Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/99PSDPYeVURQTOpAlS5tPEt8MI8.roa
File: 99PSDPYeVURQTOpAlS5tPEt8MI8.roa (raw, json)
Hash identifier: 5fFOIfXXFzfN8AwfqvYN6KRTRDzpcOXE+ryyhfFQh7o=
Subject key identifier: F7:D3:D2:0C:F6:1E:55:44:50:4C:EA:40:95:2E:6D:3C:4B:7C:30:8F
Certificate issuer: /CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Certificate serial: 0181EF61EB5D635F104C90BCF90D255C4558
Authority key identifier: CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/99PSDPYeVURQTOpAlS5tPEt8MI8.roa
Signing time: Mon 11 Jul 2022 22:29:40 +0000
ROA not before: Mon 11 Jul 2022 22:29:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61416
IP address blocks: 194.35.125.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:ef:61:eb:5d:63:5f:10:4c:90:bc:f9:0d:25:5c:45:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Validity
Not Before: Jul 11 22:29:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f7d3d20cf61e5544504cea40952e6d3c4b7c308f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e6:68:ff:ec:fe:8b:c7:3f:9c:62:7b:d8:37:
62:fe:96:39:af:d3:9a:77:41:2d:cb:3d:a4:dd:c5:
a7:92:c6:32:31:f1:5a:92:20:ae:e1:b2:61:26:e1:
b7:43:82:6c:b7:13:84:6f:00:29:13:82:52:08:c5:
b7:08:5d:6b:56:50:0e:9c:68:0a:10:d8:8d:6b:16:
85:62:a2:6c:6c:23:e5:a5:44:30:20:a5:ee:52:ed:
2f:5c:51:d9:50:85:31:6f:b3:95:08:9d:f4:99:6b:
2d:34:92:8e:c3:1c:57:b2:c5:ac:66:58:2a:2b:73:
54:d1:21:cb:bb:5e:68:d9:c0:c1:46:d2:01:c3:90:
6a:de:e0:a6:90:93:2a:be:d7:d3:d2:c2:8a:de:53:
a4:6e:18:c4:f1:0a:2d:a4:87:ff:17:34:f4:a0:72:
90:d3:7a:a0:1b:25:fc:1e:59:3d:c5:ad:01:c1:fa:
42:25:8d:09:b9:b7:a3:b9:c2:80:e7:6f:d8:61:07:
37:e7:a0:bd:fe:d8:d1:fe:db:aa:d0:9b:bc:83:b6:
3a:5e:3d:e1:cb:e3:fc:c5:dd:ec:f0:c5:06:9f:5f:
4d:08:5d:db:64:db:df:0e:fa:2b:11:27:fd:84:cf:
dc:23:a2:51:f2:0c:23:bd:0e:b4:51:6e:10:61:ac:
18:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:D3:D2:0C:F6:1E:55:44:50:4C:EA:40:95:2E:6D:3C:4B:7C:30:8F
X509v3 Authority Key Identifier:
keyid:CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/99PSDPYeVURQTOpAlS5tPEt8MI8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.35.125.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:82:49:50:6d:1c:5c:1a:3f:b4:32:31:d9:d6:55:b3:31:e8:
96:a6:00:01:20:ab:b6:1e:1f:c0:c4:3c:34:bd:95:b0:e0:9d:
aa:da:ce:ed:40:33:ca:40:44:5a:06:52:b0:8a:cf:6a:d5:3b:
9f:50:15:2b:81:98:19:02:4d:3c:88:f4:85:49:37:21:ff:8f:
36:9a:aa:1a:4e:d7:04:4d:65:cd:11:0d:50:f0:0a:27:30:e1:
89:2e:ac:f7:97:cc:0d:62:fc:dd:37:e3:40:5c:f3:e2:4f:0b:
95:2b:62:cc:55:19:11:75:5b:db:7c:e2:c5:73:07:a5:65:d1:
7f:8b:aa:33:81:3c:fc:c3:2a:90:8c:8c:a6:78:fd:cf:c7:de:
a3:68:15:9d:da:eb:76:38:05:3f:c0:23:3e:09:7b:11:08:da:
02:13:d1:33:60:c6:f8:9f:9b:4d:99:06:75:e2:d0:22:1c:2e:
9f:d8:61:ed:46:a3:16:97:eb:aa:41:09:20:33:1f:b1:4b:97:
45:52:8b:30:84:bb:d0:fa:a3:d1:81:6f:db:68:f1:e8:c7:af:
8d:6a:19:1d:66:78:9a:87:b0:08:db:56:08:49:c5:2d:1c:87:
5f:5f:fc:cb:a1:e0:d7:47:83:c3:e4:b4:58:67:78:fd:2d:d4:
41:ef:4f:48
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYHvYetdY18QTJC8+Q0lXEVYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjZDc2MTU5YmZkOWUzMzc1MjNlZTkzMGYzZGYxMTFkNmJh
ZTczMDYwHhcNMjIwNzExMjIyOTQwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmN2QzZDIwY2Y2MWU1NTQ0NTA0Y2VhNDA5NTJlNmQzYzRiN2MzMDhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOZo/+z+i8c/nGJ72Ddi/pY5r9Oa
d0Etyz2k3cWnksYyMfFakiCu4bJhJuG3Q4JstxOEbwApE4JSCMW3CF1rVlAOnGgK
ENiNaxaFYqJsbCPlpUQwIKXuUu0vXFHZUIUxb7OVCJ30mWstNJKOwxxXssWsZlgq
K3NU0SHLu15o2cDBRtIBw5Bq3uCmkJMqvtfT0sKK3lOkbhjE8QotpIf/FzT0oHKQ
03qgGyX8Hlk9xa0BwfpCJY0JubejucKA52/YYQc356C9/tjR/tuq0Ju8g7Y6Xj3h
y+P8xd3s8MUGn19NCF3bZNvfDvorESf9hM/cI6JR8gwjvQ60UW4QYawYcwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPfT0gz2HlVEUEzqQJUubTxLfDCPMB8GA1UdIwQY
MBaAFMzXYVm/2eM3Uj7pMPPfER1rrnMGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvek5kaFdiX1o0emRTUHVrdzg5OFJIV3V1Y3dZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9mNmFkYTEtN2U4YS00YjNlLWI3ZTgt
Zjg1ODlmNjgyNjkxLzEvOTlQU0RQWWVWVVJRVE9wQWxTNXRQRXQ4TUk4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC9mNmFkYTEtN2U4YS00YjNlLWI3ZTgtZjg1ODlmNjgyNjkx
LzEvek5kaFdiX1o0emRTUHVrdzg5OFJIV3V1Y3dZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwiN9MA0G
CSqGSIb3DQEBCwUAA4IBAQC3gklQbRxcGj+0MjHZ1lWzMeiWpgABIKu2Hh/AxDw0
vZWw4J2q2s7tQDPKQERaBlKwis9q1TufUBUrgZgZAk08iPSFSTch/482mqoaTtcE
TWXNEQ1Q8AonMOGJLqz3l8wNYvzdN+NAXPPiTwuVK2LMVRkRdVvbfOLFcwelZdF/
i6ozgTz8wyqQjIymeP3Px96jaBWd2ut2OAU/wCM+CXsRCNoCE9EzYMb4n5tNmQZ1
4tAiHC6f2GHtRqMWl+uqQQkgMx+xS5dFUoswhLvQ+qPRgW/baPHox6+NahkdZnia
h7AI21YIScUtHIdfX/zLoeDXR4PD5LRYZ3j9LdRB709I
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:46 2024 by rpki-client on console-ams.rpki-client.org