Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/DWerw6zxpICcY-9M7pePh2n_Ykc.roa
File: DWerw6zxpICcY-9M7pePh2n_Ykc.roa (raw, json)
Hash identifier: q8W766QzKjFxViJ7EByo7P2Ljuu/3U0QgNO9KFIDWu4=
Subject key identifier: 0D:67:AB:C3:AC:F1:A4:80:9C:63:EF:4C:EE:97:8F:87:69:FF:62:47
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 1E44161E
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/DWerw6zxpICcY-9M7pePh2n_Ykc.roa
Signing time: Wed 04 May 2022 06:05:35 +0000
ROA not before: Wed 04 May 2022 06:05:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 0
IP address blocks: 194.180.50.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 507778590 (0x1e44161e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: May 4 06:05:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0d67abc3acf1a4809c63ef4cee978f8769ff6247
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:bb:81:80:ee:ee:c5:b0:83:3b:28:72:b5:ad:
8a:71:03:4c:27:0c:fc:a6:5c:71:f2:07:3f:72:3f:
f5:c4:b1:94:f1:ad:0b:1d:dc:1f:dd:b8:0f:6d:99:
83:70:57:9a:91:42:d2:c8:a1:0a:6c:94:02:74:71:
ad:b6:4d:8b:47:3f:9b:17:97:44:8d:bf:83:da:aa:
36:39:52:15:c6:e4:c6:9a:c7:9d:d1:82:b3:ca:26:
db:9a:05:a2:7a:6d:8c:c1:52:c6:4f:3a:a8:33:55:
ab:c6:17:d1:2f:3d:31:aa:8c:45:41:09:f5:94:c0:
25:f1:dc:fc:68:f9:14:fd:9e:0f:2e:a3:b4:82:96:
a7:6a:2b:d2:68:9c:a9:85:e7:c9:dc:ca:64:de:cf:
00:aa:e4:34:9c:24:c0:83:b1:46:0e:ce:35:20:f9:
5b:a4:90:bc:62:e9:85:7b:6c:c7:42:2e:e3:8b:bd:
99:12:8f:22:05:ce:1c:a9:ad:fe:f9:5a:90:ec:87:
0e:03:65:63:65:3c:84:4a:3b:4c:b3:51:79:2e:99:
a5:67:47:fb:32:76:e1:99:01:d2:17:0f:fc:f4:63:
12:fa:3c:c6:33:37:07:72:8d:19:3b:3d:ea:28:b1:
4c:a7:c0:33:9e:29:93:82:13:b9:b7:0b:c0:f8:f6:
7c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:67:AB:C3:AC:F1:A4:80:9C:63:EF:4C:EE:97:8F:87:69:FF:62:47
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/DWerw6zxpICcY-9M7pePh2n_Ykc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.180.50.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:a7:b7:16:a8:3c:8e:3d:7d:16:5f:b2:16:2d:36:c5:91:c5:
00:3f:ac:99:c9:f8:9f:06:89:85:f7:ee:42:b6:4f:a1:5e:ac:
c9:d1:fa:5d:14:49:30:54:49:e8:49:b3:4a:a1:f6:d9:d2:28:
99:c6:f8:20:62:b3:94:68:83:d3:cc:dc:e7:de:d4:0c:7c:c4:
cc:43:55:57:35:0e:a3:a0:1c:c8:5e:f9:d8:24:5d:95:ee:12:
cd:8c:c0:d7:d0:e6:b7:33:18:82:69:85:f9:3f:26:d0:ab:ff:
df:e4:80:58:0d:e1:07:17:34:6c:5d:51:00:93:2f:e4:ad:d9:
37:92:e9:bd:86:e5:bd:1f:af:e0:b7:f3:4f:59:1a:b3:11:2f:
50:bf:6b:c7:1f:11:d4:d7:ef:ab:3a:bb:9a:53:da:85:64:e9:
80:cc:e5:f2:d0:68:22:f1:dd:4c:4c:38:9c:5a:61:16:ec:55:
d4:87:9c:79:e9:97:6e:cf:29:58:41:b6:17:08:c4:f3:84:ad:
34:50:f1:02:0c:e1:f3:fd:af:b8:ba:24:79:00:92:41:f8:f5:
fe:f8:b6:b3:fe:e6:d3:98:bf:47:5f:02:ed:6e:1d:95:23:ab:
cb:e4:da:2d:dc:db:25:d8:0c:4d:a9:35:23:71:f6:ce:fe:4c:
5a:df:1f:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:01 2024 by rpki-client on console-fra.rpki-client.org