Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/RnS0w4K1Kz3tiglsxioZQSzFM-4.roa
File: RnS0w4K1Kz3tiglsxioZQSzFM-4.roa (raw, json)
Hash identifier: //SfAJoN94vmXVqH/k/57x9QqwN9PsP/Uo7QH6qHkFk=
Subject key identifier: 46:74:B4:C3:82:B5:2B:3D:ED:8A:09:6C:C6:2A:19:41:2C:C5:33:EE
Certificate issuer: /CN=67955b1aa1c0284d2843b96f26c5fe751e66946f
Certificate serial: 0190351AEC596684EF23A7356BEEB1CA853D
Authority key identifier: 67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/RnS0w4K1Kz3tiglsxioZQSzFM-4.roa
Signing time: Thu 20 Jun 2024 10:04:35 +0000
ROA not before: Thu 20 Jun 2024 10:04:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48030
IP address blocks: 193.93.61.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:35:1a:ec:59:66:84:ef:23:a7:35:6b:ee:b1:ca:85:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67955b1aa1c0284d2843b96f26c5fe751e66946f
Validity
Not Before: Jun 20 10:04:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4674b4c382b52b3ded8a096cc62a19412cc533ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:53:12:8b:fd:2c:b1:18:e3:b9:22:3b:b7:70:
92:97:5e:52:c2:3c:fb:da:0b:dd:26:05:c7:15:4e:
39:1b:19:3a:f3:db:64:7d:1b:77:e0:d3:c9:12:0e:
4d:77:97:d4:40:20:6e:fd:7b:98:56:ed:02:1f:ef:
0a:ab:30:9d:7b:b2:27:f5:ed:a6:fe:50:62:6c:44:
a0:b5:19:d7:25:45:19:fd:cf:b8:27:46:a8:87:ca:
2f:3b:de:65:9c:d2:28:1c:9d:49:df:a9:f4:af:7f:
9b:57:a5:93:8c:fc:42:b4:41:7a:3e:9a:83:f1:be:
e2:5e:46:b3:5d:93:56:cc:e1:b8:98:d5:0a:6a:dc:
fd:4f:52:da:65:99:f1:45:09:bb:23:d9:2b:b2:19:
a1:7f:ce:69:5b:4b:ea:45:a6:97:3a:59:09:9d:92:
e1:32:86:38:27:6e:25:91:24:fc:c1:06:15:40:47:
de:47:69:82:00:d6:94:fa:c9:8f:61:41:43:93:4e:
88:1d:9c:89:d0:6f:17:46:dc:63:37:0c:0a:38:f0:
a0:bc:7d:19:4b:ce:39:74:84:8c:83:39:b7:4f:de:
31:4f:d1:90:c3:fa:03:c9:ff:58:3f:db:e3:fa:d3:
63:73:b0:85:6d:43:8c:d9:8a:fb:bb:f9:91:b9:01:
c1:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:74:B4:C3:82:B5:2B:3D:ED:8A:09:6C:C6:2A:19:41:2C:C5:33:EE
X509v3 Authority Key Identifier:
keyid:67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/RnS0w4K1Kz3tiglsxioZQSzFM-4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.93.61.0/24
Signature Algorithm: sha256WithRSAEncryption
09:02:85:b7:1f:9f:cd:7e:7d:7c:7b:fb:6a:7b:d6:60:a4:90:
4e:e7:6c:f7:6e:81:5f:d8:fd:96:14:e9:05:a9:fb:0b:60:d6:
fa:af:7d:d7:a6:88:89:35:da:12:0a:5e:e1:ff:9f:2e:7d:c0:
e5:3d:d2:67:7a:d7:ca:25:c6:e0:43:61:d2:2b:29:bc:89:ed:
4c:24:1a:ee:db:22:c1:13:a4:97:75:40:67:72:11:80:13:de:
fd:9e:7c:25:24:20:b5:f7:75:86:52:d1:cd:94:fc:ce:7f:84:
bb:1a:51:57:2d:a3:3b:61:2b:c4:49:59:70:ab:10:94:12:60:
76:de:20:35:28:33:9f:09:dd:68:3f:76:1c:da:0a:de:c2:be:
94:37:06:22:fc:22:e0:c3:9e:8a:78:54:27:04:7e:a2:ec:ec:
a2:dc:08:e8:c9:55:9b:68:3a:29:48:f7:5b:78:e1:6a:a6:d0:
30:09:5a:ec:4e:1d:66:44:ed:04:df:ae:3d:2e:92:98:e8:09:
81:d6:0a:c1:06:6b:14:ef:38:ec:4a:c3:8f:c9:13:57:3e:12:
a6:2c:e4:f4:18:e5:5e:1f:a6:7c:49:69:2f:f2:e5:84:cc:77:
db:81:fc:49:6c:05:f3:99:07:85:1d:0f:d1:28:59:81:cd:35:
c1:74:f4:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 17 17:08:46 2024 by rpki-client on console-ams.rpki-client.org