Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/yZnJhxEvcR_My7cEBR2FQgsgr64.roa
File: yZnJhxEvcR_My7cEBR2FQgsgr64.roa (raw, json)
Hash identifier: TH5rFWQ4uzboVO6pQpOj/p5U5SA6aahimtmj45wYsPs=
Subject key identifier: C9:99:C9:87:11:2F:71:1F:CC:CB:B7:04:05:1D:85:42:0B:20:AF:AE
Certificate issuer: /CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Certificate serial: 05B1C1F3
Authority key identifier: CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/yZnJhxEvcR_My7cEBR2FQgsgr64.roa
Signing time: Sat 01 Jan 2022 07:57:13 +0000
ROA not before: Sat 01 Jan 2022 07:57:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57271
IP address blocks: 194.147.89.0/24 maxlen: 24
2a01:48a0:4071::/48 maxlen: 48
2a01:48a0:4001::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95535603 (0x5b1c1f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Validity
Not Before: Jan 1 07:57:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c999c987112f711fcccbb704051d85420b20afae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f3:7d:08:a5:81:4e:2e:06:21:5b:16:f7:1a:
3e:dd:07:f8:a9:92:2b:b4:74:19:9c:94:0e:5a:d4:
fd:97:1e:43:a7:ac:4b:41:62:af:f4:6a:e1:a0:49:
83:f5:13:9f:b1:6b:26:4f:8d:7c:78:eb:ff:34:6c:
15:85:b5:19:33:23:6b:10:e1:b5:ed:d3:98:20:e8:
27:e1:2f:ca:08:1d:36:95:8b:a5:ea:c5:8e:55:6c:
4f:28:e2:32:a5:e6:56:85:f5:7f:7f:54:39:82:b6:
10:34:b4:4d:cc:d4:29:ed:35:4b:db:a6:e7:99:45:
cc:07:04:e2:32:f6:9b:15:bb:f6:f5:ec:1c:30:67:
9c:3d:27:3b:87:46:4d:e5:c9:ce:06:5f:6f:c7:d7:
f1:b4:b3:eb:c3:4c:25:5a:be:f3:04:39:30:c8:b6:
b6:a5:59:2a:af:04:b6:b5:8f:29:a8:6b:12:ee:c4:
ab:02:99:51:6f:1c:5c:bf:d8:ef:4c:d0:f2:8b:77:
91:e4:6d:c6:22:d9:df:a1:e5:5f:8a:e1:bb:60:eb:
1f:c2:a5:2d:a6:09:f2:5f:85:16:60:cc:b8:c8:83:
23:74:5d:94:37:c1:00:ae:71:ca:59:dc:a3:c0:a0:
95:af:20:f2:40:2d:d9:bf:30:3e:10:f2:a5:d5:4b:
af:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:99:C9:87:11:2F:71:1F:CC:CB:B7:04:05:1D:85:42:0B:20:AF:AE
X509v3 Authority Key Identifier:
keyid:CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/yZnJhxEvcR_My7cEBR2FQgsgr64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.89.0/24
IPv6:
2a01:48a0:4001::/48
2a01:48a0:4071::/48
Signature Algorithm: sha256WithRSAEncryption
34:a7:4b:f6:21:00:57:5f:d6:fd:89:cb:34:82:70:4e:38:8a:
70:58:10:b1:5e:9e:49:bf:38:25:76:4f:2f:e2:90:26:6e:0c:
bb:82:20:56:a6:bb:c7:c2:a6:a7:7c:7d:c2:1f:91:e4:9e:5a:
55:3f:4c:e3:cd:28:0a:57:aa:ea:a3:52:a1:93:c8:10:90:73:
4c:f3:eb:1b:1c:44:b0:8a:cd:72:3f:0e:44:15:6b:ba:c5:3f:
f5:28:f8:30:d0:a0:d8:9a:57:93:89:9e:b9:11:e0:be:07:60:
b9:66:16:d5:52:8b:d5:df:75:cb:56:aa:54:6c:29:bc:86:61:
b2:16:14:78:83:e9:61:a3:82:6f:f9:49:f8:35:f5:e3:9e:f1:
84:e0:cb:e1:eb:0f:6b:4d:05:11:d8:a0:11:59:ff:8d:90:92:
86:13:a4:1c:95:d1:a4:c0:6a:e0:16:55:c3:d5:35:c6:4d:d7:
fa:45:ae:9c:f3:f1:53:ca:fc:fa:c3:a5:86:4d:65:e3:2d:7e:
e9:3c:7b:cb:0a:65:18:b0:f5:c0:96:63:0d:2f:09:bf:5d:6c:
b0:93:72:9a:06:b8:24:48:c5:e1:28:c6:ab:26:b2:80:56:8d:
ef:f8:35:ac:21:fe:f8:1f:aa:53:51:47:02:02:b1:00:5e:e9:
fe:bc:e3:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:17 2024 by rpki-client on console-fra.rpki-client.org