Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/3L1cdEI17hMYBrptIKOOv1TrJgY.roa
File: 3L1cdEI17hMYBrptIKOOv1TrJgY.roa (raw, json)
Hash identifier: nohHn40kbeQLAUw2GiF52o8ORDGSth6j8YRJBnpCtg0=
Subject key identifier: DC:BD:5C:74:42:35:EE:13:18:06:BA:6D:20:A3:8E:BF:54:EB:26:06
Certificate issuer: /CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Certificate serial: 01882B380F2EA098E9EC17306B42081E1D70
Authority key identifier: CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/3L1cdEI17hMYBrptIKOOv1TrJgY.roa
Signing time: Wed 17 May 2023 19:37:54 +0000
ROA not before: Wed 17 May 2023 19:37:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14576
IP address blocks: 213.166.76.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:2b:38:0f:2e:a0:98:e9:ec:17:30:6b:42:08:1e:1d:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Validity
Not Before: May 17 19:37:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dcbd5c744235ee131806ba6d20a38ebf54eb2606
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:d1:2b:9c:ac:80:7f:04:bd:3e:07:99:10:ec:
56:ff:b1:0d:58:0a:a0:30:88:f4:01:05:ca:b1:b6:
ff:79:b0:f1:e7:0c:e9:21:ca:c2:37:33:0d:3c:e6:
f8:0c:6d:42:bc:f8:39:61:84:c5:c7:db:7f:03:b1:
99:5f:97:b7:de:e5:e6:18:b5:d8:05:23:4a:c2:f3:
72:7b:03:50:9e:81:ac:6f:ab:f4:51:5f:97:00:30:
f5:b5:bd:d1:4f:23:0a:63:ea:ed:88:fb:b6:be:e0:
cb:ed:97:a7:ca:0b:fd:55:20:cb:dd:c4:5b:36:d9:
2a:82:bb:ee:3d:4e:d6:f4:5b:93:56:be:12:7a:8d:
4a:a8:fb:a3:24:30:41:b6:c3:de:07:55:b6:13:c7:
64:32:67:08:29:a6:ff:3b:7f:3e:fb:e5:9e:e7:78:
70:b6:be:24:9a:95:6f:36:57:72:74:44:b6:ee:36:
ae:fa:9c:86:07:fa:7f:7a:87:19:27:03:1a:1e:c6:
20:2c:ff:65:cd:da:97:e2:6e:e8:49:d7:18:6e:3e:
f2:df:64:6b:ef:d4:9b:57:7a:ad:1e:f1:61:6c:ee:
6b:87:15:2c:66:81:13:e1:83:69:41:c5:57:14:74:
0f:d6:44:cf:35:8d:61:63:ea:ae:b2:d7:16:69:92:
ad:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:BD:5C:74:42:35:EE:13:18:06:BA:6D:20:A3:8E:BF:54:EB:26:06
X509v3 Authority Key Identifier:
keyid:CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/3L1cdEI17hMYBrptIKOOv1TrJgY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.166.76.0/22
Signature Algorithm: sha256WithRSAEncryption
34:44:e9:dd:56:f5:6d:74:55:31:64:4e:06:00:53:5a:c5:ac:
67:49:76:5c:3f:22:54:4e:54:35:39:40:b2:bf:f0:b1:cc:b2:
ca:a1:e2:e3:06:14:47:8f:bd:bf:e2:87:d4:ad:e5:d0:5c:e2:
64:04:85:c1:90:c6:f3:f3:53:90:b4:83:77:50:9a:6a:7f:28:
09:ce:4d:c5:5b:29:68:30:9c:d9:cb:49:0f:16:55:22:5b:16:
25:40:d4:7e:41:b7:c3:47:35:f1:ad:d6:80:91:9e:82:14:4e:
8a:5c:db:50:b9:dc:bc:72:e9:d3:c3:69:23:e6:70:95:4d:94:
cd:77:2d:4f:f6:4e:34:3f:b6:50:87:91:d3:7c:cc:07:33:dd:
3a:9f:1c:9e:92:4e:7a:fc:ea:be:e7:54:1f:b7:56:b4:a5:90:
e8:44:8f:c4:70:7f:6c:03:97:7b:bd:5f:58:dc:c5:b2:17:5d:
47:d3:f0:35:06:99:41:2b:0b:32:02:26:15:96:07:65:96:3f:
08:be:ae:ee:bc:f5:17:b2:fc:a4:2e:37:dc:30:7d:bb:7e:0e:
21:a2:2e:9c:0a:a1:e4:4b:52:c7:5b:97:c2:63:ae:94:26:67:
a6:31:3a:cd:f4:28:ee:d0:6d:59:69:08:85:f9:32:c5:e1:cd:
5d:8b:6e:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:17 2024 by rpki-client on console-fra.rpki-client.org