Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/Uq4HDYzrCFTShK09233piaD-71o.roa
File: Uq4HDYzrCFTShK09233piaD-71o.roa (raw, json)
Hash identifier: fNcxOJlXcd9CGrOMzo299micr+S8Kjxx4I7n1YxSH1g=
Subject key identifier: 52:AE:07:0D:8C:EB:08:54:D2:84:AD:3D:DB:7D:E9:89:A0:FE:EF:5A
Certificate issuer: /CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Certificate serial: 018570D56208B9F9ED2F962B99776A7B27B6
Authority key identifier: CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/Uq4HDYzrCFTShK09233piaD-71o.roa
Signing time: Mon 02 Jan 2023 04:55:10 +0000
ROA not before: Mon 02 Jan 2023 04:55:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61416
IP address blocks: 194.35.125.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:d5:62:08:b9:f9:ed:2f:96:2b:99:77:6a:7b:27:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Validity
Not Before: Jan 2 04:55:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=52ae070d8ceb0854d284ad3ddb7de989a0feef5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:1f:18:50:ce:b1:67:5b:8c:da:03:a4:d9:3a:
37:3c:a0:1f:3f:27:5c:fa:23:07:13:be:11:70:64:
7a:e4:5c:d9:09:67:ff:e9:61:3c:ec:ba:69:06:65:
df:b8:c6:48:87:2d:af:a3:8c:75:70:c1:c6:a8:90:
ed:0b:e0:65:93:96:fd:6d:73:eb:10:5a:09:26:9b:
80:cd:48:d4:1f:9f:93:b3:27:04:f4:82:0e:75:78:
db:4f:b3:7a:a4:83:7e:26:70:6f:7d:6f:89:00:1e:
67:20:56:ff:c1:4f:2f:2e:78:29:b0:d0:04:1b:49:
e9:a5:e7:70:47:bc:2d:4b:47:f5:06:50:da:ee:39:
ac:7e:fb:4a:0c:4b:9e:86:37:cb:50:29:45:df:be:
17:c1:80:a4:61:91:c0:1c:66:6f:d8:45:f4:50:28:
32:8d:59:13:4a:16:94:ef:d4:99:54:13:65:aa:3f:
a2:a9:d0:34:7f:ad:36:7d:3a:21:7e:e1:af:a7:33:
5a:b1:3a:54:a6:2a:48:e8:76:e8:1c:5f:4c:92:37:
79:a3:eb:22:2f:aa:8a:c4:94:0e:ba:e5:c4:db:b8:
bc:90:78:fb:95:0c:44:06:04:72:17:0c:a6:56:4a:
7b:72:f1:13:ed:0c:8c:32:d6:65:03:b8:c5:67:93:
34:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:AE:07:0D:8C:EB:08:54:D2:84:AD:3D:DB:7D:E9:89:A0:FE:EF:5A
X509v3 Authority Key Identifier:
keyid:CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/Uq4HDYzrCFTShK09233piaD-71o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.35.125.0/24
Signature Algorithm: sha256WithRSAEncryption
22:a6:80:d8:40:a7:eb:9b:8e:31:13:2e:34:19:b2:02:9e:93:
ce:c2:33:86:90:51:44:bd:60:ff:ea:84:99:a6:fe:92:58:37:
9f:19:7c:0b:42:d1:32:c8:28:e7:fc:dd:61:af:b7:27:bb:c7:
ec:75:98:6c:30:7e:a1:43:2b:6d:e7:c8:03:25:f1:0c:7d:96:
c9:21:35:c4:31:04:8a:98:d7:cb:f1:23:0a:4d:e0:0a:d3:03:
3a:be:dd:d3:c2:9c:08:55:a3:3a:67:fc:0c:05:8e:e8:de:ed:
f8:37:9d:78:8b:99:56:ad:d5:14:92:e2:f9:6b:6d:f4:12:9a:
26:11:4b:f3:cc:e5:08:47:c5:90:3e:05:61:5b:47:25:84:72:
31:57:e7:0f:f4:32:65:c6:23:9f:01:65:ff:a6:3e:b7:7e:8c:
4f:b3:67:21:eb:e1:8d:52:a7:fc:cd:a3:88:a0:0d:2b:88:40:
24:71:3b:0d:fb:d7:62:c4:30:ba:48:01:c2:27:47:83:81:29:
7e:0c:ab:3a:49:7c:dd:0a:3e:1a:65:be:1a:ae:eb:0d:54:fc:
63:a8:4f:52:5d:11:a2:04:7d:0c:3a:a2:fd:af:b5:c2:24:d1:
96:23:a4:3d:91:fd:cb:27:81:67:97:26:8a:e3:75:58:0f:96:
63:9a:dc:15
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVw1WIIufntL5YrmXdqeye2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjZDc2MTU5YmZkOWUzMzc1MjNlZTkzMGYzZGYxMTFkNmJh
ZTczMDYwHhcNMjMwMTAyMDQ1NTEwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MmFlMDcwZDhjZWIwODU0ZDI4NGFkM2RkYjdkZTk4OWEwZmVlZjVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4h8YUM6xZ1uM2gOk2To3PKAfPydc
+iMHE74RcGR65FzZCWf/6WE87LppBmXfuMZIhy2vo4x1cMHGqJDtC+Blk5b9bXPr
EFoJJpuAzUjUH5+TsycE9IIOdXjbT7N6pIN+JnBvfW+JAB5nIFb/wU8vLngpsNAE
G0nppedwR7wtS0f1BlDa7jmsfvtKDEuehjfLUClF374XwYCkYZHAHGZv2EX0UCgy
jVkTShaU79SZVBNlqj+iqdA0f602fTohfuGvpzNasTpUpipI6HboHF9Mkjd5o+si
L6qKxJQOuuXE27i8kHj7lQxEBgRyFwymVkp7cvET7QyMMtZlA7jFZ5M0OwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFKuBw2M6whU0oStPdt96Ymg/u9aMB8GA1UdIwQY
MBaAFMzXYVm/2eM3Uj7pMPPfER1rrnMGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvek5kaFdiX1o0emRTUHVrdzg5OFJIV3V1Y3dZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9mNmFkYTEtN2U4YS00YjNlLWI3ZTgt
Zjg1ODlmNjgyNjkxLzEvVXE0SERZenJDRlRTaEswOTIzM3BpYUQtNzFvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC9mNmFkYTEtN2U4YS00YjNlLWI3ZTgtZjg1ODlmNjgyNjkx
LzEvek5kaFdiX1o0emRTUHVrdzg5OFJIV3V1Y3dZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwiN9MA0G
CSqGSIb3DQEBCwUAA4IBAQAipoDYQKfrm44xEy40GbICnpPOwjOGkFFEvWD/6oSZ
pv6SWDefGXwLQtEyyCjn/N1hr7cnu8fsdZhsMH6hQytt58gDJfEMfZbJITXEMQSK
mNfL8SMKTeAK0wM6vt3TwpwIVaM6Z/wMBY7o3u34N514i5lWrdUUkuL5a230Epom
EUvzzOUIR8WQPgVhW0clhHIxV+cP9DJlxiOfAWX/pj63foxPs2ch6+GNUqf8zaOI
oA0riEAkcTsN+9dixDC6SAHCJ0eDgSl+DKs6SXzdCj4aZb4arusNVPxjqE9SXRGi
BH0MOqL9r7XCJNGWI6Q9kf3LJ4FnlyaK43VYD5ZjmtwV
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:17 2024 by rpki-client on console-fra.rpki-client.org