Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/1-TB_j0XTMB9N0FM1hryU6gi8djE.roa
File: 1-TB_j0XTMB9N0FM1hryU6gi8djE.roa (raw, json)
Hash identifier: etXaIZ9FD/XWnY80noz+FlqlWZ8JNfqiNNqrxt+DFe8=
Subject key identifier: F9:30:7F:8F:45:D3:30:1F:4D:D0:53:35:86:BC:94:EA:08:BC:76:31
Certificate issuer: /CN=260b2bc45477c81d774daa0c28ab44b774ba0920
Certificate serial: 018E9EDFD3C5E3E1409FCACD17B797CEABA2
Authority key identifier: 26:0B:2B:C4:54:77:C8:1D:77:4D:AA:0C:28:AB:44:B7:74:BA:09:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JgsrxFR3yB13TaoMKKtEt3S6CSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/1-TB_j0XTMB9N0FM1hryU6gi8djE.roa
Signing time: Tue 02 Apr 2024 12:54:12 +0000
ROA not before: Tue 02 Apr 2024 12:54:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202656
IP address blocks: 176.116.2.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:9e:df:d3:c5:e3:e1:40:9f:ca:cd:17:b7:97:ce:ab:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=260b2bc45477c81d774daa0c28ab44b774ba0920
Validity
Not Before: Apr 2 12:54:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f9307f8f45d3301f4dd0533586bc94ea08bc7631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d2:76:dd:fc:30:ad:49:20:32:72:90:7b:74:
6e:48:b6:63:40:6d:60:dd:b2:35:79:fd:83:29:d1:
e8:ab:07:ac:bf:ee:a3:ab:ec:62:2c:97:15:4b:24:
6a:60:ad:c1:8a:36:ae:eb:dc:d4:5e:83:b7:47:c2:
d0:df:9d:be:29:d8:8a:f2:92:e5:7f:ad:e0:38:8c:
41:c7:ed:45:76:c2:65:20:be:aa:ce:34:e0:6c:5a:
98:43:06:f4:13:52:81:12:2b:3b:55:5f:a6:28:b0:
f3:fc:74:0e:c8:1e:8f:c8:9c:5e:7f:3e:af:44:60:
c7:09:5b:9c:fe:13:33:02:c7:ce:d5:59:59:c0:de:
d5:bf:b2:07:31:ca:98:31:63:3b:87:1d:09:2b:fb:
01:b0:85:7d:93:f4:96:bb:6f:b5:9f:4b:b2:cf:07:
e1:55:bf:1d:e0:40:4c:43:df:1a:3e:5f:b7:f6:4d:
51:a0:cc:91:2a:b8:83:35:f5:4a:b3:17:65:fe:24:
0a:dc:b6:c3:eb:44:8f:4b:07:45:3d:28:81:cf:ba:
e9:6e:55:e0:17:2a:85:90:c1:01:b2:36:17:52:26:
6f:2d:37:75:81:5f:1c:54:b9:15:c5:92:d7:f8:fc:
ac:9e:23:7c:69:b7:75:96:5b:08:20:60:1e:5f:b9:
fa:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:30:7F:8F:45:D3:30:1F:4D:D0:53:35:86:BC:94:EA:08:BC:76:31
X509v3 Authority Key Identifier:
keyid:26:0B:2B:C4:54:77:C8:1D:77:4D:AA:0C:28:AB:44:B7:74:BA:09:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JgsrxFR3yB13TaoMKKtEt3S6CSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/1-TB_j0XTMB9N0FM1hryU6gi8djE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/JgsrxFR3yB13TaoMKKtEt3S6CSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.116.2.0/24
Signature Algorithm: sha256WithRSAEncryption
65:a9:c4:0e:5f:85:b5:ca:67:4e:6a:d0:a5:4e:88:e8:eb:24:
13:bf:24:81:0a:e5:89:a8:e1:3e:55:17:63:fd:cd:1a:07:56:
ca:ce:c1:74:87:1b:06:25:91:17:76:44:e4:8b:3f:21:03:93:
f8:a0:a6:b9:7d:d7:88:5a:73:c3:93:f5:15:b2:0c:ee:3b:c4:
a4:42:68:61:0d:07:27:76:3b:85:c3:4d:13:6b:8f:82:27:82:
fa:16:e0:9b:95:1e:e9:67:b2:7d:09:44:52:cf:6f:5e:1f:cc:
d5:fd:e6:f6:46:b5:89:c3:76:4d:70:8d:e9:e1:84:dd:4d:b0:
35:72:6d:6a:dd:fa:70:6d:a6:b2:37:5e:70:73:92:df:69:60:
84:42:9d:97:11:c6:9e:aa:ee:a0:81:0f:59:59:05:d7:f1:6a:
5a:c3:63:11:75:1b:84:b7:b8:87:fb:03:5d:20:01:53:f2:44:
17:5b:ef:9a:a5:52:17:53:f8:2d:c3:99:47:fc:74:9e:c0:e6:
c7:59:2a:81:ef:d6:45:f7:5d:9c:f5:03:42:70:57:c2:11:93:
54:a1:ef:5e:34:14:15:99:47:56:7e:f4:e1:1b:dc:f5:b6:30:
d2:55:a8:d3:54:ef:76:f8:a9:dd:52:24:0c:2a:77:e2:9e:e8:
10:8a:70:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:02 2024 by rpki-client on console-fra.rpki-client.org