:02:
69:e6:49:df:6c:30:68:eb:15:db:42:bb:6b:0c:9e:
6b:46:08:fa:f9:58:32:ea:9d:30:8b:0c:7d:ad:1c:
b0:7d:67:44:fd:0e:f7:ba:f3:a8:98:a3:c7:e0:b9:
33:4a:f6:9d:fb:58:6c:ca:1e:8a:df:56:29:b1:ca:
8f:a8:79:72:d2:81:ff:e4:4f:26:59:7e:ca:2a:ef:
1c:0d:55:6c:7e:52:80:eb:86:db:ac:76:01:31:2f:
33:fc:9f:9b:61:1f:e7:15:fc:2a:78:98:a3:05:76:
41:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:61:0E:CF:54:21:1F:9A:A2:4A:AD:39:34:CF:48:7F:DB:F1:6D:B0
X509v3 Authority Key Identifier:
keyid:DC:78:21:E1:BC:BF:6E:07:4E:A4:81:4A:AA:5C:63:E3:BA:81:3C:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Hgh4by_bgdOpIFKqlxj47qBPF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/1-mEOz1QhH5qiSq05NM9If9vxbbA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/3Hgh4by_bgdOpIFKqlxj47qBPF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.164.143.0/24
195.189.244.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:74:f0:3f:18:05:be:60:f4:cb:66:73:a2:58:24:ab:f5:01:
0a:8f:95:4c:66:71:f6:87:a2:d2:e2:ba:33:12:45:4b:e5:af:
49:e1:26:d5:5d:fc:ab:a5:64:b7:0b:cd:9c:98:ce:de:16:85:
cf:c5:65:90:75:33:1d:10:1f:85:48:1d:66:a5:a8:0c:3d:71:
6d:dc:b6:05:fa:9a:66:4c:71:25:37:27:73:62:2a:67:ca:ce:
5f:c8:4e:21:62:2c:af:a5:c4:9a:fa:52:20:3a:72:b9:9a:69:
f7:17:1a:f6:dd:b8:8a:6e:6e:2d:c3:1b:1e:35:78:25:48:b2:
f6:e0:fc:0c:2f:12:8b:7a:72:08:85:f5:1d:9c:88:8c:6b:f5:
2c:2e:49:5f:72:2f:d4:75:46:b6:2f:03:14:a4:8d:d3:5a:cb:
4a:b9:b3:cf:b4:33:33:ce:99:6a:59:5f:4e:22:26:27:37:56:
7a:6d:5d:6d:90:98:3f:ba:af:4e:45:1f:f7:13:e0:59:45:09:
5b:9a:9d:6a:38:87:59:1b:33:70:c1:ef:fd:24:74:da:0f:4f:
20:64:30:76:cb:6a:05:04:1c:c9:99:95:af:bc:f2:23:41:4f:
00:a4:75:4a:a8:08:78:9f:06:50:52:45:92:fe:b5:c4:af:88:
e0:db:1e:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:48:54 2025 by rpki-client