Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/PTMCG-i7qmFXYHhGrZGULAH9eDE.roa
File: PTMCG-i7qmFXYHhGrZGULAH9eDE.roa (raw, json)
Hash identifier: c925+9pYCAi8IL+DhTf0e0Q9Ran1yJ6ZlB1ppjPBLRQ=
Subject key identifier: 3D:33:02:1B:E8:BB:AA:61:57:60:78:46:AD:91:94:2C:01:FD:78:31
Certificate issuer: /CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Certificate serial: 0758534A
Authority key identifier: CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/PTMCG-i7qmFXYHhGrZGULAH9eDE.roa
Signing time: Wed 22 Jun 2022 10:18:33 +0000
ROA not before: Wed 22 Jun 2022 10:18:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12555
IP address blocks: 193.47.32.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 123229002 (0x758534a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Validity
Not Before: Jun 22 10:18:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3d33021be8bbaa6157607846ad91942c01fd7831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:dc:b0:d1:21:35:6e:50:b6:7a:51:75:47:3c:
3f:8d:61:21:29:1f:b7:3c:ff:59:21:68:9c:f5:bb:
78:a7:be:81:e2:1b:8d:10:d4:a6:6b:23:81:42:79:
23:02:c5:83:df:04:ff:4e:82:e4:ca:12:9f:89:11:
4c:2d:42:87:19:1d:ed:f2:13:97:20:c1:32:8d:c1:
4f:b3:61:ca:34:78:ee:18:52:b5:14:fd:2e:dc:8e:
6c:7e:c4:1f:25:09:a2:13:fb:82:46:54:6f:4f:a9:
cf:f7:b8:20:ac:1f:7b:23:59:70:d5:6c:9a:47:dd:
ea:6b:2f:b3:b5:c8:3d:60:6a:e6:23:06:1f:eb:ba:
e4:b9:31:10:fa:f2:ec:45:6c:42:18:06:bd:c6:d6:
bb:2b:08:73:e8:96:0c:8e:0e:eb:5c:27:e7:55:1d:
d9:f0:e2:53:b2:22:9f:03:07:25:90:d2:aa:c7:05:
9b:f5:6e:5d:3c:c6:73:01:22:a3:01:37:b5:28:0b:
31:98:b2:8d:ec:6f:0f:03:c1:eb:8f:7a:9d:86:1f:
d2:6f:27:b7:e2:76:3a:dc:7a:5f:c5:30:59:fe:29:
d6:5f:ee:97:cc:4b:6b:b4:4d:4c:77:54:10:08:b4:
33:a8:bb:06:a4:2b:bf:81:da:be:d1:6a:c3:c8:9e:
3b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:33:02:1B:E8:BB:AA:61:57:60:78:46:AD:91:94:2C:01:FD:78:31
X509v3 Authority Key Identifier:
keyid:CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/PTMCG-i7qmFXYHhGrZGULAH9eDE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.47.32.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:11:a2:bb:05:93:31:fc:5a:a5:9c:12:58:3b:c8:2c:6f:ac:
aa:58:db:35:31:61:9a:b1:32:68:f9:cd:67:de:80:7a:fc:6b:
9a:5b:7a:8b:84:85:78:7b:e7:40:d2:52:3d:52:20:de:bb:28:
a0:b7:71:f4:93:8d:27:8c:1e:46:4a:0d:4f:2e:f7:39:4c:05:
c2:3d:54:ea:81:1d:7b:f7:2f:2d:89:aa:9e:3a:26:2c:ba:e1:
68:27:48:50:f2:19:4e:b5:fa:8e:5a:2d:59:dc:c0:67:67:3f:
f5:13:b0:3f:97:c3:f6:82:c0:f8:36:3d:18:2d:b9:18:0e:f4:
d7:61:ce:97:37:a9:37:9d:51:20:c8:66:d1:3f:4a:b7:9e:97:
4f:b7:db:ae:e5:fa:c5:64:27:f8:1e:48:92:5f:f6:ad:5b:a7:
db:09:e5:4c:cf:9b:c5:7d:a6:ce:01:79:ed:94:f5:4c:63:4d:
a1:16:e3:f4:c8:28:0a:d9:58:90:ab:ee:3b:30:9f:c5:f6:42:
7f:5e:9a:ee:39:c7:86:d2:be:6d:29:26:0e:53:46:e4:61:b3:
97:5f:ae:cb:fa:67:86:9b:7f:4c:e2:3b:58:1e:89:9e:f4:3a:
0a:cc:e5:47:e1:63:a8:94:cf:35:d9:78:33:a8:92:1b:7c:cf:
3d:81:42:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:17 2024 by rpki-client on console-fra.rpki-client.org