Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/9c0a7e-9963-4c0d-94ac-446d0a7e9404/1/UFtnu1pRjD-WgXliBLH0VqKHEGw.roa
File: UFtnu1pRjD-WgXliBLH0VqKHEGw.roa (raw, json)
Hash identifier: uiktiD2Ar9VhirnarlPX8kwFkIX+mAWgGXe5zvhrXk8=
Subject key identifier: 50:5B:67:BB:5A:51:8C:3F:96:81:79:62:04:B1:F4:56:A2:87:10:6C
Certificate issuer: /CN=73dfeea9c7de246e6d7d1a507406285b226f9286
Certificate serial: 0183F5ACE40D4EB04C37A1BDE9DC1541BCFA
Authority key identifier: 73:DF:EE:A9:C7:DE:24:6E:6D:7D:1A:50:74:06:28:5B:22:6F:92:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c9_uqcfeJG5tfRpQdAYoWyJvkoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/9c0a7e-9963-4c0d-94ac-446d0a7e9404/1/UFtnu1pRjD-WgXliBLH0VqKHEGw.roa
Signing time: Thu 20 Oct 2022 13:54:51 +0000
ROA not before: Thu 20 Oct 2022 13:54:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49223
IP address blocks: 193.57.44.0/23 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:f5:ac:e4:0d:4e:b0:4c:37:a1:bd:e9:dc:15:41:bc:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73dfeea9c7de246e6d7d1a507406285b226f9286
Validity
Not Before: Oct 20 13:54:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=505b67bb5a518c3f9681796204b1f456a287106c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:df:d5:82:89:cb:21:63:8b:27:41:43:68:58:
05:ac:a2:36:fd:8b:1b:f0:e4:77:23:28:2a:8e:03:
00:7d:5e:c2:20:9c:ad:ac:b1:c1:12:51:53:89:43:
b0:cb:18:dc:1a:ed:e1:be:c3:6e:17:68:2b:a9:21:
e9:f6:b8:bc:c4:b2:fb:03:d2:01:b6:53:d2:cc:a8:
b1:aa:5b:2b:17:26:7c:32:c1:1b:e2:18:19:b3:49:
f6:7f:3a:55:d4:23:2d:58:d1:22:13:6b:a3:24:ff:
f4:28:bd:d3:72:6d:64:34:48:6c:2b:93:7d:34:88:
f0:1e:7e:46:c9:21:84:da:a4:30:c8:d5:23:a1:57:
95:b1:f4:a0:4b:ce:4d:75:e2:38:41:c1:06:98:53:
2d:ea:5a:45:8c:87:ce:d2:03:9e:01:d1:7b:ba:a3:
bd:04:58:9e:f5:d2:38:2e:0b:25:0d:9b:bc:03:f3:
8b:b3:74:3f:17:83:c4:aa:38:39:ee:38:07:a9:1d:
69:78:74:45:98:71:6b:a2:cc:e2:aa:4c:c6:06:5f:
8d:8e:3e:3f:df:14:d8:9e:da:29:1b:15:45:9c:4d:
a9:9b:2e:99:20:f7:8c:99:64:f4:c5:18:10:68:3c:
d2:ba:e5:05:1c:5b:7c:2d:dd:6c:5e:99:9a:f6:78:
5a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:5B:67:BB:5A:51:8C:3F:96:81:79:62:04:B1:F4:56:A2:87:10:6C
X509v3 Authority Key Identifier:
keyid:73:DF:EE:A9:C7:DE:24:6E:6D:7D:1A:50:74:06:28:5B:22:6F:92:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9_uqcfeJG5tfRpQdAYoWyJvkoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/9c0a7e-9963-4c0d-94ac-446d0a7e9404/1/UFtnu1pRjD-WgXliBLH0VqKHEGw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/9c0a7e-9963-4c0d-94ac-446d0a7e9404/1/c9_uqcfeJG5tfRpQdAYoWyJvkoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.57.44.0/23
Signature Algorithm: sha256WithRSAEncryption
8f:98:c6:75:61:47:12:b0:46:6a:bb:b9:dc:04:1c:05:1f:6d:
28:af:ae:c6:ca:25:5b:17:4a:77:03:84:94:e4:ab:f4:fc:6c:
3e:c9:2a:24:aa:94:6d:1e:d8:97:9c:28:e7:81:cb:48:81:fe:
72:1e:05:0d:85:d5:aa:fb:eb:62:64:dc:f2:74:e3:1b:74:a3:
00:30:e6:f7:46:56:c5:5b:5a:45:70:32:9e:98:6f:5e:dc:14:
62:04:95:1c:80:9f:e0:2c:c2:ed:96:9f:61:31:9b:66:6e:b9:
73:5b:b0:d5:26:07:52:48:71:3f:86:4b:8f:6b:b5:d2:46:94:
c9:43:49:73:4a:67:e7:02:70:d3:14:68:60:8b:3c:f5:7d:82:
2c:64:e6:db:28:32:b4:b9:92:9c:9f:81:52:3b:a8:95:39:54:
be:a4:bf:bc:34:45:0e:30:f4:2a:17:6f:58:74:0e:65:df:7e:
70:9e:69:3f:ff:62:63:90:a0:76:01:e6:ea:b2:aa:10:70:34:
a3:35:69:ae:4b:07:13:84:58:fb:fd:43:94:87:a3:31:d7:f1:
76:f7:64:d2:ab:6e:99:3d:09:2e:bc:da:1e:05:60:35:90:30:
15:93:fa:89:26:c8:4e:ea:ce:02:ce:5e:47:6d:69:47:0c:5b:
6e:1e:51:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:39 2023 by rpki-client on console.sobornost.net