Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/ViYRNOm-PL5DLCettRQS8HR8gas.roa
File: ViYRNOm-PL5DLCettRQS8HR8gas.roa (raw, json)
Hash identifier: NlIZNV5a4pkRjimjydgGB4fQSppWsXSpp3cM979Lz4I=
Subject key identifier: 56:26:11:34:E9:BE:3C:BE:43:2C:27:AD:B5:14:12:F0:74:7C:81:AB
Certificate issuer: /CN=12694f6945a21d08d30192cfc1a6b780de728e3b
Certificate serial: 7D7C
Authority key identifier: 12:69:4F:69:45:A2:1D:08:D3:01:92:CF:C1:A6:B7:80:DE:72:8E:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EmlPaUWiHQjTAZLPwaa3gN5yjjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/ViYRNOm-PL5DLCettRQS8HR8gas.roa
Signing time: Thu 28 Apr 2022 12:39:38 +0000
ROA not before: Thu 28 Apr 2022 12:39:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35584
IP address blocks: 193.200.200.0/24 maxlen: 24
89.33.96.0/22 maxlen: 22
193.219.119.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32124 (0x7d7c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12694f6945a21d08d30192cfc1a6b780de728e3b
Validity
Not Before: Apr 28 12:39:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=56261134e9be3cbe432c27adb51412f0747c81ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f6:97:12:87:ad:62:16:58:f9:22:9b:a6:12:
71:eb:6a:e5:84:22:a2:06:61:f9:45:46:08:05:cd:
bd:1b:c0:7d:97:df:06:cc:49:f5:5b:e6:a1:88:67:
42:92:29:86:86:b3:20:22:83:a2:93:e2:ec:81:01:
2f:5c:fd:7f:33:9b:dc:3f:61:bc:ec:79:49:24:30:
3e:17:86:0a:0a:e0:a6:0d:9c:8d:be:07:47:f3:74:
11:c5:2a:22:d3:49:64:7e:5e:0a:e7:c5:c0:ef:af:
d5:46:25:19:d3:33:ae:ae:4c:3c:1b:49:c2:92:b9:
a4:81:fc:88:3f:72:92:08:41:d7:e3:a7:8c:4d:10:
94:ff:e9:bc:f0:7d:58:91:61:3e:3c:87:1a:60:8b:
e7:0e:5d:6f:5a:be:d3:f4:40:01:28:9c:f4:2f:94:
b4:6d:c2:60:9a:1d:a4:c5:5d:1c:a7:05:a9:04:a4:
77:ca:83:5d:77:8b:a2:86:93:35:4f:10:0f:32:ff:
41:9b:d0:5b:15:06:a2:1d:21:6b:fe:e8:e0:90:a1:
7d:4e:e1:81:60:d2:11:59:8d:7e:b8:35:1c:40:6c:
5b:49:40:e2:bb:bf:de:e7:3d:62:07:94:bc:c6:4a:
3e:61:bf:4a:f6:6a:08:3e:6e:d0:90:aa:cb:e5:88:
e6:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:26:11:34:E9:BE:3C:BE:43:2C:27:AD:B5:14:12:F0:74:7C:81:AB
X509v3 Authority Key Identifier:
keyid:12:69:4F:69:45:A2:1D:08:D3:01:92:CF:C1:A6:B7:80:DE:72:8E:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EmlPaUWiHQjTAZLPwaa3gN5yjjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/ViYRNOm-PL5DLCettRQS8HR8gas.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/EmlPaUWiHQjTAZLPwaa3gN5yjjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.33.96.0/22
193.200.200.0/24
193.219.119.0/24
Signature Algorithm: sha256WithRSAEncryption
62:6d:64:44:18:88:b7:b3:0e:f6:cf:88:e6:d9:d2:7d:b9:98:
81:0c:f7:ba:2f:7f:05:0c:50:c1:c8:e7:14:f1:75:ba:c9:0d:
55:14:f7:50:28:b2:9a:fb:90:b3:bb:96:04:cd:02:32:8d:96:
0e:6d:cf:72:1d:13:2a:55:55:b2:d0:f2:9b:18:63:13:bc:9c:
52:6f:5a:83:79:1d:39:d1:e7:96:84:e1:66:f3:f3:ae:69:a8:
70:91:0b:fa:a2:35:71:49:0c:25:23:44:80:11:ab:47:d2:79:
d9:68:c0:00:99:17:a0:44:09:21:38:b8:1a:13:af:65:00:21:
5a:c0:dd:cc:d3:b4:d9:33:8e:8f:9a:d4:64:46:4f:f1:36:1a:
16:9e:f6:e9:e9:c8:d4:56:21:e4:b3:c0:bd:03:c3:c8:5a:39:
3b:8a:4f:32:39:d3:fa:75:1a:ca:66:01:47:b3:24:dd:f2:b0:
1b:0a:17:23:30:50:59:5c:f7:c8:c7:c2:f6:97:1e:a8:1b:52:
42:a0:7d:ab:7a:a2:97:4c:c2:4f:78:b4:f8:3c:0d:11:65:2d:
b9:2a:05:03:14:67:11:2e:d8:f8:58:e0:9a:c2:a4:62:e2:8d:
b8:5b:0c:b8:32:c4:89:d2:8a:d6:39:e2:4f:a9:10:89:b0:17:
ed:ce:38:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:20 2023 by rpki-client on console-fra.rpki-client.org