Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/SRXeAY5xfKLKwANK7Lx3JcWHca0.roa
File: SRXeAY5xfKLKwANK7Lx3JcWHca0.roa (raw, json)
Hash identifier: wY5TYHC0xkxgOKLFwumFXmPeMFzpUU0DsKMfFV8LVpE=
Subject key identifier: 49:15:DE:01:8E:71:7C:A2:CA:C0:03:4A:EC:BC:77:25:C5:87:71:AD
Certificate issuer: /CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Certificate serial: 05B3192A
Authority key identifier: CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/SRXeAY5xfKLKwANK7Lx3JcWHca0.roa
Signing time: Sat 01 Jan 2022 07:57:15 +0000
ROA not before: Sat 01 Jan 2022 07:57:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61014
IP address blocks: 91.191.187.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95623466 (0x5b3192a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Validity
Not Before: Jan 1 07:57:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4915de018e717ca2cac0034aecbc7725c58771ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:49:18:21:71:a6:43:65:a6:d9:e2:6f:d0:87:
f7:c4:f1:9a:c9:4a:d6:8e:8e:f3:d8:8d:ad:71:cc:
34:95:51:01:2d:06:ca:e8:6c:16:d1:25:f2:0b:78:
e2:76:1e:46:7b:be:50:52:0d:3d:50:ab:1e:5a:0e:
e7:bb:e5:d6:c9:da:63:fc:cc:2b:ad:fb:4e:96:77:
93:76:8e:5d:77:1e:08:40:d1:fd:5f:73:7c:9a:d3:
33:49:f7:da:14:ff:4b:af:69:1d:8f:06:ac:f9:c9:
e8:2c:6f:90:41:ef:ee:96:2a:25:93:bd:46:4a:3b:
13:bf:b2:26:78:37:c4:1a:62:c3:b0:31:94:95:0c:
b0:0c:2e:ed:ac:a7:ff:93:3f:a2:14:4f:ef:4e:27:
2a:8f:da:fd:28:8b:69:30:85:c5:67:d9:6f:b4:46:
aa:ba:0f:eb:86:f4:b1:c8:62:9b:06:53:18:74:58:
f3:03:f2:56:cf:4b:a2:59:00:a8:c1:ee:d5:7f:12:
e9:98:3c:61:1f:3c:e2:84:d3:1d:e7:40:18:40:96:
23:71:6d:71:1f:a8:d8:0e:d4:72:93:c3:2e:5b:73:
e3:97:91:8d:dc:5e:4f:38:c7:5f:8d:7d:6d:54:fb:
79:00:8e:6e:08:7f:69:1c:c2:bf:04:94:a2:77:89:
18:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:15:DE:01:8E:71:7C:A2:CA:C0:03:4A:EC:BC:77:25:C5:87:71:AD
X509v3 Authority Key Identifier:
keyid:CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/SRXeAY5xfKLKwANK7Lx3JcWHca0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.191.187.0/24
Signature Algorithm: sha256WithRSAEncryption
92:46:9d:ed:c4:5d:ab:88:0b:db:99:f6:55:62:f0:04:c5:07:
2b:01:bc:60:37:c1:24:43:0f:61:97:c2:f2:26:f0:e4:7c:c4:
57:b4:85:17:ff:a4:84:ca:cc:a9:23:2a:0f:44:09:18:16:fb:
73:70:01:06:e0:29:6e:3d:c1:5f:fc:b7:c7:7d:1a:39:72:68:
cc:06:c8:83:05:e5:ec:cf:a7:9f:71:47:39:3b:b9:4f:32:a1:
71:78:de:42:ee:0a:26:89:ed:81:eb:0d:b4:96:49:57:7d:88:
45:db:4b:3a:dd:78:ba:a9:67:9f:9a:f0:d1:8b:26:01:5f:86:
93:60:70:4e:e0:0e:b1:70:1c:87:50:15:1a:13:06:26:33:70:
cd:a4:2b:0a:e2:c1:54:43:63:a3:b4:25:8a:54:98:07:54:de:
41:73:c4:ef:fc:d7:23:3e:1f:e3:e1:2d:f6:19:d6:ea:e9:26:
79:dd:4b:23:92:89:b9:18:92:db:f9:ad:69:72:a2:c3:28:7e:
e3:9c:6e:82:4a:2d:88:bc:f1:fa:cb:7e:e0:b4:9c:41:e8:90:
0f:4e:b8:6d:a8:e0:06:f3:61:a0:00:8c:14:a3:9d:1a:f9:7d:
94:c0:7b:43:c1:36:29:fe:07:89:d4:83:37:a6:83:ab:fb:3f:
f7:ab:2c:b5
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBbMZKjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
Y2Q3NjE1OWJmZDllMzM3NTIzZWU5MzBmM2RmMTExZDZiYWU3MzA2MB4XDTIyMDEw
MTA3NTcxNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNDkxNWRlMDE4ZTcx
N2NhMmNhYzAwMzRhZWNiYzc3MjVjNTg3NzFhZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAPdJGCFxpkNlptnib9CH98TxmslK1o6O89iNrXHMNJVRAS0G
yuhsFtEl8gt44nYeRnu+UFINPVCrHloO57vl1snaY/zMK637TpZ3k3aOXXceCEDR
/V9zfJrTM0n32hT/S69pHY8GrPnJ6CxvkEHv7pYqJZO9Rko7E7+yJng3xBpiw7Ax
lJUMsAwu7ayn/5M/ohRP704nKo/a/SiLaTCFxWfZb7RGqroP64b0schimwZTGHRY
8wPyVs9LolkAqMHu1X8S6Zg8YR884oTTHedAGECWI3FtcR+o2A7UcpPDLltz45eR
jdxeTzjHX419bVT7eQCObgh/aRzCvwSUoneJGHcCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRJFd4BjnF8osrAA0rsvHclxYdxrTAfBgNVHSMEGDAWgBTM12FZv9njN1I+
6TDz3xEda65zBjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3pOZGhXYl9aNHpkU1B1a3c4OThSSFd1dWN3WS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTAvZjZhZGExLTdlOGEtNGIzZS1iN2U4LWY4NTg5ZjY4MjY5MS8x
L1NSWGVBWTV4ZktMS3dBTks3THgzSmNXSGNhMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTAv
ZjZhZGExLTdlOGEtNGIzZS1iN2U4LWY4NTg5ZjY4MjY5MS8xL3pOZGhXYl9aNHpk
U1B1a3c4OThSSFd1dWN3WS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFu/uzANBgkqhkiG9w0BAQsFAAOC
AQEAkkad7cRdq4gL25n2VWLwBMUHKwG8YDfBJEMPYZfC8ibw5HzEV7SFF/+khMrM
qSMqD0QJGBb7c3ABBuApbj3BX/y3x30aOXJozAbIgwXl7M+nn3FHOTu5TzKhcXje
Qu4KJontgesNtJZJV32IRdtLOt14uqlnn5rw0YsmAV+Gk2BwTuAOsXAch1AVGhMG
JjNwzaQrCuLBVENjo7QlilSYB1TeQXPE7/zXIz4f4+Et9hnW6ukmed1LI5KJuRiS
2/mtaXKiwyh+45xugkotiLzx+st+4LScQeiQD064bajgBvNhoACMFKOdGvl9lMB7
Q8E2Kf4HidSDN6aDq/s/96sstQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:46 2024 by rpki-client on console-ams.rpki-client.org