Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/y5qNdUmF950qanARlpZAYYRo2Ww.roa
File: y5qNdUmF950qanARlpZAYYRo2Ww.roa (raw, json)
Hash identifier: wfhz+/JEPncsSRrCRHOr/4WVlEZDAQ6/5k0Nhp1M/Y0=
Subject key identifier: CB:9A:8D:75:49:85:F7:9D:2A:6A:70:11:96:96:40:61:84:68:D9:6C
Certificate issuer: /CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Certificate serial: 039DF983
Authority key identifier: 5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/y5qNdUmF950qanARlpZAYYRo2Ww.roa
Signing time: Sat 01 Jan 2022 14:07:03 +0000
ROA not before: Sat 01 Jan 2022 14:07:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43581
IP address blocks: 194.169.160.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60684675 (0x39df983)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Validity
Not Before: Jan 1 14:07:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cb9a8d754985f79d2a6a7011969640618468d96c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:18:77:1d:db:cc:ad:d6:ab:f9:08:61:00:76:
43:87:56:4a:00:de:64:67:bd:4b:3c:4b:03:74:bb:
87:8d:88:ac:44:26:65:68:45:93:49:eb:ec:ba:3f:
52:b2:da:1e:1f:ac:40:a7:83:95:17:90:62:f6:60:
a4:b4:ef:fe:60:09:d7:30:cd:b4:eb:38:24:35:0e:
fd:2e:09:25:d7:18:b4:71:99:b7:fc:38:f3:fd:ec:
5f:9e:69:2f:57:1c:04:4f:74:23:7c:3f:4f:f7:58:
aa:d3:61:5a:6d:c5:02:de:93:72:5f:3d:7d:3f:28:
43:c6:f0:f6:79:4e:94:67:2e:12:d9:00:f8:9c:9e:
c6:dd:76:e8:e5:e3:dd:91:d5:70:3c:d1:4f:04:82:
35:e6:11:37:f3:e7:62:77:40:74:67:75:f0:c3:c4:
4b:cb:6b:f9:c5:8b:17:a9:9e:53:66:81:4c:1a:32:
d3:d5:d5:63:11:32:a9:ff:72:13:14:1c:61:2e:e9:
9b:a5:34:2b:52:f4:6a:c3:eb:d9:2b:ac:9e:9e:40:
e5:92:fe:6a:c8:e4:f9:3a:95:34:1c:88:7a:f8:03:
3c:a1:91:c0:97:ad:ef:4b:71:bc:48:bd:28:9e:36:
69:93:43:14:8b:f5:91:a0:92:3c:89:0f:58:56:2b:
74:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:9A:8D:75:49:85:F7:9D:2A:6A:70:11:96:96:40:61:84:68:D9:6C
X509v3 Authority Key Identifier:
keyid:5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/y5qNdUmF950qanARlpZAYYRo2Ww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.169.160.0/24
Signature Algorithm: sha256WithRSAEncryption
67:83:0b:e9:c6:17:44:48:8b:be:05:5c:64:95:87:80:7c:12:
c4:1a:6e:4b:30:aa:35:9b:bb:05:08:8d:35:6c:84:40:0c:a0:
7c:5b:5d:7a:30:3a:aa:09:c1:1b:36:6c:b3:8d:b6:fb:b2:96:
30:9b:e9:79:0e:31:30:e2:86:a7:ef:38:71:7a:be:23:0e:e4:
71:c9:ce:7d:ff:86:24:fa:70:9c:86:93:be:6f:d4:4a:29:14:
98:6c:1a:39:b3:47:62:89:66:a5:0a:e6:7c:57:87:2d:c4:57:
98:2b:76:33:e7:25:5b:ed:3a:df:c6:2f:dc:4d:00:43:dd:6a:
48:8a:12:4f:d0:3c:be:3a:8e:36:82:cf:01:a3:21:aa:58:24:
9f:85:67:dc:49:d0:94:7c:ae:7e:84:dd:15:ba:a3:b1:fd:6c:
61:c2:ab:98:c9:17:6c:2e:f4:66:5f:87:36:e8:7b:d2:99:58:
9b:91:66:e9:cd:62:4b:37:9b:79:2e:ed:73:e9:a7:7e:b4:56:
06:c1:e1:7a:eb:10:46:11:be:e6:64:55:d9:f1:e2:a3:d1:6a:
dc:a2:e3:59:f5:a3:48:e8:cc:f4:a5:b9:73:70:89:e1:73:54:
6d:be:58:39:5f:37:35:5f:61:58:49:70:68:e0:05:1b:48:29:
ef:9d:f0:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:47 2024 by rpki-client on console-fra.rpki-client.org