Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/A2VIVQwNV_07gW2UDx3-Sw4y2HE.roa
File: A2VIVQwNV_07gW2UDx3-Sw4y2HE.roa (raw, json)
Hash identifier: qAxyw5tKPxrKI5+QO0j/8yLrKdW1fDJMU5OMYTl/Deg=
Subject key identifier: 03:65:48:55:0C:0D:57:FD:3B:81:6D:94:0F:1D:FE:4B:0E:32:D8:71
Certificate issuer: /CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Certificate serial: 018570D55F5CEABAE92C7C12E868ED30B480
Authority key identifier: CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/A2VIVQwNV_07gW2UDx3-Sw4y2HE.roa
Signing time: Mon 02 Jan 2023 04:55:09 +0000
ROA not before: Mon 02 Jan 2023 04:55:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58351
IP address blocks: 46.17.254.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:d5:5f:5c:ea:ba:e9:2c:7c:12:e8:68:ed:30:b4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Validity
Not Before: Jan 2 04:55:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=036548550c0d57fd3b816d940f1dfe4b0e32d871
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:1e:e9:8a:01:0f:27:99:c5:60:f4:24:4e:e3:
a0:3b:ef:26:0e:a1:77:0c:1f:1d:fd:47:b6:1b:6d:
31:44:7f:f4:44:f5:da:b8:69:ba:e4:35:ca:2d:af:
c3:b8:2e:3a:a2:b5:e8:53:60:77:45:05:df:10:d4:
44:fb:1b:19:9e:c0:0c:d8:3b:ce:94:ac:b6:51:f8:
8b:72:ac:84:82:39:c2:2d:c4:b7:92:59:4e:d7:09:
6b:80:03:76:7e:15:28:c6:ba:bb:a2:0e:6a:52:87:
77:7f:7d:c2:41:8b:1f:ff:b8:5f:ee:0a:6b:b7:67:
37:39:99:ad:db:30:83:ea:0a:af:d4:0c:42:78:aa:
3d:37:57:6c:81:ae:e6:1d:bd:12:4f:8b:3f:db:9d:
ad:7b:5a:e9:3f:77:47:98:1e:9f:78:87:89:b9:3b:
2b:f3:dc:ac:17:3d:5c:97:54:2c:9d:ad:14:dd:85:
b5:bc:61:15:92:37:17:23:92:3a:59:84:f5:ae:cc:
6f:ff:20:d1:7e:f8:2f:f9:43:55:1d:a6:3d:57:c7:
6c:83:94:08:3d:fc:f9:24:92:bf:da:2c:dd:86:fd:
98:36:8e:e7:47:9b:e4:a5:eb:a8:d0:52:76:07:34:
eb:ba:f4:e4:44:28:07:d4:04:70:80:a4:80:5f:3f:
2b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:65:48:55:0C:0D:57:FD:3B:81:6D:94:0F:1D:FE:4B:0E:32:D8:71
X509v3 Authority Key Identifier:
keyid:CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/A2VIVQwNV_07gW2UDx3-Sw4y2HE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.17.254.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:50:4e:5c:3a:4a:4a:97:92:58:57:2d:27:5a:20:6b:c6:a6:
c5:af:71:74:44:99:2b:ad:ef:88:fa:e2:b4:10:0e:7c:d7:1f:
d4:90:fb:7b:5f:58:39:86:a6:8f:2f:1c:94:31:95:c8:5e:be:
4b:c4:24:e1:48:ab:83:ff:87:ec:2b:ae:fd:44:c9:07:fc:ce:
ac:cd:d1:28:2e:f0:63:45:18:99:a0:fd:9c:4f:a0:d1:b2:81:
76:70:22:b6:36:9b:b4:d5:6a:8e:d1:62:2d:93:c0:d7:a3:dc:
d4:ef:7c:62:76:21:3a:1b:08:43:de:69:da:3e:98:41:cc:8d:
3d:53:88:47:9c:6a:32:46:6a:2c:58:b6:91:1d:a1:b7:05:cf:
df:6b:70:91:a8:a2:66:af:25:c4:47:5d:e4:7a:96:7e:4a:83:
ec:e1:9b:0d:01:ac:ca:35:70:66:0d:70:60:b8:62:a7:90:1c:
74:45:73:4e:4a:5e:58:fa:35:02:6b:1d:d6:1a:da:8b:c5:a3:
b2:0f:e9:13:b0:14:23:cf:2e:f6:ae:fe:7c:cc:2d:35:fd:39:
9c:06:80:ed:f3:69:42:c3:ab:c0:02:3b:e8:94:12:17:9f:a0:
02:8a:0b:bf:fd:53:5c:b6:39:bb:58:af:52:47:57:77:9a:0b:
c4:54:09:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:11 2023 by rpki-client on console-fra.rpki-client.org