Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/UQi4RA-BUpZMnW_WMFsAzD7W7u8.roa
File: UQi4RA-BUpZMnW_WMFsAzD7W7u8.roa (raw, json)
Hash identifier: b0CDmdD7pRfTroPO/99gHaoeb3Z9/Fx7H51afStaEZQ=
Subject key identifier: 51:08:B8:44:0F:81:52:96:4C:9D:6F:D6:30:5B:00:CC:3E:D6:EE:EF
Certificate issuer: /CN=c04db7623241d7e6678fc25751fa4e0b6665186b
Certificate serial: 0185708CC9273B1C1C4FCD005D0D509777BD
Authority key identifier: C0:4D:B7:62:32:41:D7:E6:67:8F:C2:57:51:FA:4E:0B:66:65:18:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wE23YjJB1-Znj8JXUfpOC2ZlGGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/UQi4RA-BUpZMnW_WMFsAzD7W7u8.roa
Signing time: Mon 02 Jan 2023 03:35:52 +0000
ROA not before: Mon 02 Jan 2023 03:35:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43839
IP address blocks: 91.220.75.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:8c:c9:27:3b:1c:1c:4f:cd:00:5d:0d:50:97:77:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c04db7623241d7e6678fc25751fa4e0b6665186b
Validity
Not Before: Jan 2 03:35:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5108b8440f8152964c9d6fd6305b00cc3ed6eeef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ff:e8:b8:1f:cf:46:73:0a:6b:dd:d5:f4:b2:
ef:70:6c:77:df:b3:98:01:2b:88:8c:a8:45:ab:f7:
38:0a:06:b8:3c:e0:c2:5b:b7:dd:61:c1:79:77:d9:
33:1d:35:55:0b:93:73:6c:7b:98:9b:21:30:d2:92:
8a:5d:7c:00:a4:b7:41:a2:ac:2e:92:5b:67:12:b8:
4d:25:2f:37:8a:81:0e:35:0d:13:74:13:8b:d6:67:
c4:93:55:7c:e4:36:21:42:63:18:ad:69:0a:85:5f:
ad:8c:4b:81:f0:fa:60:6c:f0:57:c9:2a:f8:f6:b7:
21:6b:6c:63:5a:ad:18:3c:fa:f8:b8:9f:24:85:93:
e8:3a:42:7b:66:d9:ff:5d:ac:cf:ef:be:44:29:60:
0a:68:56:55:b4:3c:88:e7:f5:e0:fc:d9:29:a9:d6:
5d:44:96:1b:88:d4:2f:4a:01:41:b2:d8:45:b4:51:
33:2c:82:bc:25:07:e1:a3:51:88:07:e8:02:55:3b:
92:a4:ed:1b:fe:77:98:9d:39:14:ca:6e:a4:dd:64:
d2:83:e5:c4:a8:2e:ff:63:a9:e4:c0:ee:6c:99:42:
a7:0a:75:c0:99:2e:e2:2c:02:10:32:d8:e1:5e:9e:
38:4e:82:34:05:1c:67:79:92:0d:30:4d:0d:42:53:
65:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:08:B8:44:0F:81:52:96:4C:9D:6F:D6:30:5B:00:CC:3E:D6:EE:EF
X509v3 Authority Key Identifier:
keyid:C0:4D:B7:62:32:41:D7:E6:67:8F:C2:57:51:FA:4E:0B:66:65:18:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wE23YjJB1-Znj8JXUfpOC2ZlGGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/UQi4RA-BUpZMnW_WMFsAzD7W7u8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.75.0/24
Signature Algorithm: sha256WithRSAEncryption
04:a2:44:6c:df:0c:07:2a:f3:a2:c3:90:68:6e:31:91:87:06:
52:f6:57:cb:1e:6e:79:a4:26:48:04:46:73:d2:97:35:54:4b:
4b:be:9e:6e:b6:fc:7c:77:ac:56:27:e0:86:43:ed:bd:6e:4e:
0b:4f:46:76:25:68:f5:32:d2:2e:36:df:ed:1e:ae:06:aa:6b:
6f:7b:7a:53:16:d3:80:e9:2a:8f:c9:17:cd:fd:78:2b:5d:48:
30:ea:4c:f4:ab:1d:9c:a4:8f:bf:9b:7f:43:f3:69:9a:98:a7:
dc:4e:0d:ff:cc:df:a4:1c:c4:12:5c:0b:fb:33:fd:dd:d4:29:
de:f6:5f:86:37:3f:4b:6d:97:94:f9:5a:b3:b0:15:07:05:8f:
27:6b:da:8d:4e:b1:b8:45:c9:50:93:c8:2b:5f:52:bf:99:44:
95:e5:00:ed:f8:ae:34:62:be:51:24:d6:49:56:9d:53:29:66:
b1:5a:90:00:a7:c3:c4:a6:85:8c:2e:d6:61:1a:cd:c5:59:e8:
16:ae:58:52:96:96:9a:f5:ea:6a:01:94:76:45:f9:6b:f5:c8:
df:03:b7:82:b7:ee:70:54:15:5f:8a:50:a7:25:c6:da:42:ab:
5b:b1:0c:81:68:d6:4e:08:a7:6b:86:dd:c8:bc:26:1c:38:07:
a6:5c:c4:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:59 2024 by rpki-client on console-ams.rpki-client.org