Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/gKfY8aoT80khjBR5elSfU16pyrM.roa
File: gKfY8aoT80khjBR5elSfU16pyrM.roa (raw, json)
Hash identifier: w7pQQtjBQLHQAg8Mb2ZaP6DVCl/YTy2o7UrETXAdkV8=
Subject key identifier: 80:A7:D8:F1:AA:13:F3:49:21:8C:14:79:7A:54:9F:53:5E:A9:CA:B3
Certificate issuer: /CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Certificate serial: 018570D554702AC8A387DAEEAC58D593D11C
Authority key identifier: CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/gKfY8aoT80khjBR5elSfU16pyrM.roa
Signing time: Mon 02 Jan 2023 04:55:06 +0000
ROA not before: Mon 02 Jan 2023 04:55:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35297
IP address blocks: 194.35.114.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:d5:54:70:2a:c8:a3:87:da:ee:ac:58:d5:93:d1:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Validity
Not Before: Jan 2 04:55:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=80a7d8f1aa13f349218c14797a549f535ea9cab3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:9e:e1:67:31:fb:1d:49:1f:2e:73:30:f3:a2:
27:22:e9:b3:67:db:b2:54:b6:08:9b:70:33:46:a3:
9b:bc:f5:32:f4:31:be:d7:ed:57:f1:a5:28:60:6f:
6a:a3:74:5f:bf:a8:6f:54:7c:09:06:86:2c:58:b5:
7d:93:41:19:4f:29:e8:a9:7a:0c:cc:e8:ed:18:42:
50:b1:65:00:fb:45:f9:bc:30:2f:84:88:08:e0:3c:
00:0a:16:09:34:d6:46:59:d6:84:c0:d4:60:83:b8:
7c:b1:a7:41:cc:a4:78:ef:c0:78:87:af:73:d7:db:
ed:bc:2a:ce:27:27:e3:63:5e:25:06:0b:24:44:54:
68:25:7b:25:64:aa:35:81:1b:7e:49:d0:87:0b:c3:
c6:fc:a6:3b:15:fe:43:5b:cf:70:78:34:2d:ea:ed:
2a:c9:f5:5a:34:4a:fd:02:2a:a6:07:92:53:8b:6d:
89:9a:fa:bb:0c:00:75:cb:9b:cf:58:c2:a4:57:ee:
5e:98:6f:45:7e:24:fe:16:09:62:15:a9:2b:ba:9f:
84:c4:a7:de:f9:13:75:29:86:e9:78:ba:61:86:3b:
f7:e5:57:0e:0d:29:09:36:7f:71:65:55:f9:30:46:
0d:a3:ef:4f:68:6a:cf:e2:6d:18:25:eb:06:1f:a0:
0c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:A7:D8:F1:AA:13:F3:49:21:8C:14:79:7A:54:9F:53:5E:A9:CA:B3
X509v3 Authority Key Identifier:
keyid:CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/gKfY8aoT80khjBR5elSfU16pyrM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.35.114.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:53:9e:90:b7:e0:38:18:8d:e1:01:13:29:b3:b4:59:1e:c3:
bb:d8:24:0b:9a:c6:c7:44:54:5c:20:a3:d7:c1:82:e8:4e:a9:
13:69:2b:59:8d:77:dd:ef:9e:70:0a:05:e7:32:ea:49:a8:f6:
40:24:7b:bb:c3:09:2b:44:31:4d:24:90:ab:3f:8f:2e:71:28:
6d:cb:8f:83:0b:14:b0:59:26:fd:93:1d:9b:f7:f6:25:80:40:
98:c7:3d:1b:77:c7:bb:93:25:de:da:46:c1:47:f3:ed:19:37:
68:c7:5f:05:f1:ad:b7:25:93:5b:0d:79:e2:75:f5:7f:10:43:
fe:ab:87:8e:47:70:f1:91:4c:99:0b:b5:3b:6d:45:64:9d:8d:
5d:fa:1f:3a:1d:cc:7d:5b:2a:a9:5f:a6:63:ec:d4:02:36:a3:
24:88:b7:39:ee:a8:9f:2c:26:88:b3:d3:96:76:4e:49:d3:05:
e6:6f:cd:c9:d3:71:92:68:cc:be:6c:13:79:9d:37:ff:ff:df:
09:4a:e4:ec:b3:6c:11:65:3e:b4:a6:de:c4:78:28:03:8c:46:
95:ad:17:7a:7b:30:b0:bc:04:23:3b:85:be:57:88:3a:4f:17:
8c:5a:d8:f8:c3:53:c0:c5:b0:13:6f:02:3a:72:80:0a:aa:ad:
48:9e:8f:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:46 2024 by rpki-client on console-ams.rpki-client.org