Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/2171be-b083-479b-a580-6a06b7502bd7/1/nEuNWUpsrDixD7OTBjhSHzUG6Cs.roa
File: nEuNWUpsrDixD7OTBjhSHzUG6Cs.roa (raw, json)
Hash identifier: rGyRsmkdvl0GJZa9xWCSkSHw9xxYV8662/HjE8mii1A=
Subject key identifier: 9C:4B:8D:59:4A:6C:AC:38:B1:0F:B3:93:06:38:52:1F:35:06:E8:2B
Certificate issuer: /CN=37ed49efac9795987771acdc77a0e228904277ad
Certificate serial: 01889595F2214CDE01CE31DCD04C77C07178
Authority key identifier: 37:ED:49:EF:AC:97:95:98:77:71:AC:DC:77:A0:E2:28:90:42:77:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N-1J76yXlZh3cazcd6DiKJBCd60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/2171be-b083-479b-a580-6a06b7502bd7/1/nEuNWUpsrDixD7OTBjhSHzUG6Cs.roa
Signing time: Wed 07 Jun 2023 11:20:11 +0000
ROA not before: Wed 07 Jun 2023 11:20:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57043
IP address blocks: 178.130.131.0/24 maxlen: 24
109.172.80.0/24 maxlen: 24
109.172.81.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:95:95:f2:21:4c:de:01:ce:31:dc:d0:4c:77:c0:71:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37ed49efac9795987771acdc77a0e228904277ad
Validity
Not Before: Jun 7 11:20:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9c4b8d594a6cac38b10fb3930638521f3506e82b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:2f:16:24:c1:11:04:1e:30:36:3a:1e:9b:67:
44:2e:78:cd:a4:42:63:51:23:5a:0e:c9:ce:c5:0c:
34:77:da:6a:c2:b1:6f:5c:ec:15:e3:27:1b:40:97:
92:37:df:af:5b:fe:f4:bb:3e:16:56:de:08:40:36:
9c:40:94:04:0f:e6:81:b8:50:7f:76:54:02:ab:44:
b7:92:93:99:d4:c7:6d:54:17:14:43:35:32:5c:73:
d2:09:67:6e:5c:a9:28:ca:58:ac:01:00:b3:1e:45:
d1:49:d0:af:97:62:0a:b0:94:36:33:4e:7e:93:ad:
a3:e3:4f:8e:31:fb:c5:a4:31:4f:90:0e:c8:50:b1:
29:22:9a:4d:e4:0b:c6:e4:2c:12:c3:7c:00:75:be:
24:c5:4c:0d:55:cf:5d:3f:66:53:f5:4f:ce:d7:0d:
90:57:5a:d8:5d:4d:1b:c4:83:08:f9:8e:12:20:d2:
91:b1:38:75:8a:8f:ce:47:56:87:9e:8d:63:ca:bd:
35:d0:60:b5:61:1e:37:25:cd:dc:19:ae:f7:71:c7:
12:67:82:15:86:7b:ea:6f:67:1b:da:9f:91:8c:a8:
d6:a0:09:92:ae:4f:9f:45:7a:ac:f7:70:60:9e:be:
ea:93:74:44:75:6e:3e:44:83:1f:27:a8:a7:f9:98:
3b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:4B:8D:59:4A:6C:AC:38:B1:0F:B3:93:06:38:52:1F:35:06:E8:2B
X509v3 Authority Key Identifier:
keyid:37:ED:49:EF:AC:97:95:98:77:71:AC:DC:77:A0:E2:28:90:42:77:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N-1J76yXlZh3cazcd6DiKJBCd60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/2171be-b083-479b-a580-6a06b7502bd7/1/nEuNWUpsrDixD7OTBjhSHzUG6Cs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/2171be-b083-479b-a580-6a06b7502bd7/1/N-1J76yXlZh3cazcd6DiKJBCd60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.172.80.0/23
178.130.131.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:5a:5f:8a:b6:02:57:28:9b:7a:69:d8:e1:27:e9:c5:27:a7:
9e:f3:48:8a:a2:0c:c2:43:ef:46:2e:0a:95:19:10:4a:f1:8b:
3d:3e:18:3e:0e:6c:80:40:70:6b:ce:73:5a:53:b2:9e:34:50:
ca:8b:2a:5a:0a:88:84:0d:d4:96:47:20:5b:97:9a:f0:15:03:
6f:d8:3d:f4:da:5c:83:77:84:ff:6a:a3:a7:12:ef:8a:4c:48:
7e:52:9e:54:dd:3e:1c:a7:6f:3c:c5:7e:fe:c7:97:a1:79:8b:
35:23:d6:88:1b:67:33:84:8c:32:f6:a4:64:7d:00:b9:b1:a7:
5a:e5:bb:7c:d7:24:bf:62:6c:16:5a:2b:33:13:8f:1e:48:13:
f8:28:db:ba:e2:38:dd:a2:f7:0e:27:61:16:2d:64:1e:bc:de:
9c:3d:b6:c3:9a:cc:fb:83:bb:71:b5:10:e5:8a:06:15:8a:dd:
a5:e0:39:ac:47:e0:6d:f4:7c:7f:fa:93:20:f4:3b:71:b0:2f:
f1:69:6f:1b:66:70:62:ef:7a:4b:5f:ae:b0:56:6a:a9:78:d5:
d2:25:6a:e4:90:19:44:73:53:0c:ad:0c:25:54:13:13:8e:ed:
8b:16:71:50:59:b0:2b:47:88:56:d9:65:b3:1b:4e:63:c7:a6:
43:84:2f:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:09 2024 by rpki-client on console-fra.rpki-client.org