Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/a8c553-3b9e-4edd-a7bb-5237c03b8813/1/kXCl03Dp0hJlY8gysAw1L0GNyGA.roa
File: kXCl03Dp0hJlY8gysAw1L0GNyGA.roa (raw, json)
Hash identifier: GYq7Bu+n7r9pf9n5xB3C8i7gS7l6OCo9scVp6p9nyBU=
Subject key identifier: 91:70:A5:D3:70:E9:D2:12:65:63:C8:32:B0:0C:35:2F:41:8D:C8:60
Certificate issuer: /CN=9c7ef2852d4cb2eabc978ec1c5a1a4d09e04afb5
Certificate serial: 018CC801606AD3CE2007E1BDE214BC548EDC
Authority key identifier: 9C:7E:F2:85:2D:4C:B2:EA:BC:97:8E:C1:C5:A1:A4:D0:9E:04:AF:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nH7yhS1Msuq8l47BxaGk0J4Er7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/a8c553-3b9e-4edd-a7bb-5237c03b8813/1/kXCl03Dp0hJlY8gysAw1L0GNyGA.roa
Signing time: Tue 02 Jan 2024 02:29:42 +0000
ROA not before: Tue 02 Jan 2024 02:29:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213373
IP address blocks: 146.19.253.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:60:6a:d3:ce:20:07:e1:bd:e2:14:bc:54:8e:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c7ef2852d4cb2eabc978ec1c5a1a4d09e04afb5
Validity
Not Before: Jan 2 02:29:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9170a5d370e9d2126563c832b00c352f418dc860
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:06:6f:e9:11:3d:1d:fb:a5:26:78:14:32:b3:
be:66:0b:ca:65:b5:26:a3:9c:65:1a:28:f1:b1:94:
b2:4d:af:95:ce:23:93:fb:7e:bd:c1:db:11:29:f9:
b1:fe:2f:1e:c5:a7:c5:5f:77:11:35:a2:9b:23:cc:
31:34:7b:ad:17:02:d7:00:ce:59:87:be:18:07:c8:
f7:64:73:cf:26:74:44:ec:24:82:33:43:77:de:49:
83:d8:7a:b5:9d:9a:c4:28:bf:ec:d5:95:d0:c9:a1:
48:b2:e4:62:8b:87:10:dd:35:bd:4c:aa:9b:d3:0a:
b7:58:d0:55:9f:8d:b9:02:b2:84:87:a5:6e:ac:24:
6c:b5:cc:ff:7d:74:ef:19:21:cf:4b:ed:e8:16:74:
56:fd:91:a7:4a:18:0c:c1:8b:da:0e:35:bd:7d:9e:
67:f9:86:7a:83:77:53:aa:00:37:9f:6b:36:f5:ea:
c0:c6:99:ab:e1:08:01:9d:10:ae:82:e2:d9:93:61:
af:20:b3:c9:53:7c:34:87:68:68:5b:b8:bc:d2:68:
5f:c5:f1:02:9b:42:c5:4b:2b:1c:76:17:18:e3:9e:
45:90:6c:6f:9f:9a:12:2c:4b:d5:01:d7:78:c2:b0:
04:c3:e9:0c:13:78:f2:fe:cd:f1:a7:e3:d0:a4:6a:
d6:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:70:A5:D3:70:E9:D2:12:65:63:C8:32:B0:0C:35:2F:41:8D:C8:60
X509v3 Authority Key Identifier:
keyid:9C:7E:F2:85:2D:4C:B2:EA:BC:97:8E:C1:C5:A1:A4:D0:9E:04:AF:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nH7yhS1Msuq8l47BxaGk0J4Er7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a8c553-3b9e-4edd-a7bb-5237c03b8813/1/kXCl03Dp0hJlY8gysAw1L0GNyGA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a8c553-3b9e-4edd-a7bb-5237c03b8813/1/nH7yhS1Msuq8l47BxaGk0J4Er7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.253.0/24
Signature Algorithm: sha256WithRSAEncryption
50:c3:2a:1e:c5:ea:1c:32:83:74:27:10:ed:47:f8:89:0f:1f:
d4:66:48:d4:83:18:df:12:77:9b:c6:ad:a4:7e:a2:cc:9b:e5:
26:ba:15:eb:5f:3c:cf:fd:8d:d6:af:13:54:3b:96:de:74:5f:
d9:ba:59:c8:90:c6:f7:74:f8:cb:91:0e:3b:ef:bd:bb:d4:90:
5f:43:86:d9:57:10:df:48:3a:49:fb:38:e1:81:d2:43:9f:dd:
98:2a:41:74:3b:17:a5:46:26:a0:6a:3c:6d:51:d4:5e:05:c4:
2b:d4:e6:af:c8:77:b8:69:71:f9:88:28:6f:3b:26:a9:14:e3:
32:5e:5b:b5:5e:a9:ad:49:90:f9:e3:62:2e:e2:ee:cc:88:ae:
78:8d:21:2a:1e:54:0a:97:80:28:e2:2b:9c:6f:5c:5d:f5:36:
8d:f4:b5:8c:79:f7:3e:a0:56:ac:66:b1:a4:bd:a4:eb:a6:40:
f6:8e:a1:f1:ba:af:7b:2a:3f:44:1c:24:1a:94:f2:2c:8e:bd:
08:aa:a7:42:02:ef:6a:44:73:fb:87:30:bf:ff:a5:f1:d9:4a:
95:0c:fd:f6:65:91:74:17:c9:7e:07:63:62:2d:52:35:bd:f6:
c1:cf:fb:1c:f0:2d:d1:41:fb:47:2c:16:a2:6d:7b:c8:9f:65:
6c:fe:56:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:30 2024 by rpki-client on console-fra.rpki-client.org