Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/X8yrUG08RdpY9XB2N_D3FbzKIDQ.roa
File: X8yrUG08RdpY9XB2N_D3FbzKIDQ.roa (raw, json)
Hash identifier: JNjpqkyYariJPB9x1jPRGDJIUjrC2TJK0Wg124AjDYY=
Subject key identifier: 5F:CC:AB:50:6D:3C:45:DA:58:F5:70:76:37:F0:F7:15:BC:CA:20:34
Certificate issuer: /CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Certificate serial: 0649DC10
Authority key identifier: CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/X8yrUG08RdpY9XB2N_D3FbzKIDQ.roa
Signing time: Fri 04 Mar 2022 22:35:42 +0000
ROA not before: Fri 04 Mar 2022 22:35:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49392
IP address blocks: 194.156.84.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105503760 (0x649dc10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Validity
Not Before: Mar 4 22:35:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5fccab506d3c45da58f5707637f0f715bcca2034
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:d9:c9:12:09:ca:5a:cc:3d:5d:93:79:e8:8f:
90:95:5a:e3:26:a4:45:d0:88:8c:a4:b2:01:c8:33:
04:ed:71:24:c5:16:a3:ba:32:95:a6:8e:af:61:01:
b6:de:48:34:19:5b:c3:ad:12:bb:ef:ba:0d:e3:13:
57:9c:bf:95:99:dc:a5:5e:19:6c:35:ff:e1:6e:e8:
39:b0:0d:c7:9e:be:a4:c8:98:d7:d4:33:85:d8:55:
54:ca:10:bd:8a:78:21:4a:d7:13:d1:bc:16:f1:ed:
fa:20:80:53:8e:16:f2:3b:52:0f:69:c0:84:26:90:
aa:23:80:78:b0:b7:8f:8e:72:ca:9c:3d:f8:d4:71:
29:49:eb:72:a6:29:1c:c1:9c:5d:c6:fa:6c:ed:be:
7f:ee:bd:f8:69:28:cb:78:93:54:05:ae:f0:2b:c2:
83:b5:a7:e6:c9:1e:56:64:b9:51:d1:fd:0f:f2:fb:
b2:a7:6b:2f:ac:b0:7a:c0:85:f2:70:22:ae:ba:c1:
ce:84:a3:c7:b0:8a:59:df:0a:4a:bc:3f:a8:74:cc:
87:cd:10:4b:d6:04:33:d9:b7:ad:8d:e1:df:5c:5d:
57:db:79:7a:83:d7:73:c2:9d:d5:4c:3b:77:29:3b:
02:7c:ee:13:46:78:2c:93:f6:be:89:e3:08:83:a1:
27:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:CC:AB:50:6D:3C:45:DA:58:F5:70:76:37:F0:F7:15:BC:CA:20:34
X509v3 Authority Key Identifier:
keyid:CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/X8yrUG08RdpY9XB2N_D3FbzKIDQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.156.84.0/22
Signature Algorithm: sha256WithRSAEncryption
b0:df:4f:25:01:60:16:d1:d3:7d:ad:e5:d2:2f:a5:2e:fc:69:
d8:ec:13:b2:9c:da:e4:8c:c2:00:1b:c0:62:5e:1c:5d:02:df:
68:10:fa:45:fe:e6:99:7f:3c:a1:2d:91:af:00:e1:f8:a0:fa:
31:3b:46:9e:49:14:91:1d:13:00:fa:94:40:e8:5d:b1:5c:50:
7b:72:d8:ab:90:f3:07:2c:9c:09:1f:86:8d:09:74:e1:9b:22:
28:09:b0:01:44:ef:1a:74:14:c2:20:7f:53:1c:df:a6:a5:55:
a9:c1:4a:57:cd:85:b2:3b:b7:5d:a2:f1:8b:ed:23:d6:5b:98:
45:f3:10:ce:ac:2d:a0:e7:4e:18:aa:aa:2e:07:11:26:e9:c1:
62:f1:ad:c0:2c:51:cb:b1:94:76:3d:bf:bf:69:93:f1:79:aa:
60:85:7c:ea:cb:11:b1:7c:2a:28:84:8b:f8:71:3c:3b:86:52:
2d:eb:e4:75:37:48:fb:1c:bf:d2:e6:28:1d:68:4c:f7:65:96:
49:b7:81:30:f9:35:06:35:ed:88:c4:0e:46:fd:7f:a3:51:69:
76:e2:6f:c2:94:c7:b1:0e:de:35:bd:51:1d:88:7c:30:03:c4:
5d:57:7c:05:e2:e7:0c:9f:3b:85:ff:28:d1:59:ff:65:fb:eb:
f5:71:12:a9
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBkncEDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
Y2Q3NjE1OWJmZDllMzM3NTIzZWU5MzBmM2RmMTExZDZiYWU3MzA2MB4XDTIyMDMw
NDIyMzU0MloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNWZjY2FiNTA2ZDNj
NDVkYTU4ZjU3MDc2MzdmMGY3MTViY2NhMjAzNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAO/ZyRIJylrMPV2TeeiPkJVa4yakRdCIjKSyAcgzBO1xJMUW
o7oylaaOr2EBtt5INBlbw60Su++6DeMTV5y/lZncpV4ZbDX/4W7oObANx56+pMiY
19QzhdhVVMoQvYp4IUrXE9G8FvHt+iCAU44W8jtSD2nAhCaQqiOAeLC3j45yypw9
+NRxKUnrcqYpHMGcXcb6bO2+f+69+Gkoy3iTVAWu8CvCg7Wn5skeVmS5UdH9D/L7
sqdrL6ywesCF8nAirrrBzoSjx7CKWd8KSrw/qHTMh80QS9YEM9m3rY3h31xdV9t5
eoPXc8Kd1Uw7dyk7AnzuE0Z4LJP2vonjCIOhJ9kCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRfzKtQbTxF2lj1cHY38PcVvMogNDAfBgNVHSMEGDAWgBTM12FZv9njN1I+
6TDz3xEda65zBjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3pOZGhXYl9aNHpkU1B1a3c4OThSSFd1dWN3WS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTAvZjZhZGExLTdlOGEtNGIzZS1iN2U4LWY4NTg5ZjY4MjY5MS8x
L1g4eXJVRzA4UmRwWTlYQjJOX0QzRmJ6S0lEUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTAv
ZjZhZGExLTdlOGEtNGIzZS1iN2U4LWY4NTg5ZjY4MjY5MS8xL3pOZGhXYl9aNHpk
U1B1a3c4OThSSFd1dWN3WS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAsKcVDANBgkqhkiG9w0BAQsFAAOC
AQEAsN9PJQFgFtHTfa3l0i+lLvxp2OwTspza5IzCABvAYl4cXQLfaBD6Rf7mmX88
oS2RrwDh+KD6MTtGnkkUkR0TAPqUQOhdsVxQe3LYq5DzByycCR+GjQl04ZsiKAmw
AUTvGnQUwiB/UxzfpqVVqcFKV82Fsju3XaLxi+0j1luYRfMQzqwtoOdOGKqqLgcR
JunBYvGtwCxRy7GUdj2/v2mT8XmqYIV86ssRsXwqKISL+HE8O4ZSLevkdTdI+xy/
0uYoHWhM92WWSbeBMPk1BjXtiMQORv1/o1FpduJvwpTHsQ7eNb1RHYh8MAPEXVd8
BeLnDJ87hf8o0Vn/Zfvr9XESqQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:17 2024 by rpki-client on console-fra.rpki-client.org