Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/ebacbd-8190-4e5a-a03a-cd439492b7ae/1/DxncS9vgTcDAC7ocvxM-MrN3dpA.roa
File: DxncS9vgTcDAC7ocvxM-MrN3dpA.roa (raw, json)
Hash identifier: FRhGxGuj6mQE15khhPdmy4gF2Yf4mCoyDKbakDHoVpM=
Subject key identifier: 0F:19:DC:4B:DB:E0:4D:C0:C0:0B:BA:1C:BF:13:3E:32:B3:77:76:90
Certificate issuer: /CN=6811e125cb357076f2fa3138c93e9a2681b17893
Certificate serial: 01856F429F705E1619DEB0ED81BA28DCEB61
Authority key identifier: 68:11:E1:25:CB:35:70:76:F2:FA:31:38:C9:3E:9A:26:81:B1:78:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aBHhJcs1cHby-jE4yT6aJoGxeJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/ebacbd-8190-4e5a-a03a-cd439492b7ae/1/DxncS9vgTcDAC7ocvxM-MrN3dpA.roa
Signing time: Sun 01 Jan 2023 21:35:15 +0000
ROA not before: Sun 01 Jan 2023 21:35:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15570
IP address blocks: 77.242.200.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:9f:70:5e:16:19:de:b0:ed:81:ba:28:dc:eb:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6811e125cb357076f2fa3138c93e9a2681b17893
Validity
Not Before: Jan 1 21:35:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0f19dc4bdbe04dc0c00bba1cbf133e32b3777690
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c9:d3:90:7b:e4:0b:f5:5c:3a:b2:45:26:d4:
b9:82:ae:92:ab:ed:b0:56:27:75:27:b4:d2:57:82:
c1:75:0a:61:72:11:38:07:d9:d2:74:d5:32:29:aa:
6b:cf:9f:98:0d:3e:f6:d6:03:1b:9f:a4:a7:1f:08:
de:f6:39:49:43:a4:6a:b4:72:d9:ec:0f:14:0c:88:
be:f6:1b:b8:d8:1a:23:0d:ff:70:20:30:42:69:96:
6e:bb:c0:3a:32:9d:db:5c:97:bc:c9:f5:dc:ba:1c:
4a:12:0a:70:bd:6a:da:2c:c6:ee:1d:ce:87:cf:1f:
2e:89:5d:92:40:f9:96:dc:1b:69:4f:46:98:9e:c1:
cb:79:43:5e:73:c8:86:5a:cb:a8:07:bc:ad:90:1e:
2c:bd:0c:51:56:9c:52:04:87:b7:60:ab:53:b4:42:
d3:53:71:ea:81:36:1d:36:c6:ec:78:38:d9:b3:e9:
d1:a5:02:22:31:10:59:99:8b:70:a6:ea:45:d6:a7:
c5:93:b8:53:82:77:2f:f1:cb:ea:0b:39:29:b2:27:
e6:b5:b3:43:47:b2:f1:e9:96:f6:39:b3:f3:3d:90:
fc:46:61:2f:0d:57:a9:c3:9f:e3:96:14:3d:bb:1e:
b1:ac:ec:90:40:b7:05:63:1a:47:96:bc:47:bc:33:
44:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:19:DC:4B:DB:E0:4D:C0:C0:0B:BA:1C:BF:13:3E:32:B3:77:76:90
X509v3 Authority Key Identifier:
keyid:68:11:E1:25:CB:35:70:76:F2:FA:31:38:C9:3E:9A:26:81:B1:78:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aBHhJcs1cHby-jE4yT6aJoGxeJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ebacbd-8190-4e5a-a03a-cd439492b7ae/1/DxncS9vgTcDAC7ocvxM-MrN3dpA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ebacbd-8190-4e5a-a03a-cd439492b7ae/1/aBHhJcs1cHby-jE4yT6aJoGxeJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.242.200.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:57:03:d2:73:d6:2f:22:cb:d3:53:18:f7:ef:4b:e9:56:a6:
a2:3d:c0:4c:f6:7c:05:44:9a:62:e3:0d:4a:02:82:cb:45:10:
27:81:0f:94:2e:1e:dd:4b:83:dc:b6:4f:4d:09:25:e6:be:38:
ab:92:78:0c:70:21:d2:b4:07:d5:f3:2f:22:83:a7:11:05:5b:
48:58:b8:22:df:d8:07:05:d1:69:aa:9f:d1:aa:26:f7:27:43:
04:59:34:58:fe:7b:5b:93:f9:57:c0:0d:8e:49:96:5e:21:db:
53:7a:46:89:06:fa:75:64:da:87:17:c4:6e:99:57:ee:f8:d0:
6b:f8:5b:d7:16:d0:ae:ec:b2:c4:52:52:1c:ee:b3:8e:97:b1:
99:a4:e3:87:ab:c9:f2:81:89:06:5d:b9:16:d3:83:0c:47:0e:
32:90:93:35:53:f6:92:09:73:7a:84:32:5d:bb:f8:e5:78:db:
fb:ce:98:ff:20:48:d1:a2:db:57:37:49:2d:fd:4e:75:ce:34:
07:88:18:b5:01:f4:bd:76:64:9b:ed:43:d9:c4:71:04:2e:c5:
00:dd:48:c7:b8:1d:e6:1d:13:b3:1c:f5:1b:7a:46:6b:07:da:
61:db:9b:5c:87:1c:fd:32:74:f8:e2:24:8f:d8:92:8c:e5:2a:
30:3e:f0:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:43 2024 by rpki-client on console-fra.rpki-client.org