Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/d3y3FWF4RSS3bHjtVQEaKl86txE.roa
File: d3y3FWF4RSS3bHjtVQEaKl86txE.roa (raw, json)
Hash identifier: D6QNFIbvdm1/UaJ/ZsxDidohTuvCk5P2H3CPO9RyCY4=
Subject key identifier: 77:7C:B7:15:61:78:45:24:B7:6C:78:ED:55:01:1A:2A:5F:3A:B7:11
Certificate issuer: /CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Certificate serial: 01859C01275FACF4E136FDC3AA0593E8A826
Authority key identifier: 05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/d3y3FWF4RSS3bHjtVQEaKl86txE.roa
Signing time: Tue 10 Jan 2023 14:06:39 +0000
ROA not before: Tue 10 Jan 2023 14:06:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 395800
IP address blocks: 194.5.92.0/24 maxlen: 24
109.236.58.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:9c:01:27:5f:ac:f4:e1:36:fd:c3:aa:05:93:e8:a8:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Validity
Not Before: Jan 10 14:06:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=777cb71561784524b76c78ed55011a2a5f3ab711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:fa:6d:f4:c0:c6:d5:6e:8d:d6:65:5f:95:26:
45:78:46:02:e5:d3:b9:be:2c:6f:b0:de:70:3c:51:
7c:59:cb:dd:12:db:77:f7:17:d9:bd:e4:74:6b:3f:
80:df:ea:d6:e8:66:c9:eb:a0:86:31:71:85:75:74:
ae:a6:59:58:18:e9:4a:15:e4:e5:44:d7:73:6b:29:
59:ff:7f:b6:ab:2d:63:d9:19:c6:c6:52:59:dc:53:
e3:c3:ac:40:03:f3:36:2f:87:e3:b7:ad:85:b4:48:
59:36:76:f8:38:5c:92:81:c2:0f:c0:6e:8d:99:fa:
c4:13:d2:12:f7:fd:28:01:2e:fd:d6:92:fd:43:53:
48:b7:8e:8e:ea:87:31:64:8b:4a:f1:58:3a:bf:47:
ed:1c:ce:1f:eb:5b:9c:2d:7d:a2:4b:60:c6:9c:a4:
db:c6:cb:c8:4c:7b:e4:9b:b6:b5:5c:eb:1a:32:93:
4e:55:f9:b8:36:54:95:25:e8:63:4c:e1:15:5c:5e:
b9:56:62:1e:4f:96:3f:4c:7d:e1:43:38:d1:63:d6:
30:7a:25:b4:45:b6:b9:b0:36:91:c7:de:7e:08:ad:
2a:5c:05:02:d5:02:0a:a6:16:27:a0:5b:8e:87:ac:
79:2c:a9:49:ed:83:97:52:59:ca:3b:eb:a3:0a:20:
1a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:7C:B7:15:61:78:45:24:B7:6C:78:ED:55:01:1A:2A:5F:3A:B7:11
X509v3 Authority Key Identifier:
keyid:05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/d3y3FWF4RSS3bHjtVQEaKl86txE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.236.58.0/24
194.5.92.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:ef:61:30:c6:4b:cf:2b:8c:4f:4a:b4:34:27:10:09:5f:8a:
fc:0c:74:d9:db:95:03:9d:c4:63:ca:14:16:d4:2b:94:d9:ca:
8d:8b:cc:e8:09:79:2f:d6:13:1f:e0:2e:de:bd:04:89:df:49:
34:da:44:1a:b0:ad:dc:d9:55:fc:21:98:9d:f3:59:9e:48:82:
a7:39:76:fd:e9:57:ce:0c:df:6b:a7:b4:9c:fe:e7:d0:77:3c:
7a:22:10:c6:5b:cf:93:a7:75:37:24:ab:50:e9:f5:38:3a:03:
b6:42:ba:b5:b0:52:bd:da:f8:34:e4:4f:42:e7:bd:99:c9:2d:
4f:60:7f:c5:84:dc:bf:f1:86:f2:d6:2d:38:91:78:e9:b3:41:
bd:0e:0a:0c:ff:2c:f4:6f:0b:92:ea:55:44:84:02:77:8d:c1:
4d:07:0c:90:a1:b1:38:e7:9d:2c:21:29:a0:34:b9:7a:90:b7:
e8:f1:43:07:4a:a6:e2:e5:85:00:97:c0:e7:6d:e9:76:69:c8:
37:5b:fa:2f:68:29:cf:40:20:b0:fc:5b:9e:0e:f0:e4:2e:74:
ae:b5:99:b7:28:24:2f:70:1a:35:59:49:03:c7:90:64:6c:a7:
42:bc:03:3e:f7:cd:73:53:f2:ba:7d:02:f2:b2:84:61:da:ad:
b1:8e:b9:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:47 2023 by rpki-client on console-ams.rpki-client.org