Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/AEsEYC4ZbAUF3UrjLh9pjnuxvi4.roa
File: AEsEYC4ZbAUF3UrjLh9pjnuxvi4.roa (raw, json)
Hash identifier: GNHTo1va47vIVcdwcPmOACrWMQ8IEVYNyjCkB2KbOtU=
Subject key identifier: 00:4B:04:60:2E:19:6C:05:05:DD:4A:E3:2E:1F:69:8E:7B:B1:BE:2E
Certificate issuer: /CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Certificate serial: 05B07809
Authority key identifier: CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/AEsEYC4ZbAUF3UrjLh9pjnuxvi4.roa
Signing time: Sat 01 Jan 2022 07:57:12 +0000
ROA not before: Sat 01 Jan 2022 07:57:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50308
IP address blocks: 77.83.150.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95451145 (0x5b07809)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Validity
Not Before: Jan 1 07:57:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=004b04602e196c0505dd4ae32e1f698e7bb1be2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:3e:c8:f2:b2:6e:3c:80:20:d4:56:f2:7b:7e:
a9:b4:3a:78:80:0c:b5:db:2d:73:8f:39:af:6a:c6:
c1:c7:5e:07:94:08:ff:46:da:d1:9d:2a:b6:c1:a1:
f2:0d:87:0e:91:4e:ba:b1:35:e7:8a:f8:7f:56:ca:
02:4c:ea:12:80:c8:02:b4:89:69:4e:70:ab:df:07:
70:95:3a:94:e3:ef:a6:59:59:92:97:b1:53:91:f0:
d7:b9:9f:71:cd:fd:fd:f9:11:07:09:03:c9:45:9c:
43:dd:f9:2d:e7:11:67:91:b7:ee:fb:26:fc:4e:39:
45:9c:5f:4a:87:93:ff:ea:8b:5b:84:63:0a:2d:fa:
7c:a2:1a:f7:37:73:71:49:57:88:27:9e:83:da:67:
4c:31:1f:66:6b:44:ed:91:76:66:77:6e:5c:26:d5:
8b:3a:57:76:90:df:14:7d:5d:53:5d:93:a6:54:91:
51:3b:dc:83:fa:bb:a7:76:b9:a0:96:2b:cc:b9:be:
02:ce:97:70:25:41:f5:d6:92:1d:a0:c5:98:b5:8d:
f0:9a:be:1c:ae:a4:5a:f6:4e:59:47:f6:b4:2d:bf:
e7:04:07:10:1e:83:9c:91:36:f0:9d:02:6b:65:2f:
b1:5c:5b:2e:dc:18:bb:1e:3e:eb:9d:3d:9d:c8:0e:
57:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:4B:04:60:2E:19:6C:05:05:DD:4A:E3:2E:1F:69:8E:7B:B1:BE:2E
X509v3 Authority Key Identifier:
keyid:CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/AEsEYC4ZbAUF3UrjLh9pjnuxvi4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.150.0/24
Signature Algorithm: sha256WithRSAEncryption
70:bd:64:ad:00:9a:fd:0a:a3:02:5b:ae:ea:2d:89:21:ab:50:
b0:3e:2c:70:dc:a1:1d:98:fc:5a:b6:62:be:1e:5f:0c:be:d5:
bb:a9:42:60:96:ab:53:1f:fc:b6:1e:fb:58:eb:bf:18:40:6d:
00:57:32:13:97:3f:3f:1e:48:0f:f3:8e:cc:ee:fe:2e:c9:13:
57:c4:28:60:ce:85:28:57:4e:ba:14:19:fd:c0:39:48:e7:de:
ca:f4:01:9e:62:9c:61:8e:c0:12:51:94:4d:9b:36:72:19:3e:
67:24:dd:14:d0:51:f5:73:8b:8e:4a:64:5b:8c:1b:ef:67:47:
e8:59:33:ce:6d:f3:20:38:54:9d:d4:63:62:75:6b:e0:81:e0:
03:0f:7a:7e:d7:04:0d:0e:5b:d2:59:9f:cc:81:5f:09:3a:cc:
0f:19:ad:81:96:04:5e:ac:c6:0d:6b:6d:e3:ef:ef:6c:00:6d:
00:dc:e2:e0:cc:a1:45:6f:57:b6:91:ac:56:f2:d7:24:4b:eb:
34:1f:9a:47:d7:4c:f9:f2:75:fd:37:f7:90:81:71:8d:54:b4:
15:d2:bf:f2:e2:55:06:1a:db:ba:9c:35:75:3f:4f:fc:4d:2a:
78:7d:2f:fb:3d:1d:0b:c5:84:5b:54:2c:2e:5b:78:ce:39:9a:
f4:a8:4e:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:46 2024 by rpki-client on console-ams.rpki-client.org