Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/EIGEanDgA4EHqNd8BYeJgdhYqS8.roa
File: EIGEanDgA4EHqNd8BYeJgdhYqS8.roa (raw, json)
Hash identifier: xw+rMROc09z20fNb4rjDumeiucimyDCoAkUGfqFPL+A=
Subject key identifier: 10:81:84:6A:70:E0:03:81:07:A8:D7:7C:05:87:89:81:D8:58:A9:2F
Certificate issuer: /CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Certificate serial: 0182F8E354EE81870E4199B20BB964F9335A
Authority key identifier: CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/EIGEanDgA4EHqNd8BYeJgdhYqS8.roa
Signing time: Thu 01 Sep 2022 11:50:24 +0000
ROA not before: Thu 01 Sep 2022 11:50:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35297
IP address blocks: 194.35.114.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:f8:e3:54:ee:81:87:0e:41:99:b2:0b:b9:64:f9:33:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Validity
Not Before: Sep 1 11:50:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1081846a70e0038107a8d77c05878981d858a92f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:91:1f:ed:33:d0:cb:26:30:b0:84:d1:7b:bf:
78:19:ee:38:62:38:c8:3b:20:47:e8:a3:76:17:aa:
54:b2:44:5b:de:9d:d3:95:9f:0d:51:c6:a5:1e:ec:
34:f8:82:e9:57:69:6c:e4:8a:a4:72:d0:48:f1:6d:
66:c8:b2:6d:62:76:5f:b1:80:7f:d8:ce:3f:41:2a:
b1:3b:a0:f9:0d:dd:b3:20:54:64:b0:be:64:96:81:
b5:27:fe:bb:6b:0e:aa:33:d5:26:40:99:14:0f:a3:
a4:30:ca:3d:c2:d0:50:30:60:29:f8:de:b3:8e:9c:
4e:fd:fe:a9:2a:6e:f0:7f:5c:40:85:63:0c:9f:be:
17:30:c8:13:3a:39:4c:96:8f:42:95:23:0a:d1:2a:
84:34:b3:02:a0:8a:fc:13:9c:47:2e:3d:10:b9:76:
bd:ea:86:5e:ac:d2:ad:68:c6:e8:50:dd:1b:cb:4d:
1e:f4:a3:70:42:30:dc:d0:32:de:db:92:25:e5:09:
b9:0b:af:0f:5c:fa:c3:3c:79:37:45:0f:dd:a7:bb:
42:73:24:ca:75:0a:ed:af:99:22:99:26:1f:03:7f:
f4:c4:2e:6a:47:58:9a:7c:3e:ea:6a:2a:70:d3:30:
32:7c:77:ae:3b:06:8f:f2:10:ae:e4:97:b0:00:53:
09:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:81:84:6A:70:E0:03:81:07:A8:D7:7C:05:87:89:81:D8:58:A9:2F
X509v3 Authority Key Identifier:
keyid:CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/EIGEanDgA4EHqNd8BYeJgdhYqS8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.35.114.0/24
Signature Algorithm: sha256WithRSAEncryption
45:e8:df:1c:af:6c:f2:1b:e1:4c:99:0c:bc:20:76:60:5c:03:
7c:cf:92:e1:a5:74:38:3f:4f:35:3a:f6:5f:f4:e4:46:9c:b2:
7f:2f:30:13:77:33:94:14:9a:38:83:aa:0e:e3:f0:09:c8:f2:
a4:b2:a2:88:a1:c7:cf:0c:fd:29:1e:70:d2:85:c3:b8:03:97:
83:af:40:1e:e7:61:e4:f3:04:1d:e6:51:12:c0:f9:d3:d2:97:
5d:6f:63:3b:95:4d:86:78:84:98:8e:6f:2e:39:89:03:00:c7:
d9:b2:9c:48:54:c5:c1:b7:5b:97:9a:55:8e:15:56:8f:be:e4:
de:1c:08:de:26:66:28:07:20:2f:3c:9f:ab:df:83:c2:f8:03:
93:3a:59:83:ec:9c:cf:ed:2a:d7:2f:f6:cd:5c:f7:68:34:9e:
ef:32:85:6a:ac:24:95:de:4c:9a:d5:ef:39:50:0a:de:8d:5c:
98:cc:32:8c:7f:ff:fa:05:b9:c2:90:ad:03:56:21:6a:96:cb:
e0:d9:38:18:31:94:b9:db:75:5b:a3:01:4c:55:5d:49:ce:b3:
4d:49:4a:b3:aa:42:c8:d4:4d:0a:38:a9:d2:4a:e2:70:b4:d7:
b7:bc:d6:ba:cb:6e:f8:76:26:98:1e:1c:5f:03:41:d0:9b:e1:
65:32:56:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:17 2024 by rpki-client on console-fra.rpki-client.org