Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/d582c4-36e3-4a57-8752-e641e713d1fa/1/7Db9ZuWeFkn-o_1_axaExU8D_to.roa
File: 7Db9ZuWeFkn-o_1_axaExU8D_to.roa (raw, json)
Hash identifier: IdVZCITtzod7uLodOuOojj+svHndwRZ54Hs+bQMQ1fw=
Subject key identifier: EC:36:FD:66:E5:9E:16:49:FE:A3:FD:7F:6B:16:84:C5:4F:03:FE:DA
Certificate issuer: /CN=d0299cf12b38ff12d95ffc0d13ac12c69fe2c1ca
Certificate serial: 0184AF9249F5CF22DA17A1EAF21E7B9D27A6
Authority key identifier: D0:29:9C:F1:2B:38:FF:12:D9:5F:FC:0D:13:AC:12:C6:9F:E2:C1:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Cmc8Ss4_xLZX_wNE6wSxp_iwco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/d582c4-36e3-4a57-8752-e641e713d1fa/1/7Db9ZuWeFkn-o_1_axaExU8D_to.roa
Signing time: Fri 25 Nov 2022 16:15:10 +0000
ROA not before: Fri 25 Nov 2022 16:15:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59956
IP address blocks: 176.117.76.0/22 maxlen: 22
176.117.80.0/22 maxlen: 22
176.117.84.0/22 maxlen: 22
176.117.88.0/22 maxlen: 22
176.117.92.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:af:92:49:f5:cf:22:da:17:a1:ea:f2:1e:7b:9d:27:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0299cf12b38ff12d95ffc0d13ac12c69fe2c1ca
Validity
Not Before: Nov 25 16:15:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ec36fd66e59e1649fea3fd7f6b1684c54f03feda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:65:42:1a:61:40:4d:39:e0:d2:17:9c:07:7a:
22:61:bf:f4:7b:a0:f2:44:3b:b1:d5:d0:aa:ee:95:
07:db:43:ac:0e:82:f8:3c:3e:f2:37:29:11:92:96:
c7:40:5a:2b:27:90:5c:a9:92:fa:da:e3:93:cb:39:
8e:ac:25:53:9f:39:74:b1:da:02:16:96:45:e3:08:
d4:d9:b0:fa:e2:02:c2:b5:91:15:89:83:ae:b1:50:
7a:51:27:09:40:b0:95:b3:78:1b:c6:5a:05:c1:cf:
4e:58:5c:f1:89:a9:23:b7:ac:eb:6f:a2:0a:af:f9:
a4:11:96:83:af:fb:f7:b2:ba:ec:b8:d7:a3:64:9b:
be:9a:0b:83:cc:5e:c4:60:54:e2:40:bf:b3:e3:ac:
3a:4b:79:73:f3:47:fb:20:03:0a:8d:7c:b9:77:96:
41:48:4d:84:76:e0:03:20:d4:78:61:1f:fa:98:14:
4f:1d:69:c9:c9:fa:fa:1a:e3:99:51:67:8f:d8:21:
07:f1:4e:92:8d:e6:2e:d8:b0:bf:c9:3a:47:95:e9:
39:66:2f:9d:4f:1e:d4:cc:c7:a4:b4:88:28:ab:83:
f8:95:46:b3:cb:08:87:59:7b:ed:13:fb:51:65:12:
ca:fc:f3:a1:89:f5:51:c3:26:a5:e2:35:7b:38:a3:
de:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:36:FD:66:E5:9E:16:49:FE:A3:FD:7F:6B:16:84:C5:4F:03:FE:DA
X509v3 Authority Key Identifier:
keyid:D0:29:9C:F1:2B:38:FF:12:D9:5F:FC:0D:13:AC:12:C6:9F:E2:C1:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Cmc8Ss4_xLZX_wNE6wSxp_iwco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d582c4-36e3-4a57-8752-e641e713d1fa/1/7Db9ZuWeFkn-o_1_axaExU8D_to.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d582c4-36e3-4a57-8752-e641e713d1fa/1/0Cmc8Ss4_xLZX_wNE6wSxp_iwco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.117.76.0-176.117.95.255
Signature Algorithm: sha256WithRSAEncryption
01:0d:45:f9:68:27:86:be:b8:8a:8a:6c:ec:b1:16:f2:b7:d9:
f0:77:6c:9a:ab:d9:aa:35:90:bb:5f:2a:b6:89:6c:57:0d:92:
22:69:8e:c1:55:5b:be:9c:51:51:92:a5:d5:fe:49:ae:c0:7d:
a6:ea:78:e3:2f:67:81:05:f2:5c:a4:60:ec:c7:da:6e:47:cb:
f0:b7:b7:2f:ad:1c:30:25:5d:eb:01:0c:2f:d1:49:ef:de:fb:
10:1d:4c:3c:4f:03:a7:a7:95:47:ac:ff:8b:04:f8:e9:6f:e2:
5b:f2:bb:e8:9e:69:be:10:15:2c:52:37:b9:a5:bc:82:27:10:
2d:91:56:1d:95:f2:fd:c1:51:32:81:eb:c9:f9:fb:0a:8b:70:
8f:a1:a6:78:0f:de:db:38:8e:9c:61:82:75:23:7b:f2:cb:0d:
2c:68:5c:6d:e4:4a:0c:e1:99:6c:3d:ce:13:d2:f8:85:3b:d0:
6e:7e:98:16:f7:00:62:d8:94:fb:80:b6:a9:91:af:0d:13:8e:
3e:b9:5c:6a:4a:60:7e:c1:80:a9:cd:66:71:c7:70:54:a0:20:
3c:16:c2:13:48:10:6d:f0:74:ef:89:43:d4:00:bf:78:bd:33:
62:4c:5e:7e:6b:bc:75:46:3b:b3:df:c5:c8:32:fb:cf:76:a4:
6a:02:31:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:55 2023 by rpki-client on console-fra.rpki-client.org