Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/0LjDcpbJoWSJ9TW-qkQF7xSTgks.roa
File: 0LjDcpbJoWSJ9TW-qkQF7xSTgks.roa (raw, json)
Hash identifier: wav9rn/mw2SYXrdDTOyw6LxdyEjPBnfnalD9YVOoOBo=
Subject key identifier: D0:B8:C3:72:96:C9:A1:64:89:F5:35:BE:AA:44:05:EF:14:93:82:4B
Certificate issuer: /CN=d94f238c5c74eb9a75a46e2bc67411e8dc22d982
Certificate serial: 128628E7
Authority key identifier: D9:4F:23:8C:5C:74:EB:9A:75:A4:6E:2B:C6:74:11:E8:DC:22:D9:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2U8jjFx065p1pG4rxnQR6Nwi2YI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/0LjDcpbJoWSJ9TW-qkQF7xSTgks.roa
Signing time: Sat 01 Jan 2022 14:55:35 +0000
ROA not before: Sat 01 Jan 2022 14:55:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15566
IP address blocks: 62.77.131.0/24 maxlen: 24
62.77.128.0/24 maxlen: 24
62.77.130.0/24 maxlen: 24
62.77.128.0/21 maxlen: 21
62.77.132.0/24 maxlen: 24
62.77.129.0/24 maxlen: 24
2a02:2950::/32 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 310782183 (0x128628e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d94f238c5c74eb9a75a46e2bc67411e8dc22d982
Validity
Not Before: Jan 1 14:55:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d0b8c37296c9a16489f535beaa4405ef1493824b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e9:a1:4d:f0:d2:ea:20:aa:bf:c3:fd:a0:14:
46:fe:7a:e7:d4:5d:a4:7e:c2:3b:1b:02:4a:66:68:
45:04:04:95:51:97:df:7c:8f:09:59:7f:75:b2:62:
3f:57:d8:de:e5:b9:d2:67:98:ab:f1:10:54:0b:4f:
c7:ce:40:e2:6b:45:12:f9:da:48:27:f3:da:45:f3:
3c:89:e2:13:fd:3b:fb:fc:00:14:4e:36:64:a9:1a:
15:8a:a7:eb:0a:db:8d:8d:69:11:eb:21:9b:92:91:
8a:76:8c:31:cb:b9:a8:84:1a:78:08:ea:a3:c0:8b:
b3:8d:68:bd:f8:07:5c:6c:dd:75:7a:7d:01:69:61:
94:28:e4:a1:30:e9:e3:15:bf:0e:2e:9e:02:5e:c9:
90:6f:10:04:23:5e:4e:55:b9:46:e0:b9:0e:7e:44:
bd:85:aa:b2:eb:05:d6:a3:dc:01:58:0c:9f:09:5b:
7b:a9:07:eb:80:72:f0:bc:a5:4f:3f:81:f2:25:7e:
bc:0b:60:e1:b6:2e:35:c4:73:6b:d3:07:8c:ed:f1:
8d:c7:12:6d:1e:21:2e:50:c0:92:3f:dd:f1:75:ab:
91:18:01:02:02:14:2f:ce:c4:9d:c3:b2:91:16:b1:
00:81:69:cf:76:69:24:10:22:e2:47:f5:88:e8:a1:
4a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:B8:C3:72:96:C9:A1:64:89:F5:35:BE:AA:44:05:EF:14:93:82:4B
X509v3 Authority Key Identifier:
keyid:D9:4F:23:8C:5C:74:EB:9A:75:A4:6E:2B:C6:74:11:E8:DC:22:D9:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2U8jjFx065p1pG4rxnQR6Nwi2YI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/0LjDcpbJoWSJ9TW-qkQF7xSTgks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.77.128.0/21
IPv6:
2a02:2950::/32
Signature Algorithm: sha256WithRSAEncryption
5b:f9:73:38:ad:2a:3f:cb:a2:a3:f5:8a:4e:3c:38:67:65:b3:
c7:80:d2:f3:5f:8e:c3:36:6f:13:af:25:06:64:cb:d9:61:4f:
e0:b2:9f:69:8a:dc:22:55:cd:6e:00:a6:ee:46:a0:d6:79:9c:
75:ea:10:55:45:9c:10:98:75:83:e9:81:d4:85:49:3a:e7:f4:
43:f7:a6:d5:ff:90:6b:c4:fc:6b:56:82:3c:32:92:ce:76:a4:
c2:61:af:36:e4:92:0f:8e:4d:33:d7:29:32:34:db:53:28:19:
06:fb:5b:3d:cc:b3:d9:1e:7d:97:dd:40:d1:6b:1a:ed:6b:1d:
98:0e:30:9d:c3:b8:1f:ad:6a:fc:e1:25:b2:31:a7:7c:c0:99:
62:21:01:eb:d4:ad:08:66:e8:1a:b1:6e:aa:99:a6:4c:be:59:
4e:14:ce:a3:38:44:6b:62:b9:28:c2:c3:b4:80:27:dc:83:f6:
6a:5d:c8:fd:4e:84:d3:4f:9e:5f:13:33:09:3a:35:b4:e9:c8:
1e:53:c6:59:a7:b0:00:28:f6:1e:de:2e:70:2c:32:79:d6:4f:
01:82:17:f7:7f:9e:7b:67:98:3f:45:72:b6:0a:30:0d:97:a7:
7f:b7:5d:88:51:2b:a3:21:48:a4:62:d5:d0:03:fa:94:ed:ac:
e3:95:c1:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:21:49 2025 by rpki-client