Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/b9ed6c-e8c5-431e-b188-f5200f549377/1/aqH-1-set9Cw_zvTHIpkaOdN9lU.roa
File: aqH-1-set9Cw_zvTHIpkaOdN9lU.roa (raw, json)
Hash identifier: CCo/f344QizuF+35LQRckNYrmwJvOpYPzO1IgOPMuLc=
Subject key identifier: 6A:A1:FE:D7:EB:1E:B7:D0:B0:FF:3B:D3:1C:8A:64:68:E7:4D:F6:55
Certificate issuer: /CN=fe0c9f30e3b46d50b8d1bf79b9d1db84f25134ba
Certificate serial: 018570153487B6C365CA0AAC314A5BB579B8
Authority key identifier: FE:0C:9F:30:E3:B4:6D:50:B8:D1:BF:79:B9:D1:DB:84:F2:51:34:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_gyfMOO0bVC40b95udHbhPJRNLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/b9ed6c-e8c5-431e-b188-f5200f549377/1/aqH-1-set9Cw_zvTHIpkaOdN9lU.roa
Signing time: Mon 02 Jan 2023 01:25:15 +0000
ROA not before: Mon 02 Jan 2023 01:25:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209730
IP address blocks: 193.26.121.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:15:34:87:b6:c3:65:ca:0a:ac:31:4a:5b:b5:79:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe0c9f30e3b46d50b8d1bf79b9d1db84f25134ba
Validity
Not Before: Jan 2 01:25:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6aa1fed7eb1eb7d0b0ff3bd31c8a6468e74df655
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:71:6b:49:59:4d:01:70:98:ec:aa:cb:a7:61:
e3:7f:95:aa:95:ed:cb:2d:18:45:43:ee:e2:bf:36:
0f:35:fa:98:3d:c1:29:b3:93:67:da:da:9d:40:8f:
e2:05:ee:8d:c8:b3:81:6e:09:b3:07:a1:39:31:2e:
83:46:fb:5a:0b:10:a3:48:c6:64:23:5a:56:6a:a7:
0b:81:40:ae:56:a8:11:81:80:23:12:82:92:8c:ed:
ce:05:c0:29:17:14:c4:cd:11:ea:56:fd:f4:1d:68:
9f:e9:33:e1:51:b2:c9:49:d3:cd:74:8a:39:80:21:
3c:0a:1d:d9:3a:29:42:bc:81:3a:3e:cd:1b:24:f8:
11:77:7e:ce:c3:fd:c1:9d:55:8b:49:46:39:d1:f4:
90:3e:9d:05:a1:cb:d2:d3:b3:b2:c8:43:97:42:77:
c7:22:6f:be:b8:56:be:7a:4f:2c:94:f6:03:45:81:
60:64:4f:d3:24:b7:9c:42:32:a9:c1:c2:da:95:aa:
ff:a8:ee:33:f3:2a:1d:8c:ee:62:5e:0e:9c:31:aa:
f0:d6:da:a0:2b:2d:8b:ce:66:78:da:87:d3:62:a7:
95:0a:b7:cb:49:1e:a5:1b:1c:cc:f7:85:8d:be:33:
49:c5:ee:d6:9c:dc:c5:80:8c:65:32:3d:c4:57:94:
c9:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:A1:FE:D7:EB:1E:B7:D0:B0:FF:3B:D3:1C:8A:64:68:E7:4D:F6:55
X509v3 Authority Key Identifier:
keyid:FE:0C:9F:30:E3:B4:6D:50:B8:D1:BF:79:B9:D1:DB:84:F2:51:34:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_gyfMOO0bVC40b95udHbhPJRNLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/b9ed6c-e8c5-431e-b188-f5200f549377/1/aqH-1-set9Cw_zvTHIpkaOdN9lU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/b9ed6c-e8c5-431e-b188-f5200f549377/1/_gyfMOO0bVC40b95udHbhPJRNLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.26.121.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:26:47:63:9d:46:74:2b:75:b0:c4:58:e1:9e:b6:a4:dd:7c:
91:76:6b:a2:9d:0e:56:ef:44:57:a1:e6:be:85:17:9c:35:02:
7f:ad:fe:97:11:66:67:ad:25:4b:10:3f:d4:99:f9:bc:7d:43:
dc:f6:de:63:07:7a:8f:a2:e8:5b:fe:f1:f5:84:ed:ab:19:77:
31:d6:24:14:69:7a:6d:97:19:0a:a1:d0:d6:20:cf:1d:89:28:
d5:41:06:8d:b7:08:da:98:c1:5c:a7:5f:8a:75:f8:eb:52:a3:
3e:64:98:79:3f:c5:c3:89:90:68:4c:76:75:6c:3d:a5:37:81:
f5:5f:e8:e8:19:b8:8e:48:22:f0:20:5e:d8:a6:a9:ea:71:e2:
6a:54:ff:df:25:81:dd:e2:f7:4d:eb:05:ce:13:fa:2c:c2:ed:
42:38:b8:8b:de:59:58:ec:1e:69:17:89:9b:3e:a7:c1:8e:54:
41:30:d0:39:8d:5d:0c:98:01:a9:63:56:c6:72:7a:0a:5a:2c:
9e:e9:de:f9:88:83:85:f6:95:54:2b:63:4a:03:40:58:09:01:
d0:0b:90:06:f8:63:0d:17:e5:a3:3b:29:ae:a7:01:a3:c2:a2:
e1:7d:2e:ae:ae:21:f6:27:7e:cb:d1:92:2c:85:35:a6:09:d3:
14:91:8c:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:55 2024 by rpki-client on console-fra.rpki-client.org