Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/2171be-b083-479b-a580-6a06b7502bd7/1/fgifb8v-36cbDckBmCWPvVfojxU.roa
File: fgifb8v-36cbDckBmCWPvVfojxU.roa (raw, json)
Hash identifier: m4nY5NCmLnlsyxNNQ35Ie0GShAdUt+iZOBHEjQZkhGs=
Subject key identifier: 7E:08:9F:6F:CB:FE:DF:A7:1B:0D:C9:01:98:25:8F:BD:57:E8:8F:15
Certificate issuer: /CN=37ed49efac9795987771acdc77a0e228904277ad
Certificate serial: 01853939EA1EB13B7738CCEA8C97969794C9
Authority key identifier: 37:ED:49:EF:AC:97:95:98:77:71:AC:DC:77:A0:E2:28:90:42:77:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N-1J76yXlZh3cazcd6DiKJBCd60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/2171be-b083-479b-a580-6a06b7502bd7/1/fgifb8v-36cbDckBmCWPvVfojxU.roa
Signing time: Thu 22 Dec 2022 09:46:14 +0000
ROA not before: Thu 22 Dec 2022 09:46:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 996
IP address blocks: 178.130.136.0/21 maxlen: 21
109.172.74.0/23 maxlen: 23
109.172.74.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:39:39:ea:1e:b1:3b:77:38:cc:ea:8c:97:96:97:94:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37ed49efac9795987771acdc77a0e228904277ad
Validity
Not Before: Dec 22 09:46:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7e089f6fcbfedfa71b0dc90198258fbd57e88f15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:52:74:21:d3:36:38:fb:1d:63:40:b6:e4:13:
d7:4e:4c:c4:e6:24:c3:87:0e:f2:e0:ca:9e:65:2f:
02:49:17:7e:50:06:35:e9:b3:df:2c:d5:04:18:43:
61:b5:ae:70:4f:44:a9:57:6a:ec:48:eb:ea:54:78:
4e:36:b9:53:0d:6b:1a:3a:aa:49:18:f4:0c:d4:3f:
e1:9b:7c:f6:6a:8e:d8:f6:3d:92:71:01:36:2b:33:
41:52:3a:1f:fe:1c:b4:5e:c9:96:d0:b7:8e:9e:58:
6d:68:31:6c:a3:ac:bd:aa:38:a3:9e:37:78:06:d4:
e3:b4:63:34:2e:b1:39:b6:b0:d1:d5:5b:54:b7:5f:
91:02:ed:c9:c0:10:04:9a:e9:f2:0d:5a:96:dd:bf:
47:b9:22:f0:62:26:e1:a2:e6:66:db:08:b8:9c:01:
95:8f:67:1f:df:b6:23:22:42:48:b4:1b:6c:e5:78:
c1:d8:ca:ec:7d:b1:8a:5d:98:89:67:24:60:6c:d5:
16:f1:5c:8d:0b:c6:8e:9c:fe:13:bc:e7:93:23:be:
25:cc:fd:60:86:53:90:a7:e8:dc:3f:5b:1c:5b:e4:
0b:b7:de:5c:45:2f:98:95:08:0c:7b:89:86:22:bb:
87:fa:d7:d4:ac:65:4a:b1:47:71:74:90:b3:d3:4c:
a6:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:08:9F:6F:CB:FE:DF:A7:1B:0D:C9:01:98:25:8F:BD:57:E8:8F:15
X509v3 Authority Key Identifier:
keyid:37:ED:49:EF:AC:97:95:98:77:71:AC:DC:77:A0:E2:28:90:42:77:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N-1J76yXlZh3cazcd6DiKJBCd60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/2171be-b083-479b-a580-6a06b7502bd7/1/fgifb8v-36cbDckBmCWPvVfojxU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/2171be-b083-479b-a580-6a06b7502bd7/1/N-1J76yXlZh3cazcd6DiKJBCd60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.172.74.0/23
178.130.136.0/21
Signature Algorithm: sha256WithRSAEncryption
7d:d8:e4:b9:3f:3a:9f:85:9c:0d:ff:a6:81:db:7b:e2:90:95:
60:65:0b:80:ad:5c:89:33:27:c4:43:36:6c:fa:0f:3a:12:a2:
03:4e:a2:c9:36:a8:0a:1a:0e:4d:5c:e5:2d:90:51:4a:d0:00:
c0:ed:b4:b0:ee:42:ba:14:59:74:70:09:0b:5a:8a:a8:41:cf:
9c:db:cd:91:46:e9:13:53:9d:8b:38:61:1d:f0:d4:c7:19:73:
4b:3b:a0:20:9a:34:3a:66:47:e6:c6:1e:0f:91:8e:78:01:7f:
dc:d8:e0:90:4d:31:12:cf:11:df:cc:c9:f1:df:79:c7:94:89:
a2:6d:43:f0:20:77:1a:0d:92:a8:17:b3:c2:bb:2f:ea:18:0a:
a5:15:75:d3:b1:30:a8:64:92:63:38:3a:cc:70:4c:0b:15:cc:
cd:58:86:7a:48:43:37:97:6f:95:bd:ad:78:da:5d:81:0a:cf:
94:f0:27:00:3a:89:eb:dc:5b:25:68:5f:c5:27:e6:4c:6d:99:
d0:03:ca:67:f2:72:8c:45:ea:c4:da:a3:99:ff:ae:96:6f:80:
54:fc:c9:65:62:ee:33:7d:b1:ae:f4:e7:ad:1f:2c:1c:08:51:
d4:c6:8c:f7:2c:73:f2:1a:21:f5:2d:fc:5d:db:99:46:43:f7:
a8:5f:a0:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:09 2024 by rpki-client on console-fra.rpki-client.org