Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ZofIwp2wnRRO7zGBYydKesOOC6s.roa
File: ZofIwp2wnRRO7zGBYydKesOOC6s.roa (raw, json)
Hash identifier: VJmQ5gqfbiJzhuUfvUG+uieX0WJ0LYW2Kh2Te325rRw=
Subject key identifier: 66:87:C8:C2:9D:B0:9D:14:4E:EF:31:81:63:27:4A:7A:C3:8E:0B:AB
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 1E9BD9D0
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ZofIwp2wnRRO7zGBYydKesOOC6s.roa
Signing time: Mon 23 May 2022 07:26:30 +0000
ROA not before: Mon 23 May 2022 07:26:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 0
IP address blocks: 194.180.50.0/24 maxlen: 24
194.55.186.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 513530320 (0x1e9bd9d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: May 23 07:26:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6687c8c29db09d144eef318163274a7ac38e0bab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:b9:88:a3:37:50:32:f0:c7:99:6a:30:c0:a1:
e3:01:78:2a:8a:c7:9f:17:ad:65:9c:31:fc:37:bb:
a9:d8:47:6d:2a:67:00:bb:91:8d:1b:2f:26:49:ca:
4b:91:fd:42:b5:cc:60:d9:14:7f:b5:4d:94:57:50:
b4:f0:f6:f2:7a:00:73:ce:f4:04:b3:68:1d:f9:b2:
a5:c0:c2:ec:3d:f2:8b:8e:96:55:14:6e:09:72:40:
29:e0:42:18:91:5d:3a:7d:57:26:38:7d:86:c4:04:
85:b7:8d:f6:8e:0d:0d:96:a2:58:43:27:e2:43:ab:
e7:69:ac:f5:fe:e2:9f:15:b5:1c:34:cb:a3:56:a4:
ee:7c:2c:4d:ef:59:ec:29:f7:7e:1a:75:3e:4e:0b:
57:e5:80:a3:85:73:8c:7d:dc:18:89:1c:82:a5:bc:
c9:ad:8d:89:92:cb:02:c5:41:ee:3d:d1:38:d8:07:
f2:d4:2a:33:30:c3:e2:b3:24:41:28:02:c8:12:8f:
09:40:a0:b0:c4:a9:59:07:1f:59:fb:27:91:55:ba:
cd:df:c9:c4:7e:66:99:37:f5:26:66:84:a1:92:37:
0a:e0:0c:f3:d5:e9:1a:26:32:3f:a7:9e:e1:7e:83:
53:90:8e:d9:24:09:32:40:96:52:cb:5d:cb:8b:58:
56:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:87:C8:C2:9D:B0:9D:14:4E:EF:31:81:63:27:4A:7A:C3:8E:0B:AB
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ZofIwp2wnRRO7zGBYydKesOOC6s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.55.186.0/24
194.180.50.0/24
Signature Algorithm: sha256WithRSAEncryption
10:31:57:76:95:25:79:be:da:d2:63:79:79:fc:62:b7:6e:20:
ae:4f:5e:1f:31:ed:85:29:34:ab:5f:36:65:ac:23:6f:9c:a3:
a0:53:b5:29:55:ae:d7:90:4f:2d:49:08:54:bc:a2:c3:32:0b:
37:e3:22:32:41:c2:a5:0f:8e:25:1c:07:e7:89:e3:b7:02:2e:
8c:85:f8:5e:42:df:67:d2:e7:2c:03:9d:71:9a:d8:c2:1e:e7:
fe:93:74:c8:23:57:77:b6:92:15:7d:58:cc:47:8e:8e:5c:b6:
30:c4:fd:78:15:b2:47:86:40:f4:f3:5e:8a:49:b9:93:dd:68:
dc:b8:7e:77:39:fe:5e:0b:80:7a:09:1a:e3:41:de:31:f2:21:
0f:96:53:86:64:80:48:ba:44:7e:05:1a:27:e6:13:92:2c:d5:
f2:1e:49:e8:a1:84:a6:0b:81:f1:6a:fd:2e:65:60:76:86:97:
a6:1c:c4:c5:e3:51:63:ee:43:52:17:d9:88:a9:2d:14:18:70:
e4:02:24:1e:f1:c5:98:00:57:e5:be:38:dc:27:f9:8a:80:a0:
49:36:30:7b:d7:b0:5a:a6:b7:24:8a:d2:82:4f:f8:fb:2e:73:
b4:6d:2d:d2:84:e8:3f:6c:e8:92:df:5d:58:13:13:ad:9b:f2:
77:17:20:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:36 2024 by rpki-client on console-ams.rpki-client.org