Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/WfPPtyJ9AEsJasx3XbMjeUB8xG4.roa
File: WfPPtyJ9AEsJasx3XbMjeUB8xG4.roa (raw, json)
Hash identifier: LUll6W+mbg/UriID7JrgE0qCxXl/8EK1TIxcGe5asSk=
Subject key identifier: 59:F3:CF:B7:22:7D:00:4B:09:6A:CC:77:5D:B3:23:79:40:7C:C4:6E
Certificate issuer: /CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Certificate serial: 018570D556A5B7B0A85B6B61D5FE14053542
Authority key identifier: CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/WfPPtyJ9AEsJasx3XbMjeUB8xG4.roa
Signing time: Mon 02 Jan 2023 04:55:07 +0000
ROA not before: Mon 02 Jan 2023 04:55:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39284
IP address blocks: 213.139.200.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:d5:56:a5:b7:b0:a8:5b:6b:61:d5:fe:14:05:35:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Validity
Not Before: Jan 2 04:55:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=59f3cfb7227d004b096acc775db32379407cc46e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:38:c3:ea:a9:6d:1c:37:93:e0:4d:c9:73:7c:
bc:e5:aa:29:8d:db:7c:19:50:80:55:b8:b6:95:fe:
83:31:66:64:6f:b2:e7:2a:38:5a:78:53:14:a0:e8:
a5:f2:01:dd:0c:44:64:53:76:6b:e8:a0:e5:19:f9:
d9:74:32:76:2e:16:ca:1b:82:ec:65:af:6d:ac:03:
d9:dc:7b:10:86:b9:a4:bb:94:47:1e:93:d3:6e:37:
17:1f:bd:b6:84:54:ae:4e:f9:2f:7d:5d:56:6f:f9:
00:93:ef:03:19:13:d6:73:bf:3b:85:77:73:eb:c7:
06:29:3c:2f:d3:56:82:81:df:71:4c:34:8f:d0:3f:
80:40:42:c7:13:f7:52:85:d3:e1:8d:6a:3a:b8:c2:
06:96:f8:20:8f:ec:4c:e7:1d:11:0d:39:26:c1:e1:
21:ed:91:ae:18:d2:09:97:3c:21:b9:b8:9c:67:8a:
17:8a:5c:f8:a0:d1:c2:cb:09:fd:a1:2b:67:a5:9a:
84:b3:30:18:a1:82:1d:89:42:28:08:38:e4:0e:e7:
51:8b:15:bf:0c:bd:eb:28:98:bc:78:20:97:4d:cc:
5a:59:ea:cf:96:f5:67:ab:75:3b:78:e9:c7:a1:b6:
64:ae:69:3a:27:3d:7c:bf:71:1b:6d:ac:a6:72:b5:
71:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:F3:CF:B7:22:7D:00:4B:09:6A:CC:77:5D:B3:23:79:40:7C:C4:6E
X509v3 Authority Key Identifier:
keyid:CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/WfPPtyJ9AEsJasx3XbMjeUB8xG4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.139.200.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:a0:11:95:ae:6c:7d:79:9d:5d:26:4b:e3:31:0e:a7:1d:14:
5b:3d:7c:ff:75:76:d2:3a:bf:11:a4:cb:36:2d:9d:af:2b:71:
05:36:96:17:cb:ac:c7:06:f5:c2:d0:96:54:a4:cc:16:9a:52:
96:f3:5b:19:b4:98:2f:f0:b5:b5:28:fd:88:d9:9e:6c:43:7c:
94:05:67:f8:2a:20:df:a7:56:0b:f0:d3:df:0b:77:8f:0c:fb:
ed:c6:51:e0:8b:03:20:96:9f:a0:8f:1d:8c:e4:f7:7f:1f:1f:
1e:f3:d1:ec:ee:c9:30:df:4f:26:e1:32:c5:c0:d6:01:ff:63:
17:60:75:3a:66:b6:4e:1c:b6:13:13:8a:14:88:e5:52:e1:7c:
70:36:9e:48:a7:1a:4c:2f:0e:98:2b:c0:f9:2a:e1:f0:5c:d0:
b1:19:dd:c9:6f:fa:ea:56:34:ef:7c:9e:4d:1b:db:64:4b:e0:
d3:40:e6:ee:9b:3e:e4:3c:2d:9e:91:97:4b:a5:ff:95:95:81:
f0:f2:f3:4a:15:5c:11:e9:79:72:05:65:c9:91:30:9a:00:14:
c0:78:23:e1:af:68:d2:91:5a:87:04:a0:97:1e:11:06:15:67:
95:cd:8e:78:35:a7:c5:20:43:e4:46:42:d8:73:62:5e:93:f6:
e5:b1:f5:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:17 2024 by rpki-client on console-fra.rpki-client.org