Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/7HjwOeIarLimgMIC_c_Jj6l6inA.roa
File: 7HjwOeIarLimgMIC_c_Jj6l6inA.roa (raw, json)
Hash identifier: OOkfeJHyKSYcPJzQN7txNCOBeNZtzZYxKJzdOvVYZs0=
Subject key identifier: EC:78:F0:39:E2:1A:AC:B8:A6:80:C2:02:FD:CF:C9:8F:A9:7A:8A:70
Certificate issuer: /CN=67955b1aa1c0284d2843b96f26c5fe751e66946f
Certificate serial: 079C0507
Authority key identifier: 67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/7HjwOeIarLimgMIC_c_Jj6l6inA.roa
Signing time: Sat 23 Apr 2022 14:16:00 +0000
ROA not before: Sat 23 Apr 2022 14:16:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213194
IP address blocks: 193.200.161.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 127665415 (0x79c0507)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67955b1aa1c0284d2843b96f26c5fe751e66946f
Validity
Not Before: Apr 23 14:16:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ec78f039e21aacb8a680c202fdcfc98fa97a8a70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:19:a9:aa:9d:3f:a9:e9:70:98:c1:9c:c7:37:
4a:49:07:c2:47:66:e6:b2:7d:d3:d4:a1:dd:36:3b:
f2:17:e5:96:9e:2a:5e:4e:d5:ce:fc:4f:93:c0:fa:
8f:0f:da:3e:a2:d0:60:3f:86:14:c5:37:0c:17:51:
f7:1f:d8:6c:e6:8b:09:4a:1c:37:e2:a9:9c:97:dd:
e4:84:24:50:7b:ca:ec:14:d7:01:80:f7:d5:ce:f8:
52:c4:85:d6:7d:24:4d:58:de:d0:ba:94:2e:35:32:
cd:1e:be:cf:a1:14:19:7e:91:1c:f9:a6:66:bf:7a:
68:db:81:f9:bb:b5:2c:66:cd:bc:93:33:78:e2:ec:
33:5b:b8:75:31:e2:23:b6:96:31:02:18:26:5b:e4:
24:36:7f:69:68:5f:48:6c:f2:df:70:a8:5f:db:0f:
2c:7a:13:5c:b3:12:da:8d:06:c8:5d:ec:a6:51:b4:
89:0e:05:d7:75:dd:1b:56:2f:03:96:74:a7:9b:cf:
eb:f5:a7:66:2e:59:f5:8e:7b:a7:96:62:ad:28:00:
22:55:91:b8:29:25:c8:6c:a5:60:d5:04:36:1e:0c:
ba:f5:82:03:12:13:8b:98:d7:0a:76:c9:f5:ee:f7:
f4:f6:30:ec:15:3a:4a:c8:c2:85:fd:35:ca:b9:db:
97:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:78:F0:39:E2:1A:AC:B8:A6:80:C2:02:FD:CF:C9:8F:A9:7A:8A:70
X509v3 Authority Key Identifier:
keyid:67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/7HjwOeIarLimgMIC_c_Jj6l6inA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.200.161.0/24
Signature Algorithm: sha256WithRSAEncryption
56:89:e0:bc:d0:d8:20:0f:64:40:17:66:3d:13:6a:ea:0a:0a:
a6:54:96:bc:bc:64:09:4a:92:8e:ff:7c:6d:d7:69:33:e2:1b:
2a:ea:20:75:3b:23:32:bc:6b:9b:af:82:aa:28:b7:98:51:09:
5d:cd:62:8c:51:02:40:d0:64:c6:2c:ab:1c:c5:4a:21:52:09:
a0:3f:f3:0f:89:38:45:8a:9b:06:8e:ee:22:59:ca:87:ac:6d:
18:a4:f4:d9:ea:63:eb:64:66:e5:5d:a7:9c:c8:03:d1:68:85:
2f:f8:c7:f6:cb:9e:db:7a:03:9f:64:7d:25:d8:a1:e0:53:81:
f6:d9:1d:2a:5e:f5:2c:0f:d0:95:36:00:10:d4:da:84:02:17:
8b:e8:6c:70:67:0a:48:24:29:3d:fd:88:65:fd:04:e9:3c:77:
3c:98:74:53:55:31:ee:b5:4c:1a:1a:09:83:30:4e:f7:74:10:
13:b4:9d:6f:40:f8:bd:14:29:a0:b7:e0:c9:01:f7:13:6b:3d:
4d:70:31:7b:18:51:ee:fe:a7:f4:99:ca:10:e8:e4:ad:d6:57:
2c:38:a0:98:39:e8:2f:37:98:e1:e4:1f:3c:86:31:71:9d:3a:
cf:68:e1:be:a6:ad:2e:b5:4b:91:b2:06:21:69:73:73:53:23:
50:d5:aa:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:52 2024 by rpki-client on console-ams.rpki-client.org