Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/7vALfebxel5YXKdCM43BECNdMRQ.roa
File: 7vALfebxel5YXKdCM43BECNdMRQ.roa (raw, json)
Hash identifier: jiRk+4Wtmv/iowmFuyArUrWDaXNUO2Rc8DUi+Fl6m5o=
Subject key identifier: EE:F0:0B:7D:E6:F1:7A:5E:58:5C:A7:42:33:8D:C1:10:23:5D:31:14
Certificate issuer: /CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Certificate serial: 018292AEBEADAFCDD18E56DC437556B80ED3
Authority key identifier: CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/7vALfebxel5YXKdCM43BECNdMRQ.roa
Signing time: Fri 12 Aug 2022 15:31:41 +0000
ROA not before: Fri 12 Aug 2022 15:31:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56398
IP address blocks: 45.86.170.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:92:ae:be:ad:af:cd:d1:8e:56:dc:43:75:56:b8:0e:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Validity
Not Before: Aug 12 15:31:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eef00b7de6f17a5e585ca742338dc110235d3114
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:1c:b1:fb:ab:b6:3c:a5:8b:d0:a1:46:a0:2f:
51:82:87:71:ff:21:99:f3:af:3b:4c:f3:de:ce:b5:
35:64:90:e3:07:34:82:54:e7:9f:9e:1e:f4:ac:29:
8f:b7:41:2e:9f:5a:2f:30:0d:cc:44:b1:85:8f:53:
38:cb:9e:68:e2:04:4b:ef:28:c6:25:cd:bd:e5:cf:
98:6e:91:98:19:8c:13:89:1c:5d:dc:8b:80:23:33:
87:9b:49:a8:cd:82:9e:41:50:c0:29:32:2f:b4:4e:
57:42:05:2d:f3:1c:ea:5d:88:1f:60:95:81:45:8f:
3f:91:f1:ab:34:b1:86:2d:78:d9:78:9e:89:39:97:
03:5e:63:02:6b:ca:39:fb:ad:d9:af:f6:59:37:57:
76:44:74:6e:a2:fe:31:16:25:c3:33:fc:6f:79:a9:
6d:51:55:9c:1f:d1:b4:09:b6:cd:22:64:5a:da:c5:
01:ec:92:b7:09:ba:12:63:7f:db:bd:2b:05:35:26:
7b:41:6b:f0:c4:ba:3c:08:48:62:37:f5:7d:5e:78:
3f:44:df:cd:46:61:ca:01:f1:23:59:0a:5d:da:ea:
d4:65:8d:e4:c6:95:96:29:f2:81:07:f8:90:76:46:
4d:46:f5:c7:94:4e:26:a6:16:bf:25:ed:b9:53:a2:
75:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:F0:0B:7D:E6:F1:7A:5E:58:5C:A7:42:33:8D:C1:10:23:5D:31:14
X509v3 Authority Key Identifier:
keyid:CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/7vALfebxel5YXKdCM43BECNdMRQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.170.0/24
Signature Algorithm: sha256WithRSAEncryption
66:74:0e:84:5e:02:f3:c5:de:37:13:21:16:59:09:f5:89:4e:
e4:71:8c:5f:67:ae:ea:af:5b:c4:76:fc:4b:3e:0d:b1:81:4a:
8f:d0:9f:8d:b5:76:4d:7f:e1:69:64:33:fb:d8:8b:75:87:52:
95:bc:ca:0c:01:ed:f5:47:50:0b:5e:0d:92:5f:2d:71:d7:84:
d1:4f:f5:cb:f0:a4:ca:3e:e8:54:b8:42:a8:25:18:4d:12:30:
e2:b8:3d:b3:42:0d:b1:1c:89:a4:8b:a7:9c:11:92:ee:64:cd:
ac:ce:ca:ff:d6:32:11:b2:14:39:22:38:fe:b3:76:85:58:44:
70:a1:a7:a0:e6:8c:ff:ca:f8:ae:ab:51:37:5e:8e:cf:95:15:
be:9c:d5:89:e1:97:f6:5e:50:39:f7:a9:6d:52:74:28:1c:00:
1d:bd:bc:37:90:5e:8d:2e:00:79:a7:97:de:07:3a:9a:69:30:
f9:74:98:4e:c0:16:21:cc:8d:3c:e4:9b:46:72:b6:52:46:b9:
b6:a6:87:81:ae:89:2b:8d:2e:ff:0c:47:6e:c9:f2:80:ba:04:
2a:32:d4:fa:42:af:d6:c5:9c:c0:0a:e6:52:3f:e5:2b:e0:27:
12:55:ce:38:37:6d:e5:78:59:02:2a:c9:98:c3:bb:f6:37:17:
1d:89:1a:1d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYKSrr6tr83RjlbcQ3VWuA7TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjZDc2MTU5YmZkOWUzMzc1MjNlZTkzMGYzZGYxMTFkNmJh
ZTczMDYwHhcNMjIwODEyMTUzMTQxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZWYwMGI3ZGU2ZjE3YTVlNTg1Y2E3NDIzMzhkYzExMDIzNWQzMTE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnByx+6u2PKWL0KFGoC9Rgodx/yGZ
8687TPPezrU1ZJDjBzSCVOefnh70rCmPt0Eun1ovMA3MRLGFj1M4y55o4gRL7yjG
Jc295c+YbpGYGYwTiRxd3IuAIzOHm0mozYKeQVDAKTIvtE5XQgUt8xzqXYgfYJWB
RY8/kfGrNLGGLXjZeJ6JOZcDXmMCa8o5+63Zr/ZZN1d2RHRuov4xFiXDM/xvealt
UVWcH9G0CbbNImRa2sUB7JK3CboSY3/bvSsFNSZ7QWvwxLo8CEhiN/V9Xng/RN/N
RmHKAfEjWQpd2urUZY3kxpWWKfKBB/iQdkZNRvXHlE4mpha/Je25U6J1oQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO7wC33m8XpeWFynQjONwRAjXTEUMB8GA1UdIwQY
MBaAFMzXYVm/2eM3Uj7pMPPfER1rrnMGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvek5kaFdiX1o0emRTUHVrdzg5OFJIV3V1Y3dZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9mNmFkYTEtN2U4YS00YjNlLWI3ZTgt
Zjg1ODlmNjgyNjkxLzEvN3ZBTGZlYnhlbDVZWEtkQ000M0JFQ05kTVJRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC9mNmFkYTEtN2U4YS00YjNlLWI3ZTgtZjg1ODlmNjgyNjkx
LzEvek5kaFdiX1o0emRTUHVrdzg5OFJIV3V1Y3dZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVaqMA0G
CSqGSIb3DQEBCwUAA4IBAQBmdA6EXgLzxd43EyEWWQn1iU7kcYxfZ67qr1vEdvxL
Pg2xgUqP0J+NtXZNf+FpZDP72It1h1KVvMoMAe31R1ALXg2SXy1x14TRT/XL8KTK
PuhUuEKoJRhNEjDiuD2zQg2xHImki6ecEZLuZM2szsr/1jIRshQ5Ijj+s3aFWERw
oaeg5oz/yviuq1E3Xo7PlRW+nNWJ4Zf2XlA596ltUnQoHAAdvbw3kF6NLgB5p5fe
BzqaaTD5dJhOwBYhzI085JtGcrZSRrm2poeBrokrjS7/DEduyfKAugQqMtT6Qq/W
xZzACuZSP+Ur4CcSVc44N23leFkCKsmYw7v2NxcdiRod
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:17 2024 by rpki-client on console-fra.rpki-client.org