Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/635511-71f3-4f57-9139-7da3cd253bf6/1/26oV3iDcemG1lju-B-9MuPWdUKM.roa
File: 26oV3iDcemG1lju-B-9MuPWdUKM.roa (raw, json)
Hash identifier: ctwQqOpG3p1Evaq2qX8f5URCS0+ZrXWDkxRlkX2bhGs=
Subject key identifier: DB:AA:15:DE:20:DC:7A:61:B5:96:3B:BE:07:EF:4C:B8:F5:9D:50:A3
Certificate issuer: /CN=e7478550068bf78220408c25d612bc2fb02460c1
Certificate serial: 041C7A
Authority key identifier: E7:47:85:50:06:8B:F7:82:20:40:8C:25:D6:12:BC:2F:B0:24:60:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/50eFUAaL94IgQIwl1hK8L7AkYME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/635511-71f3-4f57-9139-7da3cd253bf6/1/26oV3iDcemG1lju-B-9MuPWdUKM.roa
Signing time: Fri 18 Feb 2022 13:31:03 +0000
ROA not before: Fri 18 Feb 2022 13:31:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16253
IP address blocks: 217.142.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 269434 (0x41c7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7478550068bf78220408c25d612bc2fb02460c1
Validity
Not Before: Feb 18 13:31:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dbaa15de20dc7a61b5963bbe07ef4cb8f59d50a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:36:71:e7:e0:34:64:2e:a8:70:0b:3a:99:88:
91:97:7b:20:08:ed:b3:61:70:17:c8:04:d3:a6:ab:
96:27:6a:26:5d:01:cf:ac:c8:2f:1a:e1:07:58:cb:
1d:99:2a:f9:6d:9d:da:0e:72:c0:e6:8a:9c:ec:78:
47:4a:a9:41:59:da:16:d1:cc:3c:40:7d:ea:4f:a8:
0c:b2:b7:3d:7e:18:66:ba:94:7e:5a:23:f2:67:71:
b4:b3:b9:be:9e:63:56:e0:5e:74:65:a8:78:be:52:
ea:40:62:c6:16:11:24:45:4a:5e:98:83:d4:5b:58:
e2:6c:e3:36:cf:7b:7f:d3:76:b2:20:f2:39:82:14:
9c:7c:80:39:ee:0f:78:e5:f1:dd:2d:cb:14:54:77:
27:ee:12:5e:df:f0:5f:97:a0:ad:53:b1:77:f1:04:
b3:23:15:eb:df:06:0e:ba:2d:ee:a3:4e:c2:b6:dc:
6d:9d:4c:72:4b:ae:c7:27:46:52:b5:23:2e:76:34:
68:4d:1c:83:b3:25:39:63:37:1c:53:1f:5c:8e:4f:
71:fa:7b:47:83:52:01:2b:06:b3:fc:ac:5e:b2:db:
a4:68:9b:fb:a8:88:41:72:c5:04:c1:43:e0:de:3c:
3c:23:50:6c:05:98:4e:1c:58:02:3e:a4:08:03:5f:
82:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:AA:15:DE:20:DC:7A:61:B5:96:3B:BE:07:EF:4C:B8:F5:9D:50:A3
X509v3 Authority Key Identifier:
keyid:E7:47:85:50:06:8B:F7:82:20:40:8C:25:D6:12:BC:2F:B0:24:60:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/50eFUAaL94IgQIwl1hK8L7AkYME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/635511-71f3-4f57-9139-7da3cd253bf6/1/26oV3iDcemG1lju-B-9MuPWdUKM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/635511-71f3-4f57-9139-7da3cd253bf6/1/50eFUAaL94IgQIwl1hK8L7AkYME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.142.0.0/16
Signature Algorithm: sha256WithRSAEncryption
12:66:59:55:90:4f:f1:7c:a2:87:06:29:cf:03:96:48:f9:e2:
77:6c:bc:d7:b6:05:d2:ee:45:b9:7f:e8:8f:d9:e2:31:6b:c1:
e3:96:59:ed:57:0e:fc:83:20:8b:e6:ba:12:59:ea:28:42:2a:
5a:8d:28:1b:a6:d9:ec:8c:af:cf:3a:3a:4c:91:d7:44:8e:9d:
60:28:f0:6b:21:39:9d:b3:d3:79:f2:9d:07:ce:db:e7:6b:5a:
f2:96:14:c3:f6:82:6d:9d:e3:79:44:d7:70:77:de:74:a4:59:
71:82:88:01:fa:aa:0d:24:59:0b:98:35:f7:c5:98:2a:0d:6a:
fb:b0:7c:9b:e9:30:49:2c:87:02:6c:d0:7b:15:22:84:71:51:
8c:7a:99:d2:55:ba:a4:83:0a:a5:85:2f:5e:c6:f8:c8:64:b8:
51:ce:90:92:97:fc:e9:26:99:f2:37:af:fb:6d:49:76:00:54:
13:20:cf:23:12:9e:99:85:5f:78:b7:c5:80:dc:3c:2b:a0:89:
f9:4f:16:99:a9:d8:a7:37:30:58:ae:d1:fb:85:c2:48:b8:01:
dc:13:a6:2f:5a:e1:db:0c:7f:7e:29:bb:a4:e7:c5:e3:24:29:
fd:2d:5f:86:7f:98:ef:fc:88:7e:32:6f:3b:74:dd:52:01:e3:
3b:8c:ba:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:59 2024 by rpki-client on console-ams.rpki-client.org