Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/QyVerw2qXk7YekOoI7m1o0T8HNk.roa
File: QyVerw2qXk7YekOoI7m1o0T8HNk.roa (raw, json)
Hash identifier: HmwzAfWIFuY2WpQNyyWiel1PG9mH9cHfOWA4+uSZCR8=
Subject key identifier: 43:25:5E:AF:0D:AA:5E:4E:D8:7A:43:A8:23:B9:B5:A3:44:FC:1C:D9
Certificate issuer: /CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Certificate serial: 018570D55C221B4846A32DD5A21DE313D31E
Authority key identifier: CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/QyVerw2qXk7YekOoI7m1o0T8HNk.roa
Signing time: Mon 02 Jan 2023 04:55:09 +0000
ROA not before: Mon 02 Jan 2023 04:55:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50409
IP address blocks: 46.17.253.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:d5:5c:22:1b:48:46:a3:2d:d5:a2:1d:e3:13:d3:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Validity
Not Before: Jan 2 04:55:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=43255eaf0daa5e4ed87a43a823b9b5a344fc1cd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:21:84:c4:04:2d:08:bd:3b:de:06:ff:b9:9c:
75:6f:1f:0f:2a:e5:0a:5d:f5:93:a2:bc:89:ed:34:
1c:ba:b3:8c:e2:5e:1c:39:0c:6a:69:49:6c:e8:1f:
3d:cf:cc:96:48:ab:93:b5:7e:e2:5f:c5:9e:91:62:
96:7a:70:ff:9b:3f:0a:02:ac:5e:9b:8b:a5:21:8c:
39:e7:f3:fa:82:2f:b4:4a:5d:f9:b9:11:24:2b:17:
a4:94:3b:ca:07:f9:c3:7e:26:97:21:3f:2b:ad:d2:
2c:d4:a3:49:f6:df:09:dc:3f:0e:15:72:40:d9:c0:
90:98:b6:0f:6f:46:f4:6b:80:b4:0d:94:30:14:3f:
00:77:e1:4d:1f:d8:9e:7e:fa:35:4d:9d:3c:6a:1b:
06:61:72:90:f8:f2:9f:38:d1:71:74:30:08:48:ac:
33:a7:9a:a9:5e:52:9c:2a:eb:0a:64:28:b8:eb:8d:
b4:8c:a6:65:97:da:e3:3e:c7:dd:e7:8a:0f:79:c0:
82:7d:26:54:d8:8e:de:8f:a2:b3:36:b5:3e:fc:52:
0d:86:67:a5:b3:1f:45:d7:69:34:ba:a5:64:21:22:
a8:1e:7c:c8:8d:4d:49:4c:11:43:43:cd:2b:9d:a0:
f4:b3:0d:2c:41:93:53:58:15:d9:9d:e5:a4:80:72:
d4:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:25:5E:AF:0D:AA:5E:4E:D8:7A:43:A8:23:B9:B5:A3:44:FC:1C:D9
X509v3 Authority Key Identifier:
keyid:CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/QyVerw2qXk7YekOoI7m1o0T8HNk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.17.253.0/24
Signature Algorithm: sha256WithRSAEncryption
18:5b:e9:03:45:5d:7a:8d:df:62:fe:f3:86:da:41:86:21:65:
50:d3:ef:b5:88:1c:7b:ce:48:d6:f3:f7:6e:15:60:d5:53:40:
89:62:bf:f1:8f:36:81:b9:16:dc:39:48:44:51:6b:fc:59:e3:
b8:82:22:8e:74:cc:48:1f:32:4d:f2:e1:16:ec:bc:f4:69:65:
30:a9:fa:65:6f:68:64:1c:e6:59:67:9f:c4:a0:9b:47:02:fb:
69:a2:61:10:63:7c:90:a5:0a:0c:c7:c0:a8:41:60:41:2e:ea:
ae:79:07:5c:f4:20:b8:88:68:70:2d:b2:93:b1:d8:4a:da:cf:
df:28:4f:a2:fd:76:6e:9c:69:bc:c0:ff:3c:e2:4b:31:52:80:
22:aa:11:d1:a2:f5:d1:5a:cd:a5:ca:b8:8f:5e:17:41:90:11:
d5:a9:13:ad:53:7e:2d:ad:86:ed:6b:ac:9c:9f:15:d0:8c:01:
0a:90:7d:d0:27:cf:9c:0a:1e:3a:85:82:d9:d3:43:55:3a:cb:
ed:20:0c:c1:56:e2:a0:05:25:dd:a7:8d:4e:49:5b:ab:a9:df:
be:47:74:63:a5:fd:f1:46:4e:dd:66:72:99:0f:57:85:d7:d0:
1a:f9:2f:d2:94:3e:7f:68:aa:82:72:76:73:8e:dc:fb:76:8f:
0c:01:1a:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:17 2024 by rpki-client on console-fra.rpki-client.org