Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/907c17-6b5c-49ab-b953-e439f9e3a19e/1/PVTpL7GYaGwfOlMV_sTZ70j85mI.roa
File: PVTpL7GYaGwfOlMV_sTZ70j85mI.roa (raw, json)
Hash identifier: I71i1Vv0sxLVe+Ozwl062KtY1l7bVy7qwKcmHaE4gHY=
Subject key identifier: 3D:54:E9:2F:B1:98:68:6C:1F:3A:53:15:FE:C4:D9:EF:48:FC:E6:62
Certificate issuer: /CN=ada4f2b1ad15b189923eed2ce78d0ae893cf6710
Certificate serial: 0472D8D8
Authority key identifier: AD:A4:F2:B1:AD:15:B1:89:92:3E:ED:2C:E7:8D:0A:E8:93:CF:67:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/raTysa0VsYmSPu0s540K6JPPZxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/907c17-6b5c-49ab-b953-e439f9e3a19e/1/PVTpL7GYaGwfOlMV_sTZ70j85mI.roa
Signing time: Sat 01 Jan 2022 09:01:07 +0000
ROA not before: Sat 01 Jan 2022 09:01:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1820
IP address blocks: 194.54.156.0/22 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74635480 (0x472d8d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ada4f2b1ad15b189923eed2ce78d0ae893cf6710
Validity
Not Before: Jan 1 09:01:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3d54e92fb198686c1f3a5315fec4d9ef48fce662
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:bc:36:09:1e:5d:c3:1c:62:52:ed:11:bd:68:
02:54:05:ef:4d:39:36:a8:45:9d:16:c9:47:bf:96:
04:16:a2:2b:28:b7:cd:72:6f:13:82:cb:7d:c8:67:
52:d2:26:38:a5:e4:45:51:1a:89:d1:24:38:31:4e:
c0:48:c4:3f:ca:30:46:0f:cd:a8:ba:bf:2e:4f:4c:
9b:af:d6:50:6b:de:c4:75:71:bb:82:2a:df:2c:46:
52:0f:9b:a4:15:56:88:15:67:e3:d7:25:03:d7:e2:
62:1d:23:c5:33:7a:3a:4c:0f:6c:85:8b:dd:7e:af:
92:52:af:23:4a:ed:f5:62:0d:c4:a6:7b:81:0f:5d:
ff:31:06:be:70:e4:a7:1c:31:c1:bf:1a:c3:a3:67:
84:a0:ce:1e:36:d6:52:e4:e7:46:89:80:d5:a1:86:
50:b4:be:c5:79:a6:19:47:cf:c7:ed:68:13:b6:4d:
1c:01:1b:32:50:66:e3:37:15:aa:db:d8:4a:15:76:
99:22:ab:c6:f9:70:d0:94:35:68:fe:33:63:d8:5f:
37:fc:9f:2e:cf:27:6c:68:4d:1e:a2:3b:bb:b8:17:
79:ae:cf:8f:37:57:bd:d5:b9:6f:fd:be:29:10:d1:
c2:43:33:67:9b:c1:07:3b:5e:c7:2a:b3:23:00:01:
e5:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:54:E9:2F:B1:98:68:6C:1F:3A:53:15:FE:C4:D9:EF:48:FC:E6:62
X509v3 Authority Key Identifier:
keyid:AD:A4:F2:B1:AD:15:B1:89:92:3E:ED:2C:E7:8D:0A:E8:93:CF:67:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/raTysa0VsYmSPu0s540K6JPPZxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/907c17-6b5c-49ab-b953-e439f9e3a19e/1/PVTpL7GYaGwfOlMV_sTZ70j85mI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/907c17-6b5c-49ab-b953-e439f9e3a19e/1/raTysa0VsYmSPu0s540K6JPPZxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.54.156.0/22
Signature Algorithm: sha256WithRSAEncryption
04:d7:c2:14:2a:f4:6c:da:2c:dd:e8:60:55:17:f1:cd:11:5f:
93:8b:9b:ac:47:54:28:1d:ae:ab:bc:b6:cb:3a:63:78:e3:97:
17:eb:4a:0a:03:f8:f0:d3:f4:29:55:9a:c4:0c:e1:54:9f:ef:
27:06:7c:c5:1a:ce:7a:e4:7e:26:68:35:34:fd:81:e1:61:1b:
c1:76:36:6d:8c:ba:69:74:f6:f3:a6:17:2f:20:26:3f:19:b4:
1f:10:b5:21:37:38:7f:e8:d5:07:c9:50:70:27:8d:86:50:f0:
32:e4:3a:da:f0:fd:48:53:55:3d:04:fc:31:c9:1f:7f:c2:52:
cc:a3:d7:4f:43:22:17:e1:82:9c:57:8e:ba:f7:3f:2a:6e:43:
2e:38:ca:10:15:4f:1c:09:b2:3c:f0:d2:d7:1c:f0:06:8b:b1:
8a:86:79:1b:00:56:0c:2c:f8:79:69:b7:7d:fd:4d:92:da:df:
a1:b9:3e:87:2d:30:71:ae:f8:7d:67:ff:0d:58:64:96:45:97:
a2:b0:40:bc:9c:75:d0:f3:cd:90:a2:9d:f5:d4:db:d6:a6:d7:
c3:2f:77:e5:4e:a1:82:ed:1f:ce:1e:76:2c:e8:7a:65:d6:77:
53:75:e9:b6:bf:16:6d:8a:db:54:c5:03:5f:c0:fb:ad:f9:33:
8d:3c:36:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:10 2024 by rpki-client on console-fra.rpki-client.org