Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/47x1cowrf3bwZ4XirjA-sfV2Qo8.roa
File: 47x1cowrf3bwZ4XirjA-sfV2Qo8.roa (raw, json)
Hash identifier: 2vwTcacgL/juvPNnf/iVjWu7Sn1CYujZ1Z2h7pfIYUM=
Subject key identifier: E3:BC:75:72:8C:2B:7F:76:F0:67:85:E2:AE:30:3E:B1:F5:76:42:8F
Certificate issuer: /CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Certificate serial: 05B9A9F5
Authority key identifier: CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/47x1cowrf3bwZ4XirjA-sfV2Qo8.roa
Signing time: Sun 02 Jan 2022 18:54:31 +0000
ROA not before: Sun 02 Jan 2022 18:54:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50340
IP address blocks: 185.17.8.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96053749 (0x5b9a9f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Validity
Not Before: Jan 2 18:54:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e3bc75728c2b7f76f06785e2ae303eb1f576428f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:fa:0b:31:81:ec:3e:d6:e5:b3:e6:d1:1f:c1:
7c:44:4b:bc:5d:da:38:3f:f0:cb:d3:8e:0e:fa:a1:
07:7e:50:e9:3c:be:40:80:fa:ff:0d:a7:24:ee:0c:
d6:47:2d:00:42:71:24:62:a7:d5:15:80:95:2b:dc:
78:91:7a:2f:c7:a4:50:3b:c8:9f:fa:94:42:64:8c:
0d:0d:1b:55:e5:be:69:d2:75:bc:88:ce:a5:2b:73:
12:a9:6a:fd:76:e0:9b:52:eb:fe:19:3d:8a:c8:f9:
39:5b:5f:57:5a:c6:11:68:7a:80:ab:84:08:92:bd:
5e:ff:f8:de:7d:88:0d:5f:d3:8d:6f:23:16:e6:7f:
83:53:ac:6d:8b:e5:00:f7:de:52:1e:6c:c4:f0:b5:
bf:20:c1:68:70:0c:82:d3:5e:c7:50:b7:d3:78:1b:
01:93:6f:3f:f0:04:59:48:f1:5e:d2:d8:7e:76:0d:
ed:ab:f9:18:1d:d7:9e:98:87:a7:6d:65:e3:06:bc:
d8:ad:d8:a1:50:06:82:88:ff:7c:1b:09:af:b1:9e:
5f:71:2c:b0:21:37:e7:f6:33:08:a3:b3:36:4b:6c:
a9:1d:cf:b0:05:3f:ee:c0:08:4e:b3:6f:8e:42:ef:
c3:a3:97:8c:50:d3:e1:bc:27:09:1c:04:3e:c3:ea:
a1:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:BC:75:72:8C:2B:7F:76:F0:67:85:E2:AE:30:3E:B1:F5:76:42:8F
X509v3 Authority Key Identifier:
keyid:CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/47x1cowrf3bwZ4XirjA-sfV2Qo8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.17.8.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:cb:df:1a:53:20:3f:cb:cd:3a:b9:ea:5b:73:d5:7a:fb:76:
0f:85:bc:b9:7d:7c:ff:bb:72:0d:7a:8e:54:10:50:d2:02:00:
a1:e6:c6:91:32:a2:36:94:b4:ff:01:d5:a5:51:39:7e:21:3c:
a3:9a:4a:c0:55:62:3e:2d:5c:57:3b:02:2b:cb:d6:cc:01:cf:
48:1b:b2:ff:fa:ae:a3:7d:5d:67:29:42:1b:f2:56:7a:e2:10:
40:84:e0:bd:80:1a:57:be:45:fe:4f:64:fb:6d:99:ef:32:1a:
e9:96:51:d9:42:13:0a:6c:ea:e8:12:9b:34:52:4f:0e:18:40:
4c:34:5b:d1:ae:02:e6:25:df:38:2c:d7:b1:7b:29:56:99:ba:
dc:93:67:b8:50:71:07:75:9a:dd:26:5c:bb:46:eb:39:9d:37:
8a:8d:20:2d:7f:1d:4b:9d:4d:b1:21:00:d1:1c:c2:81:90:73:
27:03:ea:a6:04:e2:9b:70:99:fd:9b:81:78:e7:f7:3c:07:03:
a7:11:6c:1f:4a:14:02:13:97:c4:ea:c8:bb:13:b2:9f:c9:03:
be:87:6c:1d:1b:68:fd:b3:90:54:f7:51:f6:a7:8e:5e:20:e9:
e3:79:68:d5:cc:a0:17:ba:b2:7d:61:a8:d8:4a:0e:d9:df:14:
42:4b:86:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:52 2023 by rpki-client on console-ams.rpki-client.org