Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/e05e77-12ae-4f59-9491-cadd1129c98d/1/_MOimMwimeMOWoCT76dV49ONy4Q.roa
File: _MOimMwimeMOWoCT76dV49ONy4Q.roa (raw, json)
Hash identifier: Yj4SorL3Sp11qA2PKUPrgTaTHkhIlSTO8c9d6Bgd4Rc=
Subject key identifier: FC:C3:A2:98:CC:22:99:E3:0E:5A:80:93:EF:A7:55:E3:D3:8D:CB:84
Certificate issuer: /CN=e5bcfc1077cf876888fb6c75b2e394923205f3b5
Certificate serial: 01856E5D6004EEF628ED2F44142CAB6A1AA0
Authority key identifier: E5:BC:FC:10:77:CF:87:68:88:FB:6C:75:B2:E3:94:92:32:05:F3:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5bz8EHfPh2iI-2x1suOUkjIF87U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/e05e77-12ae-4f59-9491-cadd1129c98d/1/_MOimMwimeMOWoCT76dV49ONy4Q.roa
Signing time: Sun 01 Jan 2023 17:24:51 +0000
ROA not before: Sun 01 Jan 2023 17:24:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3356
IP address blocks: 176.116.116.0/23 maxlen: 23
176.116.116.0/24 maxlen: 24
176.116.117.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:5d:60:04:ee:f6:28:ed:2f:44:14:2c:ab:6a:1a:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5bcfc1077cf876888fb6c75b2e394923205f3b5
Validity
Not Before: Jan 1 17:24:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fcc3a298cc2299e30e5a8093efa755e3d38dcb84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:57:01:d7:ab:7f:b4:5c:e0:d6:b9:a3:45:0e:
a1:91:36:c6:25:dc:d3:c8:40:c9:fd:2f:03:b5:23:
4a:a9:09:3b:8f:3a:8e:c7:fc:db:e4:89:44:c2:68:
1e:1a:62:8e:e7:2c:47:a3:90:22:f8:21:0c:07:1c:
c8:97:a9:36:8b:c9:81:17:d5:3f:74:30:d6:e5:5d:
ae:04:e6:8f:57:05:ef:0d:46:7c:2e:fe:7c:d1:86:
fa:42:79:6b:e8:94:f3:b0:63:1f:33:b3:9f:67:b2:
14:85:5d:c1:50:ad:73:a2:14:01:f1:24:eb:de:ae:
8b:be:9a:8c:b1:70:bf:6b:b8:50:38:0b:a6:b5:ba:
a5:d5:5c:78:cb:37:a0:da:78:25:69:5c:cc:05:63:
17:06:17:d2:99:41:09:09:87:58:52:58:02:7c:17:
76:cd:be:9c:c2:30:f1:b1:3e:59:b9:3c:e9:90:1c:
b0:61:a2:30:5e:6e:5c:aa:48:fe:6e:41:ea:98:4a:
e1:fa:0a:70:35:7d:8c:98:8d:cb:bf:30:8c:a6:6a:
6b:ec:f5:2b:e7:7e:d5:d7:4a:23:95:7e:5e:a5:f3:
14:a3:86:06:a5:ca:ab:f4:5d:4e:4b:cb:ec:29:29:
eb:99:2c:26:ef:a2:bb:67:f0:fe:22:bb:5d:ea:6c:
60:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:C3:A2:98:CC:22:99:E3:0E:5A:80:93:EF:A7:55:E3:D3:8D:CB:84
X509v3 Authority Key Identifier:
keyid:E5:BC:FC:10:77:CF:87:68:88:FB:6C:75:B2:E3:94:92:32:05:F3:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5bz8EHfPh2iI-2x1suOUkjIF87U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e05e77-12ae-4f59-9491-cadd1129c98d/1/_MOimMwimeMOWoCT76dV49ONy4Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e05e77-12ae-4f59-9491-cadd1129c98d/1/5bz8EHfPh2iI-2x1suOUkjIF87U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.116.116.0/23
Signature Algorithm: sha256WithRSAEncryption
6a:49:f5:6d:fb:1e:8e:75:28:79:22:96:f5:6a:4b:b0:50:0d:
23:f0:81:e1:12:fb:3c:f9:5c:1f:9b:7c:74:c1:1a:2c:68:fc:
2d:bf:cc:37:d5:32:db:68:f8:e3:3d:3f:58:4f:ee:1f:20:34:
bd:53:94:4e:64:ad:fe:b9:8a:27:b1:57:ed:2e:fe:52:c6:a6:
46:7b:1c:9b:eb:e7:8c:f0:b6:5b:8d:40:df:ec:14:93:66:76:
dd:02:0b:d6:a8:15:0b:d4:eb:f0:27:ab:6e:30:19:65:e7:3f:
7a:68:65:d9:c6:51:d6:d0:eb:59:15:84:7e:0c:67:6a:27:e9:
f2:d1:65:d1:1c:00:d4:fc:0c:cb:ee:67:f0:1f:4f:88:db:5c:
c5:c8:60:c4:23:13:d5:a1:0d:29:39:82:ed:ea:2a:ed:c3:b2:
3f:5e:4a:fc:47:14:eb:70:5f:9c:2f:b1:5a:ad:2a:24:9f:a9:
32:22:af:46:16:db:c3:79:c3:e9:5c:00:55:cf:31:53:9e:f4:
38:11:f0:54:88:ba:8f:1c:08:f8:c4:05:92:5a:fb:7c:37:b4:
e6:ff:18:9e:a9:94:6c:78:8d:11:65:ae:61:3f:54:4b:da:86:
11:fc:3c:98:70:66:40:97:59:e1:9a:e6:b1:dd:fd:52:97:cf:
72:39:a2:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:06 2024 by rpki-client on console-fra.rpki-client.org