Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/IthS4KUCgv8li3fobFBE7ONZXqw.roa
File: IthS4KUCgv8li3fobFBE7ONZXqw.roa (raw, json)
Hash identifier: w1kXbQUFutQFKDmjWKE35HlFchtSBQsMwnWS+rVGiuM=
Subject key identifier: 22:D8:52:E0:A5:02:82:FF:25:8B:77:E8:6C:50:44:EC:E3:59:5E:AC
Certificate issuer: /CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Certificate serial: 01852FB5455C97653EC53AAF9971E93D227B
Authority key identifier: 5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/IthS4KUCgv8li3fobFBE7ONZXqw.roa
Signing time: Tue 20 Dec 2022 13:24:46 +0000
ROA not before: Tue 20 Dec 2022 13:24:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50792
IP address blocks: 194.76.15.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:2f:b5:45:5c:97:65:3e:c5:3a:af:99:71:e9:3d:22:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Validity
Not Before: Dec 20 13:24:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=22d852e0a50282ff258b77e86c5044ece3595eac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:91:65:41:35:dc:7e:9d:ca:ee:99:58:f3:85:
9a:04:c5:7b:37:e1:d1:3f:9d:e3:5d:3b:58:cb:9e:
70:c5:ca:37:3b:ae:4e:7c:5f:4b:9f:1b:e8:d2:b1:
05:86:9f:9e:ff:9a:fb:3d:f4:77:da:72:35:2c:18:
2d:e8:e7:5e:48:d1:72:ce:43:3a:40:7e:51:81:60:
d3:31:8d:04:59:b8:54:b2:2c:e2:de:44:64:a4:08:
60:f3:ec:3c:67:c0:98:cb:45:fb:2f:aa:02:25:a2:
91:3b:70:64:56:db:44:ea:05:75:72:a9:ae:0d:15:
fe:a2:fd:07:3f:63:78:55:c3:12:83:a3:22:c1:f0:
a2:c7:76:57:6c:e6:5e:2b:ef:b4:cb:f6:db:06:d9:
80:4c:e2:70:b2:8a:00:b0:d9:24:d1:6c:fc:7a:5c:
c8:36:0c:8a:ab:73:c5:18:1e:29:49:d6:8a:9d:b8:
da:a7:2a:07:65:7c:75:7b:70:1f:50:59:be:83:39:
a4:e9:90:35:a8:91:2b:d6:d1:76:79:8c:19:f9:79:
8f:d4:46:81:bd:40:83:75:7e:08:fb:1e:12:e4:ff:
4b:60:25:c9:bf:7a:68:74:b7:1d:e0:0b:2a:59:1e:
4a:8e:8e:d3:fc:20:7c:28:78:2d:c8:f5:5b:9c:a5:
ed:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:D8:52:E0:A5:02:82:FF:25:8B:77:E8:6C:50:44:EC:E3:59:5E:AC
X509v3 Authority Key Identifier:
keyid:5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/IthS4KUCgv8li3fobFBE7ONZXqw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.76.15.0/24
Signature Algorithm: sha256WithRSAEncryption
51:cd:0a:90:cc:08:e7:e9:e4:98:be:4c:71:31:b9:ed:ad:ee:
d3:02:69:3e:5a:ad:b8:29:0b:70:1e:6d:6e:6e:ae:e5:c0:e3:
19:d4:59:a5:f1:c9:79:5d:04:ee:3c:8b:82:22:ae:51:0f:b4:
3a:6b:ce:09:70:b0:05:2f:cb:08:8a:75:c0:6d:bc:c3:bf:8d:
be:02:2a:29:fc:39:4c:dd:63:0e:4c:93:f1:4f:ef:da:92:9f:
28:3b:a0:94:35:c7:6d:29:70:b7:ae:be:f8:d9:4a:df:23:40:
44:9b:ed:3b:af:52:4c:28:c7:06:a9:84:7f:75:79:aa:ea:02:
9c:77:29:17:4c:1f:af:af:09:48:5e:85:b6:07:93:ac:99:8e:
92:49:b3:ba:39:60:3f:c9:a4:e7:6f:bf:3e:83:d4:d9:72:41:
3b:52:23:28:37:44:62:cb:85:43:2c:10:a1:6b:a6:67:c6:d5:
76:64:b7:34:7a:ac:28:24:9b:74:2a:eb:8f:90:d7:30:92:aa:
94:17:e2:da:f3:c5:7c:22:ef:f0:63:b8:ef:31:80:ba:39:94:
77:0b:c0:38:fa:a9:c1:a8:f2:1b:e4:b9:41:50:4b:7d:dc:1f:
76:95:6e:c2:59:6f:26:60:4c:7d:16:a8:f1:70:4f:03:9d:35:
a4:94:5f:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:47 2024 by rpki-client on console-fra.rpki-client.org