Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/LDTTbxN4u1ebnRuvGFQtdS-drOk.roa
File: LDTTbxN4u1ebnRuvGFQtdS-drOk.roa (raw, json)
Hash identifier: 5tb+FLQL3xEy+Tr+fkPG6q3pa75nb6/UTdB3xQzKMtA=
Subject key identifier: 2C:34:D3:6F:13:78:BB:57:9B:9D:1B:AF:18:54:2D:75:2F:9D:AC:E9
Certificate issuer: /CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Certificate serial: 018C7C43C91993C21B5CD47A69DEFAC8614C
Authority key identifier: 08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/LDTTbxN4u1ebnRuvGFQtdS-drOk.roa
Signing time: Mon 18 Dec 2023 09:31:06 +0000
ROA not before: Mon 18 Dec 2023 09:31:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211190
IP address blocks: 176.126.123.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:7c:43:c9:19:93:c2:1b:5c:d4:7a:69:de:fa:c8:61:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Validity
Not Before: Dec 18 09:31:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2c34d36f1378bb579b9d1baf18542d752f9dace9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:f2:a7:a8:9c:c2:4f:67:76:12:ee:57:8d:b0:
17:5d:35:63:0b:fc:d8:97:e9:75:97:1f:66:0f:f7:
7f:bb:3e:ff:da:a6:64:de:46:98:d5:75:97:35:3c:
68:a2:02:c4:1d:33:d5:c4:71:6d:e0:56:f8:51:76:
e7:02:75:6e:de:c1:e0:07:07:d3:f4:41:33:38:e3:
9f:6d:98:ba:cb:b6:7b:56:75:45:dc:6e:9e:74:8e:
ef:37:59:ae:07:55:73:65:5c:dd:09:78:df:56:d7:
8a:1f:84:a2:47:29:66:be:60:94:cf:60:78:1c:65:
39:99:2f:2f:d0:99:bf:0f:70:05:c2:24:2d:5b:7d:
16:63:16:e6:11:b6:15:7d:9a:a5:00:57:0e:a8:e6:
4c:36:a8:d5:b2:77:e8:70:24:31:8a:8d:6a:ed:e1:
ba:cd:65:14:de:f1:eb:bb:43:05:b7:12:40:b0:a4:
33:a5:48:ea:70:03:bf:0c:0d:5b:66:fb:8f:eb:af:
b9:d7:84:a0:98:9b:d1:f7:c8:d8:ef:1d:3a:83:8a:
f2:15:60:c4:f7:0c:36:ed:3f:3b:d8:9f:03:b7:ee:
14:52:7c:67:8d:db:2a:2a:7e:62:7c:ce:5f:a9:09:
9c:ec:cf:13:e7:4f:eb:d3:26:13:89:93:ae:fc:3f:
77:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:34:D3:6F:13:78:BB:57:9B:9D:1B:AF:18:54:2D:75:2F:9D:AC:E9
X509v3 Authority Key Identifier:
keyid:08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/LDTTbxN4u1ebnRuvGFQtdS-drOk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.126.123.0/24
Signature Algorithm: sha256WithRSAEncryption
42:92:a8:be:d3:fe:ab:3e:25:f4:03:58:2f:c4:d7:c1:f0:9d:
c3:57:bd:45:25:70:b8:76:05:fa:86:16:60:90:aa:b4:8e:10:
37:38:d0:1c:b3:3b:28:93:17:52:09:d4:f3:a6:ab:ab:ef:48:
53:88:91:03:88:1c:7e:d4:e8:78:29:cf:a2:c5:a3:fc:f0:05:
0a:c8:72:56:0b:09:4f:fb:41:14:6b:16:e1:fe:28:d4:74:a1:
de:9c:a9:76:d5:4f:3c:77:4d:71:bd:e5:ae:e6:97:d1:95:05:
08:2f:b3:12:1a:85:a6:a7:59:6b:fc:72:4d:c9:a1:83:92:11:
8a:02:b6:5d:94:51:c1:4e:f8:01:97:0c:f8:cd:6a:e0:77:0b:
b8:50:5d:9d:55:70:1d:19:48:b1:05:34:ff:2e:20:e0:1e:54:
fd:f3:a7:37:d2:c0:ed:3d:ff:4e:81:42:27:e1:a0:e9:22:00:
7f:08:e8:3e:f6:d1:8d:4d:c9:96:bf:6d:32:7a:ff:dc:d9:1a:
dc:ac:94:d0:8a:63:de:e2:20:cb:75:14:e0:00:ec:c5:5f:f5:
51:de:89:82:3b:32:40:df:e4:70:95:db:39:75:98:d9:fc:63:
55:53:d7:c8:50:37:f8:c3:3f:05:b4:3f:29:09:76:c0:88:02:
0b:08:a3:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:24 2024 by rpki-client on console-fra.rpki-client.org