Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/OK7RFWBvePV6a4ujck9dRxULTN8.roa
File: OK7RFWBvePV6a4ujck9dRxULTN8.roa (raw, json)
Hash identifier: yt65yTnh02ZYkRdZM52NP3lSF4SLtfT9h47ArZAgx70=
Subject key identifier: 38:AE:D1:15:60:6F:78:F5:7A:6B:8B:A3:72:4F:5D:47:15:0B:4C:DF
Certificate issuer: /CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Certificate serial: 018221651EFEC728F889093280B6604B1CF4
Authority key identifier: CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/OK7RFWBvePV6a4ujck9dRxULTN8.roa
Signing time: Thu 21 Jul 2022 15:34:11 +0000
ROA not before: Thu 21 Jul 2022 15:34:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35830
IP address blocks: 193.56.67.0/24 maxlen: 24
193.56.75.0/24 maxlen: 24
91.243.190.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:21:65:1e:fe:c7:28:f8:89:09:32:80:b6:60:4b:1c:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Validity
Not Before: Jul 21 15:34:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=38aed115606f78f57a6b8ba3724f5d47150b4cdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ce:05:57:bb:74:17:e6:e2:df:4f:b7:92:f7:
9d:62:7c:22:2a:81:8d:9f:42:a3:c7:3c:4d:25:d1:
4b:90:f6:af:2e:98:88:f3:f3:37:a5:c4:58:2a:4d:
63:90:4d:8f:88:7b:0d:79:e7:84:47:c5:8f:ee:8a:
08:f2:fc:17:ad:2f:60:ad:e2:05:d9:26:db:fd:a8:
4d:52:02:8e:65:92:b4:d6:bd:8d:fa:e0:72:76:76:
67:ae:ec:c1:5a:ce:d7:09:8e:e8:18:ad:05:a0:b5:
ae:06:df:3f:0c:b4:bf:6b:94:c5:c9:c6:6d:2d:0c:
a6:63:35:11:09:fd:0f:af:04:d7:86:36:77:17:35:
f9:1e:a7:cf:d7:1f:39:07:ca:39:fb:c9:61:5b:cd:
03:be:21:8a:de:dc:43:06:2f:91:4c:c9:20:5f:54:
dc:78:7c:ea:ed:f4:ad:1a:0b:f1:98:b8:8b:53:a1:
f7:5a:b8:d7:1d:8e:1e:05:2a:c8:0b:5d:8a:b1:6b:
8a:12:27:93:15:63:c8:fd:b6:bb:16:bb:6b:0c:c7:
60:02:e0:21:92:67:68:a9:95:53:f5:4e:06:88:8f:
85:62:6c:f1:0e:6b:9e:a4:f5:41:d6:80:47:08:db:
94:3f:fe:0e:e3:9c:c7:9b:1c:0c:0c:dc:d7:47:7d:
b6:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:AE:D1:15:60:6F:78:F5:7A:6B:8B:A3:72:4F:5D:47:15:0B:4C:DF
X509v3 Authority Key Identifier:
keyid:CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/OK7RFWBvePV6a4ujck9dRxULTN8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.243.190.0/24
193.56.67.0/24
193.56.75.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:31:50:e4:2c:ae:d8:57:c8:42:d7:c4:30:68:f2:a0:f4:a5:
c8:2c:0c:d0:81:53:a0:21:6c:8d:29:d3:f2:91:f8:50:f7:8c:
de:1e:02:33:15:fc:b9:68:1b:12:c6:0e:9c:97:d5:bf:19:af:
56:d0:13:03:8e:92:e5:29:95:8b:0f:f2:aa:b3:e5:4d:2b:4f:
c1:e3:5a:70:72:4b:c2:a3:a6:15:7f:d4:0e:ec:2c:79:fb:a7:
04:99:66:62:df:de:66:91:2d:27:35:fd:c7:3c:57:92:a6:4b:
3a:ed:9d:36:8e:c4:d9:c4:70:7e:54:45:4b:1c:6f:68:49:dc:
57:ba:15:78:e2:2c:39:1c:0d:38:93:d4:98:33:d3:68:93:af:
76:9e:e1:c6:a8:49:a0:50:66:7c:28:ef:a1:0b:15:e2:e8:4f:
46:b4:1d:e5:e4:36:b4:06:9a:22:63:48:93:ab:bb:a8:90:d8:
12:8b:4b:1d:f0:1b:8c:25:eb:55:e1:ab:31:84:bf:6c:e0:1f:
05:80:f9:ec:6a:9d:86:70:02:01:0d:bc:6d:6d:01:5f:eb:34:
08:40:66:c0:ec:35:2b:da:0f:18:06:85:6f:37:a4:51:62:2b:
8c:16:df:dd:fa:59:c3:a8:3c:85:95:cb:90:e3:4e:b5:dc:4c:
cb:53:f7:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:17 2024 by rpki-client on console-fra.rpki-client.org