Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/e05e77-12ae-4f59-9491-cadd1129c98d/1/6O3rmBPZadwsW9GvobP9Iyds1Ik.roa
File: 6O3rmBPZadwsW9GvobP9Iyds1Ik.roa (raw, json)
Hash identifier: Q4E+Q7X3RJZ0z6pWoir/fAgxlLAvv/Wuq8FE6dhZfJw=
Subject key identifier: E8:ED:EB:98:13:D9:69:DC:2C:5B:D1:AF:A1:B3:FD:23:27:6C:D4:89
Certificate issuer: /CN=e5bcfc1077cf876888fb6c75b2e394923205f3b5
Certificate serial: 04F7A9D0
Authority key identifier: E5:BC:FC:10:77:CF:87:68:88:FB:6C:75:B2:E3:94:92:32:05:F3:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5bz8EHfPh2iI-2x1suOUkjIF87U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/e05e77-12ae-4f59-9491-cadd1129c98d/1/6O3rmBPZadwsW9GvobP9Iyds1Ik.roa
Signing time: Sat 01 Jan 2022 13:07:22 +0000
ROA not before: Sat 01 Jan 2022 13:07:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15404
IP address blocks: 176.116.118.0/24 maxlen: 24
91.239.57.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83339728 (0x4f7a9d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5bcfc1077cf876888fb6c75b2e394923205f3b5
Validity
Not Before: Jan 1 13:07:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e8edeb9813d969dc2c5bd1afa1b3fd23276cd489
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:14:7b:6e:17:83:af:dc:9e:fe:84:17:47:7a:
64:de:16:45:24:8f:9d:d6:53:86:bc:d2:7e:12:76:
04:81:28:d6:3f:63:8f:eb:77:10:63:5f:b0:92:bf:
bd:57:fb:11:8e:d8:2f:c2:70:84:29:60:d5:2e:83:
35:2d:f6:65:10:7c:54:70:cb:8e:f1:74:ab:b9:10:
b0:20:2a:7b:af:59:ab:4e:79:0c:58:76:03:1b:d2:
dc:ed:51:e5:6d:93:bd:74:f5:32:e3:06:84:d7:50:
dc:c2:d5:35:ba:a3:ee:7c:7d:f8:58:39:7a:11:78:
8f:22:21:dc:ca:f5:9f:18:2d:d1:04:61:ad:6c:9f:
57:21:13:8c:13:18:75:e3:ba:ba:27:00:dd:fd:33:
1f:c1:97:7e:23:ad:0d:da:e4:1c:dc:e8:93:5a:92:
ff:aa:45:4b:42:c3:2d:c0:87:9b:bd:97:0a:c3:f3:
db:7b:20:61:47:ce:b3:dc:33:79:99:0b:ac:ac:18:
98:93:9f:6b:fb:b4:97:5c:5f:f0:76:6c:48:c2:b0:
07:d3:50:bd:71:b4:c3:36:08:a1:ab:7c:29:ea:dd:
2c:9f:f3:09:90:31:31:1f:b3:67:21:14:1c:31:75:
97:b9:3f:03:52:c7:7a:55:71:ff:49:dc:21:5d:8a:
e8:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:ED:EB:98:13:D9:69:DC:2C:5B:D1:AF:A1:B3:FD:23:27:6C:D4:89
X509v3 Authority Key Identifier:
keyid:E5:BC:FC:10:77:CF:87:68:88:FB:6C:75:B2:E3:94:92:32:05:F3:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5bz8EHfPh2iI-2x1suOUkjIF87U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e05e77-12ae-4f59-9491-cadd1129c98d/1/6O3rmBPZadwsW9GvobP9Iyds1Ik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e05e77-12ae-4f59-9491-cadd1129c98d/1/5bz8EHfPh2iI-2x1suOUkjIF87U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.57.0/24
176.116.118.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:32:58:3a:ed:19:2a:4b:2a:49:40:1f:a6:41:a1:ca:30:92:
dd:c8:b4:40:75:67:27:28:33:fc:47:25:cf:06:a6:58:3a:ae:
1d:90:f7:60:70:ea:41:eb:62:9e:fa:83:73:43:06:e0:1a:85:
27:fe:bd:c0:22:2f:3b:dc:f4:c8:60:79:4f:64:9e:7f:f1:e1:
6c:a2:30:de:e5:c5:c0:b1:82:bd:80:ef:8d:da:fd:42:79:f1:
9d:76:a1:d6:f9:c3:96:be:4e:f7:fb:6a:9a:83:bd:53:c3:2c:
4e:84:96:c7:75:6f:7c:e0:54:1f:f7:9f:af:92:b5:a5:63:24:
ed:38:43:25:17:a4:74:e1:32:eb:54:46:ae:9a:bf:04:7f:c1:
6c:a4:c4:9d:05:d2:25:49:10:db:d1:82:df:58:fe:5a:5a:f3:
19:82:46:a3:b6:d1:0d:0f:a2:68:06:76:95:64:ba:d6:4e:21:
8f:c3:ae:0c:d4:fb:7a:e0:71:d6:3d:e3:71:1b:91:33:b4:69:
8d:55:ed:1b:4f:84:64:fb:5c:ce:b3:51:fc:b4:db:f6:e9:14:
7b:00:34:40:c4:76:13:4e:de:e2:bb:5e:1f:26:db:d6:a8:65:
d9:ac:aa:f9:11:5e:a8:0c:9b:cb:48:76:b4:89:e9:b1:cf:65:
30:bb:fa:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:06 2024 by rpki-client on console-fra.rpki-client.org