Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/wJNuOVTW1P-jN30oNG6Hmy1baEQ.roa
File: wJNuOVTW1P-jN30oNG6Hmy1baEQ.roa (raw, json)
Hash identifier: zKDgtkKCc8Cft0VKtg3KVHlzLFg9gTGS7nP1AbFqHKU=
Subject key identifier: C0:93:6E:39:54:D6:D4:FF:A3:37:7D:28:34:6E:87:9B:2D:5B:68:44
Certificate issuer: /CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Certificate serial: 018570D55D271152B370A6434B2E7A9ECF25
Authority key identifier: CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/wJNuOVTW1P-jN30oNG6Hmy1baEQ.roa
Signing time: Mon 02 Jan 2023 04:55:09 +0000
ROA not before: Mon 02 Jan 2023 04:55:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57013
IP address blocks: 46.17.255.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:d5:5d:27:11:52:b3:70:a6:43:4b:2e:7a:9e:cf:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Validity
Not Before: Jan 2 04:55:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c0936e3954d6d4ffa3377d28346e879b2d5b6844
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:45:fb:b3:1f:00:50:31:0c:ca:ee:c9:54:e5:
90:e3:21:83:4c:41:de:de:ec:ab:48:8b:6b:f9:66:
45:cb:6d:b1:55:a9:34:46:71:d8:05:3c:f0:56:27:
0f:c9:5c:5e:1f:a8:d9:33:26:92:f7:39:41:23:86:
e0:f6:4f:06:47:15:94:6d:2f:42:83:fb:e5:95:c7:
e9:02:d9:b1:96:46:1e:07:d7:45:1b:1b:f0:74:f8:
e5:e6:07:9c:5f:28:96:2b:87:02:4a:c7:f4:88:53:
38:74:c2:34:bd:49:59:7c:3e:7c:4a:6e:d6:05:88:
1a:11:eb:64:09:85:0d:6e:10:37:9c:27:6c:28:d0:
61:f6:be:e9:0f:34:05:38:e6:f0:f6:2a:96:de:e1:
0d:25:64:ca:67:8f:4a:b9:d9:9d:0f:6a:d4:ff:27:
d8:40:da:e9:da:3d:d3:45:79:e3:1c:19:56:eb:f4:
08:01:1e:0f:ed:11:7f:83:a1:f3:e8:12:86:28:61:
20:33:8b:28:3f:67:f0:7c:3c:aa:5d:0a:19:e2:4b:
be:f1:2c:94:ab:09:d4:88:06:24:4e:cf:29:25:56:
2c:ef:a2:29:b4:72:0a:15:09:cb:7e:ff:a5:e4:6e:
4f:23:c0:5f:72:71:5c:19:4d:38:68:2b:94:df:d6:
8a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:93:6E:39:54:D6:D4:FF:A3:37:7D:28:34:6E:87:9B:2D:5B:68:44
X509v3 Authority Key Identifier:
keyid:CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/wJNuOVTW1P-jN30oNG6Hmy1baEQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.17.255.0/24
Signature Algorithm: sha256WithRSAEncryption
59:5c:ba:14:fe:f2:28:dd:2f:45:a0:20:f8:31:fa:3d:ef:22:
5d:6f:ec:16:1b:28:f9:eb:3c:e8:7a:8c:e9:cd:27:4f:fd:d8:
ee:b5:1c:02:71:d2:1d:f1:71:d1:71:fe:b9:5d:63:78:82:b5:
88:63:0a:1e:41:78:9e:14:b3:f8:fb:68:73:61:eb:64:47:bc:
ef:f3:13:74:b7:af:54:08:75:03:cc:f7:97:86:d5:b4:64:eb:
2f:4b:5c:6a:4f:9f:db:78:11:d4:05:79:83:40:52:51:d2:18:
92:33:35:39:a3:24:5e:b5:49:29:2a:1c:6f:7c:4a:8b:4f:c0:
b6:0e:9e:26:b9:4c:a9:ba:40:9e:92:37:52:81:77:8c:9e:99:
49:ce:85:38:d2:7c:ff:4d:7e:31:02:ac:e4:97:f1:3e:ed:cd:
08:e2:65:b0:ec:ba:41:47:04:0e:8b:aa:fa:7c:cd:0c:0a:01:
2d:b4:93:9b:f6:bb:49:34:40:54:de:ad:bd:c2:19:97:c4:c6:
61:3b:de:57:0d:60:f4:5f:d9:78:e9:29:53:25:ad:62:d4:d8:
19:bb:1d:d9:71:4b:eb:b6:ff:df:e9:2d:21:66:f9:95:85:52:
bb:3a:3f:34:ed:7f:66:3c:75:9e:bc:3f:82:6a:1e:52:46:1e:
73:dc:75:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:46 2024 by rpki-client on console-ams.rpki-client.org