Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/jPmxSSmeKB0syFpGxvAAIj2XZ0U.roa
File: jPmxSSmeKB0syFpGxvAAIj2XZ0U.roa (raw, json)
Hash identifier: VBE+ob7svZdM7czVuFI8cO7b555N7Vlj8nrH45koD7k=
Subject key identifier: 8C:F9:B1:49:29:9E:28:1D:2C:C8:5A:46:C6:F0:00:22:3D:97:67:45
Certificate issuer: /CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Certificate serial: 018570D551DD8441A07DA5A580FE13F86AFE
Authority key identifier: CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/jPmxSSmeKB0syFpGxvAAIj2XZ0U.roa
Signing time: Mon 02 Jan 2023 04:55:06 +0000
ROA not before: Mon 02 Jan 2023 04:55:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14576
IP address blocks: 193.56.64.0/24 maxlen: 24
193.56.66.0/24 maxlen: 24
193.56.65.0/24 maxlen: 24
193.56.74.0/24 maxlen: 24
193.56.73.0/24 maxlen: 24
193.56.72.0/24 maxlen: 24
213.166.76.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:d5:51:dd:84:41:a0:7d:a5:a5:80:fe:13:f8:6a:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Validity
Not Before: Jan 2 04:55:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8cf9b149299e281d2cc85a46c6f000223d976745
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:99:0d:97:92:ae:f3:67:6c:a6:74:0b:e8:ca:
08:ac:90:e5:12:81:ad:de:d3:75:40:b3:1e:b7:41:
d1:fb:e9:c6:d4:bc:13:52:b3:32:79:d6:03:e7:dc:
30:69:9f:54:d0:c6:d8:36:c0:95:56:d4:c0:21:1a:
91:82:2f:70:61:e6:42:2b:c8:fb:04:92:ac:bb:e9:
94:0c:cc:cf:7d:37:48:6b:83:c8:f7:f4:a6:20:fb:
9b:ca:75:25:94:ce:c3:da:0f:d3:a7:2c:6f:de:bc:
5a:c4:3c:43:7c:c2:f0:be:06:eb:10:f4:50:f1:2f:
4d:3e:f7:05:5a:ef:48:f9:94:dd:1d:bb:33:4d:0d:
01:fc:3e:41:22:6f:7d:16:c4:5f:9c:b7:c9:bc:2d:
dc:95:ca:9e:4a:59:69:4a:0c:4b:04:09:33:e5:04:
03:02:24:17:9c:10:d6:8c:28:87:82:ee:c2:b8:64:
16:75:8b:cb:aa:44:a5:19:19:dc:1f:f2:cb:f4:8c:
9e:87:19:0d:92:cc:6c:e4:5c:52:c0:d9:75:84:ac:
cd:27:64:09:6e:80:3e:7c:72:db:84:f2:ec:f8:0a:
43:15:6c:ac:8a:cc:a8:84:05:42:9e:40:20:be:ce:
72:29:0c:ea:5b:1a:68:0b:b6:cd:e9:eb:32:75:30:
9b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:F9:B1:49:29:9E:28:1D:2C:C8:5A:46:C6:F0:00:22:3D:97:67:45
X509v3 Authority Key Identifier:
keyid:CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/jPmxSSmeKB0syFpGxvAAIj2XZ0U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.56.64.0-193.56.66.255
193.56.72.0-193.56.74.255
213.166.76.0/22
Signature Algorithm: sha256WithRSAEncryption
18:16:9f:2e:6f:b8:2f:04:6f:fc:6b:30:e0:76:c5:6b:a2:50:
61:4a:bc:86:e2:4e:61:60:74:f5:5b:b3:d4:6f:e7:17:4b:72:
e0:5c:a8:b0:28:48:c3:f1:d3:00:e4:5a:94:40:06:77:f5:77:
63:47:e3:80:49:0d:65:6e:ed:92:60:1a:b6:4e:2c:40:02:e6:
a6:ba:06:02:46:5e:06:56:b0:9c:2a:4f:9c:bf:00:21:b2:a8:
91:2d:71:eb:6e:f2:06:01:77:d2:00:38:e0:8e:e3:06:0f:81:
2a:91:66:d3:de:77:ce:61:17:c1:c2:b1:f1:ee:9c:79:70:fd:
75:9e:aa:3a:d8:6e:9a:ae:53:a9:f3:3f:53:47:c8:2d:a9:a4:
26:b4:d0:e4:ee:72:b6:15:cd:f8:f5:e3:76:fb:72:36:36:ef:
6c:c5:e9:51:4f:61:fa:cd:8f:12:2f:a2:60:92:b6:93:60:b3:
fe:47:ab:d7:99:4e:70:94:2e:43:f5:a5:c5:6f:65:6a:e8:87:
c9:95:c9:87:aa:0c:8e:6c:52:01:91:ae:32:e5:1d:70:e6:74:
16:43:de:40:5f:c1:9f:82:b9:71:c5:b0:29:06:5c:82:30:87:
94:d6:6e:0d:0f:9c:30:02:a5:b4:ba:94:95:7e:12:02:3c:6b:
9a:67:6a:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:11 2023 by rpki-client on console-fra.rpki-client.org