Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/DU2WCz0dR_ePkCntmPMXeo8zcro.roa
File: DU2WCz0dR_ePkCntmPMXeo8zcro.roa (raw, json)
Hash identifier: y1wztmFMzrYb9q4F4B9VFUJOskAkVfknfiY3X+8df24=
Subject key identifier: 0D:4D:96:0B:3D:1D:47:F7:8F:90:29:ED:98:F3:17:7A:8F:33:72:BA
Certificate issuer: /CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Certificate serial: 01869D76BB3252CFBBE61BB416A9074DA9DB
Authority key identifier: CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/DU2WCz0dR_ePkCntmPMXeo8zcro.roa
Signing time: Wed 01 Mar 2023 13:57:29 +0000
ROA not before: Wed 01 Mar 2023 13:57:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44477
IP address blocks: 212.107.27.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:9d:76:bb:32:52:cf:bb:e6:1b:b4:16:a9:07:4d:a9:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Validity
Not Before: Mar 1 13:57:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0d4d960b3d1d47f78f9029ed98f3177a8f3372ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:42:00:9e:ba:1c:18:40:50:43:1e:a8:b4:05:
09:2e:8d:14:12:3b:51:0c:cc:02:19:38:d2:8f:4c:
aa:be:ff:25:63:82:5a:8a:54:3a:8d:a2:b5:55:85:
55:d2:e3:55:1d:9e:8a:d4:8f:5d:90:b3:85:98:72:
37:c8:f1:21:1d:55:46:80:62:74:58:cc:5b:ec:fb:
fd:05:30:ac:76:db:1e:c4:11:57:a0:21:a7:ab:c2:
3f:29:f4:36:e5:04:41:38:01:a6:a0:7e:47:15:15:
3e:43:55:ee:3d:8a:58:31:81:79:a8:da:d4:4d:b8:
0c:7b:dd:5a:db:dc:df:94:32:7d:55:ae:3c:21:16:
e5:12:6b:b0:e7:2d:51:70:33:3d:69:ab:71:88:64:
d5:76:3a:d2:3f:3b:ba:de:21:84:43:ee:59:03:29:
14:a7:e6:2b:96:69:04:d6:7f:04:53:28:bb:4c:fb:
05:28:33:0f:c6:c5:3e:de:47:04:3a:7a:78:22:90:
89:1f:42:1f:ce:34:94:10:c4:fe:51:8d:2b:e1:e8:
4e:2e:22:c0:18:6b:b7:e7:9d:a2:79:60:e2:e5:c0:
18:90:cc:58:f6:ee:23:d4:01:5c:13:b3:01:6a:9a:
f4:95:4f:59:32:4a:ce:28:45:09:89:09:dc:3f:3d:
88:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:4D:96:0B:3D:1D:47:F7:8F:90:29:ED:98:F3:17:7A:8F:33:72:BA
X509v3 Authority Key Identifier:
keyid:CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/DU2WCz0dR_ePkCntmPMXeo8zcro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.107.27.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:e4:de:2f:87:8c:ef:c8:16:5f:36:19:05:3f:82:85:85:aa:
9c:65:0c:6c:cf:b0:1c:66:4e:08:6c:a3:ad:18:0d:06:7d:42:
2c:52:b4:30:a8:59:3a:4c:5b:76:90:48:8a:76:8e:82:87:ae:
a1:fc:ba:5a:ff:86:1c:96:5a:19:81:79:37:37:40:9a:3c:2b:
e7:a5:a4:21:97:2c:3d:fe:f3:e5:e1:04:cd:78:73:fd:f5:7d:
5d:1f:de:14:f6:bd:78:63:27:56:7f:2c:6f:4e:89:69:e8:66:
cf:35:9e:b5:cb:8d:c9:0d:9b:d1:ca:3f:cc:99:f4:ca:6a:93:
88:54:10:88:df:5b:e3:ca:0e:07:76:09:52:e8:ea:92:46:73:
f4:5c:99:2f:d8:6c:25:23:c5:b2:5b:ca:a6:60:2c:ee:40:1f:
e4:df:32:0a:5f:e7:25:53:08:f4:92:af:98:c8:31:86:60:fa:
a4:5c:51:37:c5:a1:1d:c0:52:02:e1:ca:71:73:7a:63:38:60:
00:19:69:32:8e:b6:1c:9d:91:2e:6e:7a:d5:41:35:58:16:db:
4d:3e:72:6d:6c:93:2e:5f:3b:8b:4f:f8:0b:e1:72:72:80:e0:
03:c1:c7:08:ee:95:28:f8:7a:bd:90:e4:9e:26:0b:3c:5f:d8:
b6:08:46:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:17 2024 by rpki-client on console-fra.rpki-client.org