Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/SL0Rsp_enlE6NiOcJ9UTs6WWtOY.roa
File: SL0Rsp_enlE6NiOcJ9UTs6WWtOY.roa (raw, json)
Hash identifier: O23pxCsWUnhpzwE9d6x7C42W662FItGrsI7D6ghn0lw=
Subject key identifier: 48:BD:11:B2:9F:DE:9E:51:3A:36:23:9C:27:D5:13:B3:A5:96:B4:E6
Certificate issuer: /CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Certificate serial: 0189654E3704FA92EAB1DF2EE6DFAEA4FD16
Authority key identifier: CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/SL0Rsp_enlE6NiOcJ9UTs6WWtOY.roa
Signing time: Mon 17 Jul 2023 19:22:51 +0000
ROA not before: Mon 17 Jul 2023 19:22:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 395092
IP address blocks: 213.166.94.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:65:4e:37:04:fa:92:ea:b1:df:2e:e6:df:ae:a4:fd:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Validity
Not Before: Jul 17 19:22:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=48bd11b29fde9e513a36239c27d513b3a596b4e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:55:37:1b:22:7a:73:a1:d8:21:71:ca:80:59:
03:1b:d4:bd:69:72:c7:ce:c4:b9:e8:d4:67:41:d9:
6d:3a:53:17:6f:1b:33:c5:5e:64:13:e3:6d:18:b2:
92:a0:0d:8c:11:9b:5d:fb:db:f6:bd:41:e1:7c:08:
bd:14:f4:5c:09:a0:c0:6d:ec:08:7f:63:64:3c:8b:
d0:01:ca:8a:bb:a5:ae:79:0b:07:30:f1:49:54:4f:
60:0e:d4:cf:23:1b:ec:81:95:41:3c:14:83:e8:d7:
28:27:44:94:ae:64:4f:93:84:bb:d5:4c:e5:5b:a9:
47:19:37:9e:7a:59:1d:a5:c2:ae:b9:94:f8:18:be:
da:31:69:3f:37:80:39:74:22:5b:3d:ed:60:5f:b9:
f0:cf:47:93:45:c7:48:28:9c:a0:9e:c5:f0:96:8f:
18:e1:4d:9a:fb:33:09:f2:ca:75:3e:e1:52:b4:b1:
f0:17:c5:34:62:d8:01:16:0e:04:a4:e6:79:98:a8:
cb:4d:d0:e8:1c:73:e0:50:4d:47:c4:3f:25:ec:e0:
fb:ca:a7:1e:f2:47:3b:e7:2b:be:cf:74:6a:e6:77:
73:28:a4:5d:53:51:31:b2:9f:3a:4f:17:8f:4f:7a:
ae:55:94:84:b3:02:38:96:2b:4a:d9:a8:8a:9c:cd:
0a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:BD:11:B2:9F:DE:9E:51:3A:36:23:9C:27:D5:13:B3:A5:96:B4:E6
X509v3 Authority Key Identifier:
keyid:CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/SL0Rsp_enlE6NiOcJ9UTs6WWtOY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.166.94.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:89:7e:a9:e0:db:ae:f8:49:de:53:1b:43:ea:ef:2c:63:bd:
a8:4b:a7:f9:1f:36:39:bf:28:ee:92:ba:77:a4:6d:37:70:70:
ee:1d:98:49:90:33:3f:f6:d1:5e:55:f5:0f:6f:e5:fb:44:8a:
19:47:7e:c7:e9:a6:cb:7d:b6:38:b6:c6:d7:f6:78:57:b1:bf:
70:0f:47:be:15:cc:57:08:b9:d0:84:69:ce:49:18:da:87:f3:
f4:51:76:e6:78:24:7e:aa:5e:54:24:9c:b9:27:18:66:f1:e5:
ca:53:bc:cf:20:ea:80:a3:20:00:11:8c:b7:c9:d0:9c:63:84:
30:5b:38:ba:21:70:fa:4a:17:a9:51:d2:8b:36:e8:04:22:56:
aa:60:5e:a9:e7:6e:9c:52:9e:86:c7:ea:56:66:fc:89:a6:a8:
35:42:7a:95:17:6b:b7:44:8d:30:28:ec:42:10:bf:31:50:19:
7d:b6:d7:1a:9c:7f:72:2d:50:a6:f0:c3:40:bf:16:c6:b5:32:
13:d2:f6:97:33:d0:b5:a4:5f:0f:e0:70:bc:9c:9c:1b:34:52:
44:df:e1:1f:4a:9d:dc:a2:42:1f:bb:29:d3:bc:29:02:a6:e9:
1b:ce:9b:3a:97:4d:83:98:3f:f9:54:8c:98:b1:d7:c1:2e:dd:
91:10:1d:9a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYllTjcE+pLqsd8u5t+upP0WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjZDc2MTU5YmZkOWUzMzc1MjNlZTkzMGYzZGYxMTFkNmJh
ZTczMDYwHhcNMjMwNzE3MTkyMjUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OGJkMTFiMjlmZGU5ZTUxM2EzNjIzOWMyN2Q1MTNiM2E1OTZiNGU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg1U3GyJ6c6HYIXHKgFkDG9S9aXLH
zsS56NRnQdltOlMXbxszxV5kE+NtGLKSoA2MEZtd+9v2vUHhfAi9FPRcCaDAbewI
f2NkPIvQAcqKu6WueQsHMPFJVE9gDtTPIxvsgZVBPBSD6NcoJ0SUrmRPk4S71Uzl
W6lHGTeeelkdpcKuuZT4GL7aMWk/N4A5dCJbPe1gX7nwz0eTRcdIKJygnsXwlo8Y
4U2a+zMJ8sp1PuFStLHwF8U0YtgBFg4EpOZ5mKjLTdDoHHPgUE1HxD8l7OD7yqce
8kc75yu+z3Rq5ndzKKRdU1Exsp86TxePT3quVZSEswI4litK2aiKnM0KowIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEi9EbKf3p5ROjYjnCfVE7OllrTmMB8GA1UdIwQY
MBaAFMzXYVm/2eM3Uj7pMPPfER1rrnMGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvek5kaFdiX1o0emRTUHVrdzg5OFJIV3V1Y3dZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9mNmFkYTEtN2U4YS00YjNlLWI3ZTgt
Zjg1ODlmNjgyNjkxLzEvU0wwUnNwX2VubEU2TmlPY0o5VVRzNldXdE9ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC9mNmFkYTEtN2U4YS00YjNlLWI3ZTgtZjg1ODlmNjgyNjkx
LzEvek5kaFdiX1o0emRTUHVrdzg5OFJIV3V1Y3dZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1aZeMA0G
CSqGSIb3DQEBCwUAA4IBAQC2iX6p4Nuu+EneUxtD6u8sY72oS6f5HzY5vyjukrp3
pG03cHDuHZhJkDM/9tFeVfUPb+X7RIoZR37H6abLfbY4tsbX9nhXsb9wD0e+FcxX
CLnQhGnOSRjah/P0UXbmeCR+ql5UJJy5Jxhm8eXKU7zPIOqAoyAAEYy3ydCcY4Qw
Wzi6IXD6ShepUdKLNugEIlaqYF6p526cUp6Gx+pWZvyJpqg1QnqVF2u3RI0wKOxC
EL8xUBl9ttcanH9yLVCm8MNAvxbGtTIT0vaXM9C1pF8P4HC8nJwbNFJE3+EfSp3c
okIfuynTvCkCpukbzps6l02DmD/5VIyYsdfBLt2REB2a
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:17 2024 by rpki-client on console-fra.rpki-client.org