Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/17JHq1qSCaIUVzpGvCwveGnQFSM.roa
File: 17JHq1qSCaIUVzpGvCwveGnQFSM.roa (raw, json)
Hash identifier: UvbgPBxoqiyvJHVt2MgvUli/cBJpBirpqv0TxMSeTZ8=
Subject key identifier: D7:B2:47:AB:5A:92:09:A2:14:57:3A:46:BC:2C:2F:78:69:D0:15:23
Certificate issuer: /CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Certificate serial: 05A92F6E
Authority key identifier: CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/17JHq1qSCaIUVzpGvCwveGnQFSM.roa
Signing time: Sat 01 Jan 2022 07:57:09 +0000
ROA not before: Sat 01 Jan 2022 07:57:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 40997
IP address blocks: 213.139.201.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94973806 (0x5a92f6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Validity
Not Before: Jan 1 07:57:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d7b247ab5a9209a214573a46bc2c2f7869d01523
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:cb:f7:1b:ac:dc:19:e9:4b:e5:1e:d0:da:53:
70:cf:ec:73:6c:e5:a7:90:2d:dd:77:97:64:b4:4b:
24:27:d6:2b:28:44:9f:41:21:28:61:ad:62:4f:f5:
ef:30:29:00:b8:39:96:81:c3:ff:11:51:b5:90:ea:
40:cb:c5:ac:56:0a:33:86:be:b2:1c:08:92:bf:a5:
0f:03:31:13:22:d8:86:28:b2:f5:22:03:7a:f5:a7:
a1:42:ed:2f:3b:f5:11:b3:6b:50:1f:b9:ec:56:44:
27:28:ba:cb:9e:51:da:13:7e:d1:65:3f:be:76:78:
37:19:5a:bd:aa:c9:19:94:de:bb:b4:8d:e9:73:0a:
4f:39:31:c0:07:f9:c7:13:c5:9e:ba:8e:ba:02:19:
b4:4f:e7:f3:50:ea:cb:51:a3:71:e7:8f:c2:97:9f:
56:02:73:be:f4:ab:17:a1:8d:05:08:1e:8b:b3:5a:
e1:35:a0:16:3e:51:fc:d8:9e:d0:bb:22:96:7c:99:
0e:66:10:fb:a5:a0:a5:a1:0c:ca:7d:5b:84:6f:69:
02:b0:7d:55:94:2a:4e:d6:bc:6f:9c:97:45:a8:3e:
10:c9:1c:c2:05:8a:08:58:b7:a1:f2:cd:90:4b:58:
91:c2:f2:09:24:7f:a7:4f:3f:5d:e1:e4:cb:3a:fb:
2f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:B2:47:AB:5A:92:09:A2:14:57:3A:46:BC:2C:2F:78:69:D0:15:23
X509v3 Authority Key Identifier:
keyid:CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/17JHq1qSCaIUVzpGvCwveGnQFSM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.139.201.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:9c:21:4d:04:a7:8d:67:e1:6b:a7:53:69:74:ea:9a:91:cf:
32:db:d4:11:50:1c:dc:db:c0:c7:49:40:92:52:f8:83:4c:2b:
17:42:78:82:31:ff:fc:89:21:16:38:94:d0:61:52:0c:48:a0:
04:5e:51:30:22:93:c1:10:32:7a:85:27:b1:26:c9:4a:22:bd:
d6:8a:1e:e9:ec:25:8a:0c:e7:6f:2e:a8:04:60:13:09:07:8e:
3c:58:93:1a:ab:7c:30:50:63:0f:59:7f:e7:a7:2d:c0:b0:ac:
0f:0b:ca:2d:d3:07:28:74:7c:38:ba:79:1c:6a:a0:04:fc:c9:
0f:d0:34:46:71:2e:a4:40:08:75:b2:4c:c3:c6:2f:9e:99:31:
87:1a:90:92:db:ba:52:c0:80:64:3b:cc:c8:f1:b9:8f:7a:14:
2e:b6:75:32:15:85:b1:d1:d1:fb:e0:bb:57:79:4f:bb:9d:dd:
d5:20:4a:ae:01:17:c4:12:13:c8:1b:81:92:d8:45:44:82:56:
ce:c8:53:9f:a7:f2:92:a8:2d:d6:8f:98:0c:cf:f3:9d:8f:6d:
15:b9:41:68:d3:94:85:29:a4:52:6c:79:ac:83:5e:68:49:18:
de:61:66:11:9f:39:5b:b9:47:b0:05:70:7c:a5:71:67:65:8c:
30:59:ac:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:17 2024 by rpki-client on console-fra.rpki-client.org