Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/x73GMWmthmcMy6jnI0MJQBmglR4.roa
File: x73GMWmthmcMy6jnI0MJQBmglR4.roa (raw, json)
Hash identifier: nGsJ9ed9OIWUeY8oZRDoaiqEa7gqLY40oNIG9pfcPAg=
Subject key identifier: C7:BD:C6:31:69:AD:86:67:0C:CB:A8:E7:23:43:09:40:19:A0:95:1E
Certificate issuer: /CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Certificate serial: 018CC8DE37AFC0C3FD76E2FBF84652DD9A47
Authority key identifier: CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/x73GMWmthmcMy6jnI0MJQBmglR4.roa
Signing time: Tue 02 Jan 2024 06:30:55 +0000
ROA not before: Tue 02 Jan 2024 06:30:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 395092
IP address blocks: 213.166.94.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:37:af:c0:c3:fd:76:e2:fb:f8:46:52:dd:9a:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Validity
Not Before: Jan 2 06:30:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c7bdc63169ad86670ccba8e72343094019a0951e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f7:2a:02:35:a1:cf:f9:0d:62:2e:00:e4:e2:
be:34:9b:1c:a3:7a:b0:d0:64:0e:c0:01:13:34:5d:
56:44:36:05:ad:ce:0e:26:70:10:6d:1f:68:eb:6f:
20:dc:fc:07:75:e6:4f:5a:a8:32:5b:14:1d:57:e7:
2a:0b:f2:22:9f:ff:fc:56:b8:19:91:9e:98:2d:43:
43:15:1d:7f:34:0f:07:ac:65:89:8c:b3:32:44:ad:
50:d2:e9:b5:b0:2a:77:bf:54:b7:12:ba:4d:02:51:
51:1a:d4:7c:4e:c2:a3:e8:54:a4:fb:6a:96:97:14:
21:33:9b:0b:e1:3b:04:8a:51:40:db:b7:94:7e:4e:
fc:f6:f3:ae:9b:13:dd:bc:12:2d:95:2c:d3:9f:c6:
33:10:c1:d0:df:db:1f:d0:cc:d4:2a:76:96:5b:81:
fd:ea:5f:d6:ef:bf:56:02:18:eb:ce:73:39:d4:8f:
00:d9:0f:0d:60:0f:74:a3:51:e5:71:94:ff:0a:c8:
19:c4:2a:15:05:25:31:59:59:2a:46:36:6b:d3:0b:
f3:b9:4a:76:f8:74:a3:c3:79:3c:70:b5:0d:19:c5:
99:36:01:e3:89:40:2e:8e:a1:28:87:c5:e1:36:09:
5b:27:47:bf:94:b5:6d:6f:a0:de:5e:79:17:a0:a6:
9d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:BD:C6:31:69:AD:86:67:0C:CB:A8:E7:23:43:09:40:19:A0:95:1E
X509v3 Authority Key Identifier:
keyid:CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/x73GMWmthmcMy6jnI0MJQBmglR4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.166.94.0/24
Signature Algorithm: sha256WithRSAEncryption
31:0c:ad:a4:6d:ec:83:84:b6:cd:95:31:c0:81:1e:11:e6:2d:
eb:2b:f7:ef:a7:0a:75:6b:82:79:21:21:5e:c7:e5:21:ce:75:
b2:84:e3:77:53:91:c4:3e:90:5f:56:b9:a0:df:20:fd:55:82:
30:22:6b:b7:ee:78:1d:65:d8:bc:b4:67:0a:4b:dd:65:80:2a:
61:b5:07:83:5d:e7:9f:9f:bf:00:21:25:69:51:39:5a:4f:a1:
df:b8:00:ef:24:e4:88:f3:52:ad:24:f4:11:3b:cc:ca:a6:77:
fd:ea:ff:73:63:d6:9e:86:fd:91:da:c8:80:2f:da:8c:56:df:
d6:3f:a9:15:24:c4:65:72:0b:df:0d:30:ca:c3:69:30:0c:7d:
91:ee:a1:c8:ec:cb:1f:c4:a9:f4:1f:49:ff:60:90:4c:21:04:
2b:d2:b1:d2:dc:05:18:91:00:b0:79:81:ff:4c:19:49:65:0d:
51:47:5f:6a:a1:a1:d9:1a:8b:ed:ff:d4:4e:59:22:00:46:49:
4d:c3:2a:2c:e6:e6:8c:c9:5f:2b:b5:ef:e3:a0:10:cf:f5:1e:
12:7f:dd:11:8d:10:b5:17:69:5e:6d:5b:18:2f:50:e7:69:c1:
27:a1:70:89:76:ff:f0:07:ad:b2:72:06:d8:07:23:68:23:10:
39:36:33:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:17 2024 by rpki-client on console-fra.rpki-client.org