Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/1uZ7SMBQjbEOG_qz-O8vVsO8T8Q.roa
File: 1uZ7SMBQjbEOG_qz-O8vVsO8T8Q.roa (raw, json)
Hash identifier: i2/+QG4LpkTC5HXi5d/K7DK88r1Thp24GekePdn/zf0=
Subject key identifier: D6:E6:7B:48:C0:50:8D:B1:0E:1B:FA:B3:F8:EF:2F:56:C3:BC:4F:C4
Certificate issuer: /CN=67955b1aa1c0284d2843b96f26c5fe751e66946f
Certificate serial: 0193ABE442E998F2B7554721D70FD6533E71
Authority key identifier: 67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/1uZ7SMBQjbEOG_qz-O8vVsO8T8Q.roa
Signing time: Mon 09 Dec 2024 14:48:03 +0000
ROA not before: Mon 09 Dec 2024 14:48:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9009
IP address blocks: 193.106.96.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ab:e4:42:e9:98:f2:b7:55:47:21:d7:0f:d6:53:3e:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67955b1aa1c0284d2843b96f26c5fe751e66946f
Validity
Not Before: Dec 9 14:48:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d6e67b48c0508db10e1bfab3f8ef2f56c3bc4fc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:4d:72:d6:6e:5a:09:b4:60:16:f5:98:da:6d:
9c:b8:ae:3d:64:36:72:4e:b7:f9:8b:48:45:e1:d2:
d5:36:ca:13:f5:c2:f0:8c:84:a6:3f:6a:8c:0a:2b:
be:4b:cb:09:82:82:6c:6f:55:2a:fe:ca:53:42:36:
f4:58:bb:a7:d8:3f:a3:ac:1f:52:1f:41:15:39:97:
c1:b2:33:a8:a1:09:65:4e:13:db:5d:b3:f4:d4:30:
cb:ff:75:12:3f:a4:c1:13:ec:28:57:36:ea:f3:45:
32:9d:8a:3f:71:06:d8:56:1d:9d:bf:cd:50:a2:1e:
75:e0:55:70:4f:ff:19:81:40:81:6e:bb:27:b6:b5:
a0:80:f2:f5:16:3b:77:7c:63:80:13:f2:ae:3b:0b:
e7:a3:0c:8a:3f:b5:38:1f:37:9c:b5:2b:21:c5:1b:
23:64:25:04:68:72:f2:ec:8f:51:04:29:f3:c4:7a:
6d:da:ff:0f:c2:d2:2d:f1:08:1e:39:28:c0:48:81:
ba:78:5c:b0:64:f2:7f:6e:8f:c3:d5:0f:5c:e2:41:
a6:c4:3b:0f:c3:57:c0:bc:f1:c6:ae:51:70:e8:20:
4a:47:cc:41:9d:23:9e:81:2e:34:ff:a3:1e:46:21:
b7:50:a3:34:ab:c4:06:ed:7f:c5:d5:49:65:f2:5b:
05:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:E6:7B:48:C0:50:8D:B1:0E:1B:FA:B3:F8:EF:2F:56:C3:BC:4F:C4
X509v3 Authority Key Identifier:
keyid:67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/1uZ7SMBQjbEOG_qz-O8vVsO8T8Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.106.96.0/24
Signature Algorithm: sha256WithRSAEncryption
43:64:d2:75:cd:98:d4:c1:85:f1:ed:30:cd:e0:1d:af:61:3e:
c8:1d:e9:6a:b7:63:21:aa:79:c2:be:78:0a:66:f6:dc:bc:ca:
3d:93:4f:08:68:60:81:67:e6:b8:59:02:e4:92:9e:37:17:8b:
49:78:4a:9c:fb:27:58:66:60:f2:a9:d5:f7:9e:85:ee:88:9d:
e8:45:17:15:62:45:e5:e6:52:fe:c8:64:4e:6c:3b:c6:e7:c8:
79:eb:e1:43:23:d6:61:1b:17:0d:e0:ec:fe:8c:fa:31:29:da:
8c:ec:31:8d:a7:97:42:f3:37:9e:b4:0d:1e:c5:62:a9:43:ad:
bc:18:69:a2:fa:02:f8:c0:c1:82:68:a2:0b:b2:50:99:4d:c3:
fb:64:c7:f4:b0:04:fd:87:66:d9:04:ba:1c:b6:0d:b8:9b:e7:
e2:36:b3:06:f8:cc:e8:c5:4b:c1:72:c7:5f:7a:a8:e4:59:e7:
50:99:dc:6a:d0:20:d4:07:f4:c3:60:55:45:20:bf:f0:92:e1:
9d:6e:99:36:05:2d:7e:ae:03:fd:85:7d:cf:a3:15:73:ef:9f:
bc:af:13:a8:79:7f:2e:e5:7d:42:c6:ea:c1:b7:63:4a:9e:ee:
68:37:f5:f1:b6:3e:f8:dc:40:65:a4:5c:78:86:af:51:f8:c5:
c6:d0:08:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 24 19:21:14 2024 by rpki-client on console-ams.rpki-client.org