Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/779ae9-7d22-4252-8c5b-0ea4d531b793/1/ZZXtGaiTCgv1QEyrVrT0Lv5nofw.roa
File: ZZXtGaiTCgv1QEyrVrT0Lv5nofw.roa (raw, json)
Hash identifier: MaUo6Do95YGbTKBuZF26QFDEEniM8TPTBbl9ySvcdVk=
Subject key identifier: 65:95:ED:19:A8:93:0A:0B:F5:40:4C:AB:56:B4:F4:2E:FE:67:A1:FC
Certificate issuer: /CN=60998d3c9d8bdc9c1dff8e319424412b6cdc1dd3
Certificate serial: 06F06B0A
Authority key identifier: 60:99:8D:3C:9D:8B:DC:9C:1D:FF:8E:31:94:24:41:2B:6C:DC:1D:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJmNPJ2L3Jwd_44xlCRBK2zcHdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/779ae9-7d22-4252-8c5b-0ea4d531b793/1/ZZXtGaiTCgv1QEyrVrT0Lv5nofw.roa
Signing time: Sat 01 Jan 2022 11:01:32 +0000
ROA not before: Sat 01 Jan 2022 11:01:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44486
IP address blocks: 192.40.69.0/24 maxlen: 24
192.42.65.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116419338 (0x6f06b0a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60998d3c9d8bdc9c1dff8e319424412b6cdc1dd3
Validity
Not Before: Jan 1 11:01:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6595ed19a8930a0bf5404cab56b4f42efe67a1fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:0d:5e:af:7e:e2:70:f0:e9:e3:77:d2:ae:25:
ff:40:83:64:26:8a:99:54:4c:41:e2:b7:b7:59:2f:
48:05:e5:dc:ad:16:fe:ea:50:0b:45:ad:f9:39:ff:
0c:ab:9d:aa:63:d4:4a:61:90:92:d4:66:1a:dc:dd:
fa:71:60:b4:7a:f4:09:79:74:71:37:f5:cb:bb:1e:
5a:47:37:1c:21:1f:6b:a1:bf:0f:b2:12:09:e2:c2:
76:0a:a1:15:38:0b:fb:69:95:78:a5:15:bb:3b:88:
46:03:12:75:02:4e:62:1a:50:9e:4a:e1:4d:d7:a0:
f4:74:05:e0:bf:26:ad:a7:bb:e8:49:20:12:dc:08:
a5:2d:19:12:a0:2c:3b:cd:a0:95:d6:ff:08:e0:12:
3b:be:cb:c2:f0:5e:5e:8f:e2:d4:b6:9c:fe:f8:b0:
a4:4c:6f:64:ad:e3:7e:86:01:df:1c:1d:86:1c:12:
63:36:22:58:6b:59:11:51:4c:cd:fc:23:5b:f1:48:
28:69:57:5b:5f:14:49:a0:98:ad:cb:fb:ef:61:3c:
f6:39:f2:1d:67:93:c7:2d:69:ea:9b:09:dc:68:68:
4e:53:36:8b:34:8d:76:f9:1a:ca:75:b1:e4:12:c3:
03:a5:fc:19:e1:31:e6:44:8a:0c:2c:cd:84:63:a0:
f9:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:95:ED:19:A8:93:0A:0B:F5:40:4C:AB:56:B4:F4:2E:FE:67:A1:FC
X509v3 Authority Key Identifier:
keyid:60:99:8D:3C:9D:8B:DC:9C:1D:FF:8E:31:94:24:41:2B:6C:DC:1D:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJmNPJ2L3Jwd_44xlCRBK2zcHdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/779ae9-7d22-4252-8c5b-0ea4d531b793/1/ZZXtGaiTCgv1QEyrVrT0Lv5nofw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/779ae9-7d22-4252-8c5b-0ea4d531b793/1/YJmNPJ2L3Jwd_44xlCRBK2zcHdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.40.69.0/24
192.42.65.0/24
Signature Algorithm: sha256WithRSAEncryption
81:f4:8a:da:39:a5:13:a6:c3:1e:e6:dd:8d:98:b3:97:c2:05:
1d:03:47:56:d0:41:9f:13:8b:5b:0a:0d:16:2d:12:08:20:e7:
8d:06:1b:4c:a9:d9:92:0f:d7:ea:85:86:da:c5:f6:b4:22:47:
5e:1c:cb:de:17:75:5a:ac:7b:94:2d:a3:0f:29:ca:94:f9:be:
66:ad:59:24:11:50:e0:7d:b0:32:fa:0d:a7:ca:08:b3:3e:ce:
05:84:5a:ac:7d:8a:36:d6:a2:fc:77:ce:13:cc:7e:74:6d:30:
8c:60:5b:2f:93:48:4e:91:5e:77:78:40:00:80:8f:92:3a:d3:
1f:6e:04:e2:7f:4b:a9:3f:c5:f7:51:0e:6e:83:0c:49:f4:0b:
e7:cb:26:27:be:49:c9:a8:42:e1:61:f0:8d:6e:e3:e9:23:c8:
b4:14:73:c8:bb:5a:b6:09:ed:57:34:2f:9e:89:60:f6:d5:81:
8d:1c:1e:e0:5f:55:f9:34:e8:54:d0:54:b2:70:4c:d6:75:a8:
ed:99:13:50:4f:40:6e:bb:29:4e:6e:87:09:9c:a4:68:70:23:
06:24:11:ce:51:61:e7:07:52:50:20:17:65:74:19:1e:95:71:
de:08:38:21:13:96:d4:92:8a:b5:b8:ce:f6:d3:d7:c4:df:de:
2d:51:d5:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:37 2024 by rpki-client on console-fra.rpki-client.org