Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/KyZ4bp5EkiQK22wVmdGCFMajp9o.roa
File: KyZ4bp5EkiQK22wVmdGCFMajp9o.roa (raw, json)
Hash identifier: SUAts/DoElynLZUUzW6FzRmHn2PMpappFvo5PA96Tsc=
Subject key identifier: 2B:26:78:6E:9E:44:92:24:0A:DB:6C:15:99:D1:82:14:C6:A3:A7:DA
Certificate issuer: /CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Certificate serial: 018570D554F1C6819B1AEC46B6AC20796781
Authority key identifier: CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/KyZ4bp5EkiQK22wVmdGCFMajp9o.roa
Signing time: Mon 02 Jan 2023 04:55:07 +0000
ROA not before: Mon 02 Jan 2023 04:55:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35591
IP address blocks: 91.223.199.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:d5:54:f1:c6:81:9b:1a:ec:46:b6:ac:20:79:67:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Validity
Not Before: Jan 2 04:55:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2b26786e9e4492240adb6c1599d18214c6a3a7da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:30:b3:e0:93:35:bd:67:8a:ec:b6:f1:6e:76:
32:dd:9d:7e:f1:3d:4f:73:1c:3c:d4:29:ad:6b:1c:
68:48:6f:3c:ed:f5:52:64:ca:49:24:b5:43:62:cd:
2e:d3:5f:26:d9:23:5b:54:be:7c:f2:ad:e6:f4:db:
d6:5d:7a:cb:f0:32:8f:45:53:9a:c3:09:bb:66:63:
83:a4:51:ce:9b:1e:33:f7:72:6d:80:43:5c:fd:39:
0b:4b:8c:0c:03:46:48:d2:46:fc:eb:ae:d5:b1:59:
c7:50:d7:fd:5e:db:fa:e6:e6:59:f7:05:cc:d0:bd:
9a:37:a6:a8:83:7b:05:43:f5:37:9f:2a:b4:5e:38:
4c:37:14:ed:6c:80:0a:20:ae:7c:63:46:85:74:43:
59:94:61:07:1e:a3:75:33:d1:53:ee:24:b4:cd:46:
e6:d9:0b:4f:88:ea:6b:7d:c7:81:be:46:99:42:cc:
0d:af:19:ca:2c:77:39:49:6a:3f:b9:28:89:0a:9f:
27:4b:c9:6e:20:fd:5f:1b:1b:55:84:20:02:a0:51:
42:f6:0d:8f:ca:96:08:dc:33:55:ee:86:8c:b6:3d:
23:aa:7b:97:27:96:21:ff:62:34:6b:d5:b6:43:bc:
02:3b:79:2a:92:88:d4:a4:ce:93:45:86:04:b5:cd:
a6:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:26:78:6E:9E:44:92:24:0A:DB:6C:15:99:D1:82:14:C6:A3:A7:DA
X509v3 Authority Key Identifier:
keyid:CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/KyZ4bp5EkiQK22wVmdGCFMajp9o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.199.0/24
Signature Algorithm: sha256WithRSAEncryption
d3:da:32:a3:e2:9c:c1:93:a1:4b:94:1f:f8:16:14:45:8b:df:
00:df:66:89:25:15:cf:f3:79:03:06:a2:48:6b:a2:b6:36:ae:
28:52:cd:c3:41:c9:19:39:a3:b0:ee:71:61:b7:3c:43:e0:25:
a8:d5:ed:f1:e7:f4:c8:0b:fe:87:11:53:3f:b8:7a:5e:5a:ee:
9e:05:bb:f2:f8:0a:b0:49:7e:7f:86:a7:f8:ef:22:87:b1:50:
c3:14:fb:6e:5b:11:67:17:25:9c:5c:48:f9:3f:16:fb:e3:cd:
0e:13:17:04:d7:0d:3a:30:30:f4:55:1c:ed:57:ee:a3:93:d5:
ea:44:61:97:cb:fc:7a:8d:cb:91:a4:d0:83:88:20:dd:65:89:
3b:13:89:7d:38:fb:fe:ed:90:8c:3b:b4:b6:7f:20:ac:24:0b:
a2:71:36:56:67:ce:b0:69:6a:b0:e3:1e:d1:c7:40:4f:ca:2b:
da:f3:41:2c:c9:34:56:72:33:bc:39:2b:e2:e7:b5:38:90:14:
e3:c8:41:d3:3d:3a:79:49:d3:cf:90:b9:15:4d:be:3c:37:9d:
fa:e8:2e:58:d4:01:01:3c:c2:d1:ed:33:6f:43:c5:e1:ae:25:
15:98:f1:08:ee:9f:d8:52:f4:8a:ae:c7:28:4d:c2:ae:dd:1f:
fc:52:63:5d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVw1VTxxoGbGuxGtqwgeWeBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjZDc2MTU5YmZkOWUzMzc1MjNlZTkzMGYzZGYxMTFkNmJh
ZTczMDYwHhcNMjMwMTAyMDQ1NTA3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYjI2Nzg2ZTllNDQ5MjI0MGFkYjZjMTU5OWQxODIxNGM2YTNhN2RhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0jCz4JM1vWeK7LbxbnYy3Z1+8T1P
cxw81CmtaxxoSG887fVSZMpJJLVDYs0u018m2SNbVL588q3m9NvWXXrL8DKPRVOa
wwm7ZmODpFHOmx4z93JtgENc/TkLS4wMA0ZI0kb8667VsVnHUNf9Xtv65uZZ9wXM
0L2aN6aog3sFQ/U3nyq0XjhMNxTtbIAKIK58Y0aFdENZlGEHHqN1M9FT7iS0zUbm
2QtPiOprfceBvkaZQswNrxnKLHc5SWo/uSiJCp8nS8luIP1fGxtVhCACoFFC9g2P
ypYI3DNV7oaMtj0jqnuXJ5Yh/2I0a9W2Q7wCO3kqkojUpM6TRYYEtc2mSQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCsmeG6eRJIkCttsFZnRghTGo6faMB8GA1UdIwQY
MBaAFMzXYVm/2eM3Uj7pMPPfER1rrnMGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvek5kaFdiX1o0emRTUHVrdzg5OFJIV3V1Y3dZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9mNmFkYTEtN2U4YS00YjNlLWI3ZTgt
Zjg1ODlmNjgyNjkxLzEvS3laNGJwNUVraVFLMjJ3Vm1kR0NGTWFqcDlvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC9mNmFkYTEtN2U4YS00YjNlLWI3ZTgtZjg1ODlmNjgyNjkx
LzEvek5kaFdiX1o0emRTUHVrdzg5OFJIV3V1Y3dZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9/HMA0G
CSqGSIb3DQEBCwUAA4IBAQDT2jKj4pzBk6FLlB/4FhRFi98A32aJJRXP83kDBqJI
a6K2Nq4oUs3DQckZOaOw7nFhtzxD4CWo1e3x5/TIC/6HEVM/uHpeWu6eBbvy+Aqw
SX5/hqf47yKHsVDDFPtuWxFnFyWcXEj5Pxb7480OExcE1w06MDD0VRztV+6jk9Xq
RGGXy/x6jcuRpNCDiCDdZYk7E4l9OPv+7ZCMO7S2fyCsJAuicTZWZ86waWqw4x7R
x0BPyiva80EsyTRWcjO8OSvi57U4kBTjyEHTPTp5SdPPkLkVTb48N5366C5Y1AEB
PMLR7TNvQ8XhriUVmPEI7p/YUvSKrscoTcKu3R/8UmNd
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:46 2024 by rpki-client on console-ams.rpki-client.org