Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/vD0q-IG1_N0dh04N-e2FSPvPAW8.roa
File: vD0q-IG1_N0dh04N-e2FSPvPAW8.roa (raw, json)
Hash identifier: y+NOHaybgYjLVuoh4HOEO1SjEy4K3B8O+/6kbFTTUf8=
Subject key identifier: BC:3D:2A:F8:81:B5:FC:DD:1D:87:4E:0D:F9:ED:85:48:FB:CF:01:6F
Certificate issuer: /CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Certificate serial: 018570D5658DA9896F1104AFB781EA1BB724
Authority key identifier: CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/vD0q-IG1_N0dh04N-e2FSPvPAW8.roa
Signing time: Mon 02 Jan 2023 04:55:11 +0000
ROA not before: Mon 02 Jan 2023 04:55:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208142
IP address blocks: 185.147.38.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:d5:65:8d:a9:89:6f:11:04:af:b7:81:ea:1b:b7:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Validity
Not Before: Jan 2 04:55:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bc3d2af881b5fcdd1d874e0df9ed8548fbcf016f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:27:94:af:99:44:54:b0:c0:ce:5d:ef:ad:d2:
38:ce:4e:a6:d3:e6:c2:23:a5:92:b3:e9:63:b5:f9:
e8:c4:13:6d:4e:ea:ef:ee:7e:24:43:c8:61:44:8d:
84:50:ea:1d:e5:9a:9a:14:2f:03:35:95:d4:c3:4d:
8b:b4:98:4d:98:dd:f0:e5:c7:13:49:8c:b5:99:f6:
d7:b8:25:92:d6:54:25:36:05:bb:e2:3b:43:ed:e9:
6c:61:33:e3:21:ee:13:19:2f:b6:8c:bd:1a:90:96:
ac:a8:a5:09:7d:ac:ba:1e:cd:36:7d:94:5f:d5:b5:
36:d4:97:0f:4c:aa:00:09:79:0a:df:c2:ef:74:a5:
32:bb:94:8e:ab:12:20:1a:7c:d7:ac:d5:66:64:bb:
c4:b3:5b:cc:88:69:04:3a:b6:c8:71:fb:57:99:e3:
06:fb:0b:e9:45:79:b6:b4:af:cb:47:d6:7c:b5:1c:
52:4a:43:99:02:b5:ac:f9:06:d9:32:d3:bc:1e:06:
84:33:0a:4c:46:a3:57:9d:3e:e9:c9:1e:d6:af:73:
f9:b7:4d:42:1d:68:93:14:19:63:d0:8a:1a:d8:76:
89:86:4b:78:d9:8f:19:3a:9a:d8:13:cf:8a:f3:46:
83:ca:81:29:a3:b2:ff:9c:57:b4:57:67:dd:48:dc:
ac:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:3D:2A:F8:81:B5:FC:DD:1D:87:4E:0D:F9:ED:85:48:FB:CF:01:6F
X509v3 Authority Key Identifier:
keyid:CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/vD0q-IG1_N0dh04N-e2FSPvPAW8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.147.38.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:02:53:49:42:f4:81:c5:51:1a:f0:dd:f6:ba:59:e9:d7:b0:
09:2f:c8:1b:63:3c:61:72:19:54:49:eb:ad:32:1e:07:06:80:
c4:85:7a:fd:59:1a:a2:07:31:93:a9:cb:02:c8:18:90:ac:1f:
5b:5f:b3:cd:df:7b:81:4c:b5:9e:fe:96:e8:b5:c3:c4:dc:76:
e3:7e:66:c7:96:97:34:97:ae:a1:f8:f7:14:9f:51:a8:ed:50:
51:47:60:5b:e9:ae:73:2d:24:35:c1:cb:fd:12:13:30:52:d1:
d2:53:7c:86:a3:5f:9a:07:f6:dc:8b:00:6b:75:6a:c3:25:bf:
15:d6:b7:77:44:2b:62:f9:6d:9b:39:a3:e2:f7:94:77:90:96:
6d:0f:f2:17:fe:fa:3a:1b:3c:76:44:62:1d:03:49:75:35:c4:
67:df:7a:3f:4b:bd:36:f3:25:d0:3b:bd:b7:d6:da:24:61:c5:
c9:88:81:2c:9c:c5:9b:8d:9b:4e:c7:10:a9:6c:ff:0d:aa:c4:
7d:9e:a7:13:9b:3b:2c:eb:9b:b5:4e:01:07:21:b2:3f:df:78:
03:04:7a:02:3e:67:44:2a:58:c3:7e:72:bb:d0:15:e7:96:0d:
6e:54:08:0d:ae:c4:e3:c0:f3:54:d2:fb:52:f4:85:b5:71:47:
64:f7:9d:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:52 2023 by rpki-client on console-ams.rpki-client.org