Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/s1dxwWOItlRmhe9jLs9KWZV1gQU.roa
File: s1dxwWOItlRmhe9jLs9KWZV1gQU.roa (raw, json)
Hash identifier: x6XYxzP/qdwrENb8P6Za39bycqG1esezU0pyI39qV2Q=
Subject key identifier: B3:57:71:C1:63:88:B6:54:66:85:EF:63:2E:CF:4A:59:95:75:81:05
Certificate issuer: /CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Certificate serial: 05AE97AA
Authority key identifier: CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/s1dxwWOItlRmhe9jLs9KWZV1gQU.roa
Signing time: Sat 01 Jan 2022 07:57:12 +0000
ROA not before: Sat 01 Jan 2022 07:57:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49392
IP address blocks: 185.68.22.0/24 maxlen: 24
194.147.91.0/24 maxlen: 24
194.156.84.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95328170 (0x5ae97aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Validity
Not Before: Jan 1 07:57:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b35771c16388b6546685ef632ecf4a5995758105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ce:76:f4:75:0e:16:11:b1:0e:18:bf:a2:4e:
cd:1a:8c:24:17:bc:52:01:0e:cd:df:9b:56:2a:d1:
c3:32:2d:2f:6b:79:18:5a:a9:e6:b4:e2:57:6f:15:
4e:14:51:03:a7:9d:90:ca:c5:0a:24:a2:6f:4a:de:
96:6e:60:15:59:91:e3:d0:ce:ef:7f:78:38:ad:53:
04:7a:37:0b:1d:1a:76:a9:d5:c7:c2:9a:d7:da:ed:
54:90:5f:ef:a6:73:e4:65:62:00:06:e3:4a:12:4a:
1b:a3:72:26:77:c0:6c:e2:b5:21:0d:35:b5:37:b3:
f7:ec:25:f4:e8:38:74:5b:51:79:5a:98:d4:cd:f1:
1a:94:03:57:fe:a8:ed:0d:f3:e7:41:12:90:83:a3:
61:f6:63:4d:0f:35:23:a9:33:20:d8:b0:8c:14:ac:
bc:ed:0c:81:38:e5:81:96:11:07:8d:77:eb:77:fa:
e7:15:69:1d:af:5c:10:a5:18:f4:4d:f0:85:19:5d:
d0:be:ba:43:a7:1a:a0:15:eb:fd:6d:90:74:0b:e9:
14:71:00:40:8c:48:00:12:67:3a:b0:0f:fa:28:8a:
67:b7:e1:b6:1d:c0:8a:64:32:79:34:09:f1:c0:73:
6b:20:de:8c:56:98:d3:13:ed:3e:64:cb:8b:c3:85:
95:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:57:71:C1:63:88:B6:54:66:85:EF:63:2E:CF:4A:59:95:75:81:05
X509v3 Authority Key Identifier:
keyid:CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/s1dxwWOItlRmhe9jLs9KWZV1gQU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.68.22.0/24
194.147.91.0/24
194.156.84.0/22
Signature Algorithm: sha256WithRSAEncryption
96:0e:47:40:25:43:54:2c:b3:db:c7:29:62:9c:18:78:28:b4:
e1:f4:01:52:9b:b8:af:58:19:c5:e2:19:e0:7d:d5:44:f6:77:
4b:97:6f:5e:52:01:71:49:98:07:cd:fe:86:ee:06:4d:14:37:
c3:e5:2e:6d:bc:fa:e3:20:cb:49:b9:0d:75:ed:a9:ba:a7:f8:
16:c5:38:2f:f0:f9:4a:b5:15:05:2c:1e:5c:23:3a:43:35:56:
73:a9:a8:3b:c5:cb:42:37:06:a1:16:47:7d:ba:e9:65:ba:68:
c1:83:91:e6:e7:15:ab:95:61:1a:f7:bc:6c:df:3c:a2:05:db:
51:7e:26:46:bd:bc:b7:8d:2d:fa:93:10:8d:99:37:a9:23:63:
2f:04:06:31:f8:8a:a5:5e:a1:08:0b:be:92:58:31:6b:73:04:
bf:89:13:ca:89:c6:4b:fc:7c:80:28:ba:34:d3:11:4b:5a:37:
eb:88:4e:9e:9c:80:01:ba:17:1f:dc:a5:59:14:11:33:b1:7f:
09:d6:98:10:c2:94:63:8a:ff:a4:e5:29:d2:c5:28:37:6c:36:
f4:d3:9c:d9:17:55:15:41:b3:25:18:71:6b:48:67:a5:1e:eb:
b9:fb:9e:36:45:1f:69:3e:c2:a8:12:87:c2:3d:a0:84:03:96:
e8:d4:3b:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:46 2024 by rpki-client on console-ams.rpki-client.org