Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/b6Pd0e0ZRRp5vdAVnKg4W1kXMoE.roa
File: b6Pd0e0ZRRp5vdAVnKg4W1kXMoE.roa (raw, json)
Hash identifier: dyHrp2UDx9ZqRyvSJKvfKTk94o425KPneNNAR8JSKDo=
Subject key identifier: 6F:A3:DD:D1:ED:19:45:1A:79:BD:D0:15:9C:A8:38:5B:59:17:32:81
Certificate issuer: /CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Certificate serial: 05B4A7A3
Authority key identifier: CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/b6Pd0e0ZRRp5vdAVnKg4W1kXMoE.roa
Signing time: Sat 01 Jan 2022 07:57:17 +0000
ROA not before: Sat 01 Jan 2022 07:57:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201971
IP address blocks: 185.192.247.0/24 maxlen: 24
91.214.116.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95725475 (0x5b4a7a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Validity
Not Before: Jan 1 07:57:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6fa3ddd1ed19451a79bdd0159ca8385b59173281
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a8:46:64:b3:af:b8:e3:91:4f:26:56:3a:30:
f4:9a:a8:f9:7a:1d:f1:72:b9:95:1e:a6:c7:d5:5c:
79:b8:57:fa:5c:8e:70:4d:89:04:47:26:2e:51:30:
c5:bf:fc:33:22:de:7c:b0:e7:ab:e6:e1:46:41:9b:
bb:62:bf:12:d6:a1:96:62:4e:71:b3:df:be:62:36:
de:22:45:91:12:e0:48:02:80:60:69:4d:b6:52:5f:
ab:fe:79:fd:b9:a6:13:77:ff:46:d8:7e:9b:32:94:
4e:8c:c3:15:21:f7:d8:fc:6c:80:0a:69:eb:58:74:
9e:d8:77:e9:29:91:1e:13:f2:44:b3:5a:60:2f:2c:
db:8f:3a:90:ab:d8:86:50:62:2c:d9:5d:9c:5e:10:
d6:c9:f2:fe:d7:ae:70:1d:aa:02:b9:af:8f:fc:ba:
f0:0e:ff:a0:ce:bc:b2:58:47:de:a7:e2:63:a7:fe:
da:71:da:a9:2e:83:92:8d:4d:8a:1c:6b:e0:5f:28:
52:44:bc:b7:3c:12:50:55:3b:f6:69:18:55:79:ec:
e7:99:f1:4a:7a:28:a9:21:94:e6:82:28:a8:e4:e7:
63:fd:3a:c7:29:33:bc:50:86:db:b9:2b:f1:2e:81:
e0:98:b5:7e:fd:03:3f:9f:ad:e1:ad:31:36:d8:92:
4f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:A3:DD:D1:ED:19:45:1A:79:BD:D0:15:9C:A8:38:5B:59:17:32:81
X509v3 Authority Key Identifier:
keyid:CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/b6Pd0e0ZRRp5vdAVnKg4W1kXMoE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.214.116.0/24
185.192.247.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:9e:15:45:06:91:0a:0f:d7:c6:e1:bc:bc:7a:ef:f9:2a:83:
0e:c1:85:a3:03:3c:99:80:3e:b7:50:fb:f7:af:29:49:fd:7f:
73:a4:8e:6c:c9:a3:94:d7:ec:10:15:7a:f3:4d:2f:42:a1:a4:
f6:f2:76:bd:e3:0b:1d:82:0f:54:c9:87:68:ce:95:97:cf:b0:
2c:88:5f:0b:d3:4d:5b:c5:a1:11:e5:c7:f6:17:09:41:c3:da:
fd:aa:99:86:bf:48:dc:8a:67:61:99:73:e4:11:48:1e:d1:6e:
3c:15:e8:69:87:9a:8a:73:d1:bc:ac:40:9c:20:a8:41:66:51:
42:cb:73:2a:23:51:a6:b3:0d:ed:9d:d3:e9:a5:66:55:30:a8:
20:c2:d6:5b:06:56:9b:45:29:4a:3d:8b:d8:74:b6:c9:f9:ca:
6c:e5:72:da:22:a1:61:ee:a7:01:78:d8:4b:05:50:ed:69:5b:
bf:de:8c:ee:ca:f1:5b:59:46:07:c3:6d:6a:7b:ee:d6:8a:32:
fe:35:a3:b4:bc:7f:40:b3:ca:a3:bd:3b:ea:ed:ce:95:0d:dd:
a5:a8:fa:5c:f8:b7:85:48:33:72:bc:a5:d8:fc:e2:11:98:67:
23:ae:17:24:40:64:e4:58:b6:66:50:be:40:00:c0:cb:65:b6:
70:38:88:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:46 2024 by rpki-client on console-ams.rpki-client.org