Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/xcK8cSDm703jT5me0xMPAOp8LUI.roa
File: xcK8cSDm703jT5me0xMPAOp8LUI.roa (raw, json)
Hash identifier: Qjbb9nF0Hx55v2JvhkEB0O8Z1LH1PrcoezTsmfj2I50=
Subject key identifier: C5:C2:BC:71:20:E6:EF:4D:E3:4F:99:9E:D3:13:0F:00:EA:7C:2D:42
Certificate issuer: /CN=67955b1aa1c0284d2843b96f26c5fe751e66946f
Certificate serial: 018CC7275DA5B3641595B7F4788A6115448C
Authority key identifier: 67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/xcK8cSDm703jT5me0xMPAOp8LUI.roa
Signing time: Mon 01 Jan 2024 22:31:34 +0000
ROA not before: Mon 01 Jan 2024 22:31:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35608
IP address blocks: 193.19.111.0/24 maxlen: 24
91.238.97.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:5d:a5:b3:64:15:95:b7:f4:78:8a:61:15:44:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67955b1aa1c0284d2843b96f26c5fe751e66946f
Validity
Not Before: Jan 1 22:31:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c5c2bc7120e6ef4de34f999ed3130f00ea7c2d42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:79:5a:13:0a:fd:1b:b6:97:b6:16:08:a3:0d:
ee:05:10:13:f9:a0:38:51:18:86:a1:60:1f:34:c2:
d4:66:80:72:dc:a5:b2:39:52:bc:4b:a2:e1:dd:7e:
4c:f5:fb:6e:5f:1a:eb:48:86:b4:81:8d:b4:9b:4f:
4d:b3:04:b2:db:a5:5c:97:45:d8:e9:a4:d6:dc:c2:
1f:58:f3:23:4f:ce:df:5c:3f:9c:ac:bd:e6:78:22:
22:5a:c1:98:b3:6d:db:0a:6b:87:07:51:3d:18:cb:
bd:7f:b7:dc:3f:79:7c:b3:f1:be:62:49:03:a0:7d:
08:12:6d:41:7e:d5:b5:16:5f:98:2e:b9:98:0b:96:
52:0e:05:fa:ee:83:b2:29:18:c6:32:ca:ab:a7:4d:
90:54:a9:23:1f:81:47:8e:66:a5:4c:58:e9:67:38:
07:b3:9b:be:c1:f0:54:e6:14:a4:ca:21:0b:20:a3:
45:10:fb:c7:2b:85:ab:46:1a:3f:99:c2:94:ca:7e:
51:fe:2d:05:94:46:58:96:ca:0d:f8:44:68:25:16:
3a:07:6b:64:55:e6:e3:f1:9e:ca:6d:60:65:c9:93:
3c:aa:bb:88:11:ed:1f:d9:9d:f9:0f:91:3e:95:8a:
28:3c:94:c5:9e:0c:d2:74:4d:da:8d:1c:82:59:9a:
73:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:C2:BC:71:20:E6:EF:4D:E3:4F:99:9E:D3:13:0F:00:EA:7C:2D:42
X509v3 Authority Key Identifier:
keyid:67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/xcK8cSDm703jT5me0xMPAOp8LUI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.238.97.0/24
193.19.111.0/24
Signature Algorithm: sha256WithRSAEncryption
91:39:9a:02:d5:36:08:73:bb:27:82:fa:e8:35:3b:09:3d:b7:
b2:52:47:ae:21:6f:80:e3:7b:38:16:0b:93:db:23:2f:16:48:
33:39:31:88:43:12:ad:22:41:24:52:2f:96:a9:8d:6c:9b:2f:
31:20:0f:99:0f:34:a8:9e:a8:6d:77:7c:1c:cd:9d:61:ae:00:
d0:fc:96:b2:60:c5:eb:1e:aa:c0:dd:07:62:47:8b:35:7b:da:
9b:b4:18:23:66:e5:18:a7:e5:af:6d:89:62:8a:9c:1f:91:63:
37:85:0c:11:93:01:2c:63:1f:7f:90:3f:bf:f7:7c:b6:b9:af:
e5:52:54:f7:44:bd:09:1b:e1:be:0b:18:a3:66:07:e6:f5:2f:
e7:8c:85:15:70:47:87:23:cd:fa:ff:8b:a7:97:39:43:09:99:
0b:66:14:83:5b:36:25:bc:b0:97:cc:95:a6:68:51:62:70:bc:
c4:c7:39:9f:77:3e:71:13:01:b6:00:82:e9:94:2d:de:a3:ad:
e3:2f:e5:d1:3d:fb:5e:92:00:2d:64:38:fd:2c:b2:18:f1:7e:
0f:5b:89:57:a4:3e:33:ba:fd:03:0c:db:ce:0e:bb:aa:75:36:
16:ff:ea:17:61:96:3f:9d:4c:40:3c:da:f6:b4:22:a7:71:40:
bd:4d:ba:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 17:07:56 2024 by rpki-client on console-fra.rpki-client.org