Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/b153wU0Y8bkdXbCx7hNLnT3VAys.roa
File: b153wU0Y8bkdXbCx7hNLnT3VAys.roa (raw, json)
Hash identifier: EaXSEL4FF39Ft86VMz1i/DsL2atic/9v3+RybMX7lC0=
Subject key identifier: 6F:5E:77:C1:4D:18:F1:B9:1D:5D:B0:B1:EE:13:4B:9D:3D:D5:03:2B
Certificate issuer: /CN=67955b1aa1c0284d2843b96f26c5fe751e66946f
Certificate serial: 01856DC19A4F0228EC69BB85E6078EECD273
Authority key identifier: 67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/b153wU0Y8bkdXbCx7hNLnT3VAys.roa
Signing time: Sun 01 Jan 2023 14:34:42 +0000
ROA not before: Sun 01 Jan 2023 14:34:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35608
IP address blocks: 213.108.132.0/24 maxlen: 24
193.19.111.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:c1:9a:4f:02:28:ec:69:bb:85:e6:07:8e:ec:d2:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67955b1aa1c0284d2843b96f26c5fe751e66946f
Validity
Not Before: Jan 1 14:34:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6f5e77c14d18f1b91d5db0b1ee134b9d3dd5032b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:e7:73:e2:36:a0:cb:21:4f:ef:54:4e:10:3c:
ec:29:35:91:2d:4b:bd:94:35:41:0b:99:3c:00:e6:
cd:eb:ef:17:ae:2f:72:5f:aa:9c:f7:46:8a:5a:d9:
a6:06:d0:8e:21:12:75:0e:23:7f:25:3e:1b:8c:0d:
96:05:99:08:34:98:cf:05:8b:b9:1b:ad:0f:a2:53:
f7:59:50:9b:f4:db:63:7f:8a:b0:db:c3:6c:84:76:
0f:f8:13:a5:3e:0e:0f:62:b4:0f:5e:2c:d6:43:01:
0d:83:3a:3a:f9:9d:71:6e:ad:b6:98:2f:24:6f:d0:
e6:4e:d2:9a:db:fa:ae:ca:bb:6b:9a:0b:42:ce:ba:
4e:7a:7f:41:97:35:d5:4b:9d:52:a4:72:f3:92:3a:
ff:26:19:8e:d6:ed:b1:56:1b:dd:d5:c0:58:28:aa:
6d:b9:eb:f2:eb:22:ee:a7:97:6e:eb:0d:f7:11:42:
da:98:ef:e9:b8:9a:5b:00:1c:04:20:dd:fb:c1:54:
43:1e:9a:f6:5a:77:25:32:e4:48:17:1f:be:87:54:
f6:fe:e8:5e:49:4e:e9:df:dd:dc:4b:ca:61:29:a1:
98:b4:8b:01:58:c4:68:ea:d0:5e:37:a8:94:06:08:
b8:40:cb:7a:9d:a9:b9:71:ca:74:42:43:4f:61:bc:
d0:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:5E:77:C1:4D:18:F1:B9:1D:5D:B0:B1:EE:13:4B:9D:3D:D5:03:2B
X509v3 Authority Key Identifier:
keyid:67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/b153wU0Y8bkdXbCx7hNLnT3VAys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.19.111.0/24
213.108.132.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:43:54:f6:6b:25:2e:14:cc:0b:43:6a:5d:b0:19:77:2c:53:
3c:c9:72:d2:da:91:df:f0:71:22:37:0e:44:84:97:6c:f1:f5:
70:f0:cf:34:10:44:d8:48:49:02:92:21:a3:8c:48:7f:1e:b9:
f2:c2:df:70:23:f2:7b:88:41:cf:2c:fd:42:a9:7c:df:c3:8e:
60:21:a4:ef:15:f9:c1:fa:fb:93:76:0d:b0:73:6d:fd:4d:7c:
6f:a8:62:d2:b7:12:80:70:ce:85:5c:79:41:d4:13:cd:3d:c6:
24:81:4d:61:6d:e5:85:44:b2:e5:4e:b7:39:f5:d2:17:29:b3:
a7:a4:14:10:ec:b8:13:80:68:c6:81:a5:f7:d0:1f:29:99:57:
64:c8:03:29:e7:6a:60:de:17:57:5d:b0:b4:26:26:49:2d:2f:
ac:10:15:c2:1b:b3:43:c5:f6:ce:fa:70:c3:06:c3:1e:c3:eb:
bf:7e:d9:7f:54:4a:a5:e5:e5:b9:77:c6:88:c4:28:17:0b:d6:
bc:23:50:dc:71:8b:30:42:b6:2b:85:d8:dc:7b:8f:5f:92:d1:
20:fc:8b:8a:fd:92:0f:d8:9d:05:1e:9a:ad:3d:23:2b:da:ad:
a0:24:cd:df:5b:d1:7b:e6:2d:db:5b:92:2c:55:75:d6:7e:cb:
0c:62:b5:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 27 12:03:18 2023 by rpki-client on console-fra.rpki-client.org