Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/rU2vwMLm2EnwzGJSKCD5aUgzjRI.roa
File: rU2vwMLm2EnwzGJSKCD5aUgzjRI.roa (raw, json)
Hash identifier: 6syGmJqIqQrj+jhVa/7ZcsiXR1K3vk+n9wWigh26gQc=
Subject key identifier: AD:4D:AF:C0:C2:E6:D8:49:F0:CC:62:52:28:20:F9:69:48:33:8D:12
Certificate issuer: /CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Certificate serial: 018570D55815B1E5908A279ACB43EE02EFFF
Authority key identifier: CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/rU2vwMLm2EnwzGJSKCD5aUgzjRI.roa
Signing time: Mon 02 Jan 2023 04:55:07 +0000
ROA not before: Mon 02 Jan 2023 04:55:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39548
IP address blocks: 185.68.23.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:d5:58:15:b1:e5:90:8a:27:9a:cb:43:ee:02:ef:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Validity
Not Before: Jan 2 04:55:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ad4dafc0c2e6d849f0cc62522820f96948338d12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:83:8d:e4:39:d0:e9:31:8e:7c:22:30:55:14:
cd:12:04:c8:fd:ed:64:54:44:84:94:8f:7f:55:47:
05:c1:f3:14:7e:0e:3d:9c:0f:97:22:8b:7b:91:63:
85:46:85:2d:60:f7:49:6c:e7:d9:6f:e7:a1:0a:e7:
45:18:0a:d7:55:65:23:e5:39:d4:d0:4d:2b:b9:e0:
6b:6c:4d:f9:1a:69:f5:8a:7a:f3:cc:82:b4:98:f1:
97:cf:16:1c:04:31:81:23:52:94:5c:80:df:52:60:
ee:83:66:82:8a:e0:40:7b:0e:75:2d:32:f8:6b:03:
85:aa:da:ec:19:d4:3e:1f:29:55:2c:02:2a:75:0f:
ce:df:02:bc:df:ec:65:02:a1:5f:7b:54:1d:6c:a5:
5b:2d:a0:38:02:8a:1c:dc:df:93:80:ca:6b:38:05:
a2:8c:fb:c7:07:85:72:52:81:41:64:bc:7c:35:79:
d7:1f:75:29:ad:a6:74:da:2d:34:fe:1c:f9:72:6c:
8f:36:e4:7c:7a:33:df:5d:d3:e1:07:89:c1:88:18:
d7:14:8f:9e:80:54:29:1e:f7:3e:53:a2:20:6a:80:
78:d6:bd:0d:79:1c:5e:ac:e3:6f:0c:fd:4f:20:66:
9f:4a:24:e0:f6:f2:bf:56:12:63:00:84:79:17:73:
a4:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:4D:AF:C0:C2:E6:D8:49:F0:CC:62:52:28:20:F9:69:48:33:8D:12
X509v3 Authority Key Identifier:
keyid:CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/rU2vwMLm2EnwzGJSKCD5aUgzjRI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.68.23.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:e8:7f:ed:e3:07:a6:b8:6d:df:e5:45:c6:d2:d5:a4:da:4b:
96:b1:a0:f6:ea:66:69:00:01:d1:56:65:27:4b:0e:fa:7c:1c:
b2:4e:99:56:fd:cf:8a:fe:c6:3b:e8:ab:16:2b:53:aa:ee:cd:
99:59:d9:ac:4a:1c:68:2a:5e:99:2f:04:c2:51:a1:e3:c0:ec:
a2:f4:98:5a:65:91:8d:7b:90:0b:3f:30:8d:00:91:db:ef:f7:
ea:8a:15:38:3b:be:b9:7f:34:0e:fe:04:7d:c1:cd:e9:5a:98:
79:ce:b9:2a:8b:44:bc:e5:d8:04:71:4c:83:b3:8d:e3:8c:47:
b9:ab:a9:89:e9:e1:94:97:8f:af:18:c9:f5:3b:45:f0:91:72:
13:19:17:89:0a:53:35:7c:70:b8:62:67:46:84:f3:94:98:0f:
25:6c:24:c9:9a:e0:3b:96:cf:50:d5:3d:c0:e9:dc:b2:95:97:
b2:51:8a:35:e6:61:bf:95:43:6b:6a:5f:9b:e7:a0:b7:6a:59:
90:80:ae:79:0f:f4:14:49:a9:7e:85:bf:c4:99:a8:7b:b5:d5:
44:2e:c9:d9:e7:cb:c6:3e:1c:3a:d9:30:ac:0c:32:55:3b:29:
b3:79:e2:37:68:20:51:53:e3:0a:03:43:57:a9:62:36:d1:ed:
d2:4c:0a:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:17 2024 by rpki-client on console-fra.rpki-client.org