Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/aSKiaZBG7oyX-7kLFG2s78cFtGs.roa
File: aSKiaZBG7oyX-7kLFG2s78cFtGs.roa (raw, json)
Hash identifier: wNYX4GBoALhPIG/Zgyw5/dClk2kliRpN8EU8BtftcoU=
Subject key identifier: 69:22:A2:69:90:46:EE:8C:97:FB:B9:0B:14:6D:AC:EF:C7:05:B4:6B
Certificate issuer: /CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Certificate serial: 018926021475E8F59999F5482101B087A54C
Authority key identifier: CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/aSKiaZBG7oyX-7kLFG2s78cFtGs.roa
Signing time: Wed 05 Jul 2023 12:23:37 +0000
ROA not before: Wed 05 Jul 2023 12:23:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58061
IP address blocks: 91.243.189.0/24 maxlen: 24
77.83.193.0/24 maxlen: 24
212.107.26.0/24 maxlen: 24
78.142.238.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:26:02:14:75:e8:f5:99:99:f5:48:21:01:b0:87:a5:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Validity
Not Before: Jul 5 12:23:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6922a2699046ee8c97fbb90b146dacefc705b46b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5b:5e:7b:ee:34:c5:63:c4:3b:d1:2c:e7:8c:
97:b0:55:64:e3:b7:54:22:31:43:cb:0d:62:76:ab:
43:f9:64:f1:f1:55:2d:11:e0:65:76:d7:f8:14:8a:
25:7e:a7:89:d6:f7:35:9e:ac:72:fd:c8:61:e2:16:
77:b3:55:1e:85:0c:9e:59:04:01:59:49:76:9c:b8:
d7:ea:f8:e3:af:59:10:4a:0b:f2:ef:e2:87:73:a8:
ae:58:fc:d8:f3:ac:fa:35:ba:74:e5:3f:fc:5e:a1:
cb:00:14:a9:fd:f7:93:85:e4:68:72:de:95:91:0c:
7c:d8:2b:18:e0:f0:d9:4e:36:d6:b8:40:bb:8e:e9:
03:cb:17:87:32:27:55:95:07:bf:02:a4:9c:5c:71:
a9:98:54:38:66:c1:b6:4a:f0:24:3f:0d:af:c3:00:
7b:0b:97:28:2b:c4:c8:a6:46:79:8b:4e:27:38:54:
48:30:2b:06:3f:b6:55:7e:5d:85:e0:4c:69:4e:22:
33:dd:4a:d1:7c:03:35:b2:64:57:21:f8:71:46:ec:
12:73:21:50:df:07:08:11:e5:bd:33:b6:76:70:e9:
a7:c4:bf:0a:74:63:b2:c3:c6:45:a1:90:86:9b:44:
6f:23:25:9b:a3:7e:4c:b3:f1:63:da:48:b3:a2:e8:
dc:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:22:A2:69:90:46:EE:8C:97:FB:B9:0B:14:6D:AC:EF:C7:05:B4:6B
X509v3 Authority Key Identifier:
keyid:CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/aSKiaZBG7oyX-7kLFG2s78cFtGs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.193.0/24
78.142.238.0/24
91.243.189.0/24
212.107.26.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:63:28:f9:79:23:83:c7:72:68:d3:3e:4c:cb:2d:19:1b:1c:
59:ab:9e:5c:d0:dc:c8:f9:1e:15:73:87:aa:34:da:7e:1d:bc:
c2:34:5e:39:16:0a:12:5d:83:b3:c0:4f:d2:4a:85:9d:f4:5b:
2c:68:f1:74:ed:c8:db:d0:95:7c:a7:59:06:ba:ed:ac:90:32:
04:30:7e:4d:8c:a1:5a:98:bc:75:8d:cd:56:bf:9e:95:88:d2:
ec:4c:e5:e2:f9:1a:2b:c0:f8:a0:94:3d:b4:20:4c:f7:ac:11:
2a:6d:b4:a5:b8:65:35:06:ab:53:0e:47:a8:48:7a:40:30:67:
9f:28:22:4f:d4:7a:2c:f2:54:3f:93:58:c9:50:d1:24:39:00:
52:45:65:de:49:6d:0f:f9:23:07:79:83:10:0d:b8:54:15:57:
4d:c3:6f:7a:2d:34:00:54:52:33:f1:ce:96:c2:75:ff:6e:dd:
5c:74:49:6b:e9:7a:c0:ad:b1:35:c4:c3:38:8e:7b:f0:ac:57:
87:cd:ab:59:3c:c9:7f:61:0a:b3:c4:d8:16:03:93:1e:34:36:
01:d5:57:0e:bc:32:54:68:c4:43:67:d2:fc:9a:c3:d0:2a:02:
5d:d4:d3:27:83:9c:8b:5f:9b:f7:1c:7d:97:69:8e:4b:9e:1f:
42:d6:4d:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:46 2024 by rpki-client on console-ams.rpki-client.org