Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/2HXqMXvy-lx4CE_Kc7xoJN3rmdE.roa
File: 2HXqMXvy-lx4CE_Kc7xoJN3rmdE.roa (raw, json)
Hash identifier: Lcu/GL8GD8Zz6itUVNmsKDWaHNkCpGDg8bZv8ja0aC4=
Subject key identifier: D8:75:EA:31:7B:F2:FA:5C:78:08:4F:CA:73:BC:68:24:DD:EB:99:D1
Certificate issuer: /CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Certificate serial: 05ADA4FD
Authority key identifier: CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/2HXqMXvy-lx4CE_Kc7xoJN3rmdE.roa
Signing time: Sat 01 Jan 2022 07:57:11 +0000
ROA not before: Sat 01 Jan 2022 07:57:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49121
IP address blocks: 91.191.185.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95266045 (0x5ada4fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Validity
Not Before: Jan 1 07:57:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d875ea317bf2fa5c78084fca73bc6824ddeb99d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:67:da:75:22:be:b5:4c:8a:b1:98:27:dc:fb:
cc:06:a3:3a:4a:27:eb:5a:24:43:86:f6:4f:a4:3d:
54:f4:8f:c0:d6:5d:e3:b7:bf:ab:e3:57:4b:ec:83:
90:76:fa:ea:2f:13:ea:7e:0c:b1:10:f0:76:f9:9a:
be:a7:4c:02:b6:34:21:ee:88:57:0a:c8:a4:4a:9c:
98:6d:f3:06:67:33:b0:a0:8b:d9:da:66:b4:45:a4:
06:e0:30:d6:eb:8a:2a:fe:11:a7:ee:36:8d:7c:2a:
ee:33:0b:69:fa:b4:57:a3:41:71:2a:64:a9:02:86:
28:d7:bd:4f:f5:aa:b1:17:d9:b9:69:48:2e:e5:73:
e6:cd:5e:a5:ff:73:a8:13:98:c6:ae:97:c5:d4:0c:
d3:ae:59:7f:db:54:4b:50:ad:42:38:53:1a:e5:ad:
a9:ab:b9:c9:dd:8f:f2:11:b2:de:50:18:49:33:92:
17:d0:3f:b5:61:ff:1d:78:3d:12:2e:35:db:8a:fb:
e1:7f:6e:28:fc:39:bb:64:39:82:54:0c:28:c4:ab:
79:e7:9b:32:cc:13:8a:d5:67:d9:19:9a:88:be:37:
52:c9:bd:e2:dc:cb:89:65:3e:d9:64:9e:af:e4:3d:
ce:d0:9b:1f:e6:d5:fb:30:d7:60:d5:cf:6f:cf:b4:
35:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:75:EA:31:7B:F2:FA:5C:78:08:4F:CA:73:BC:68:24:DD:EB:99:D1
X509v3 Authority Key Identifier:
keyid:CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/2HXqMXvy-lx4CE_Kc7xoJN3rmdE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.191.185.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:a1:88:58:8d:63:f3:e7:e8:fe:40:f5:76:64:e0:c3:f0:bc:
07:1d:b7:00:e0:3b:49:f8:8b:fa:78:9b:ae:f2:1b:b1:23:71:
32:f7:70:87:5a:62:ae:9a:41:16:39:e1:72:74:6d:f1:81:b6:
3a:a0:36:34:65:44:86:d8:a2:67:73:db:ec:02:c9:9a:a6:44:
21:51:7e:7f:6a:44:aa:53:2d:84:e4:49:89:4d:eb:f1:46:22:
d1:56:16:2b:09:75:8c:a8:9e:90:d5:c6:5a:00:75:61:fa:5d:
da:22:21:4f:e8:9f:e9:99:11:a0:db:7f:f7:ef:25:c0:0e:ba:
59:a0:5c:31:39:46:e0:ff:7c:00:82:05:8e:ef:5a:de:df:12:
fd:48:50:a4:34:ed:21:5e:34:ef:16:4f:23:2f:5b:11:53:03:
3c:f0:1b:48:b0:90:85:10:07:65:95:e8:20:e2:a0:1c:c8:d5:
e5:19:ed:ec:6b:73:2d:19:1b:70:d3:fc:56:9a:d9:5f:c6:49:
fa:50:ae:e2:30:02:d4:06:24:d6:9c:28:1b:39:b9:08:79:ab:
a8:ce:c3:74:d5:3d:b7:82:5c:9c:8e:91:89:2a:3f:c9:4a:8f:
00:c6:6d:1b:e5:ea:f3:e2:7e:2b:fe:49:7e:6d:41:88:11:4f:
b6:35:48:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:17 2024 by rpki-client on console-fra.rpki-client.org