Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/kX3PKZMIRtPxw3gj0_pNWo3OkeE.roa
File: kX3PKZMIRtPxw3gj0_pNWo3OkeE.roa (raw, json)
Hash identifier: 22aehU7Jm/r2QUN76YQRCm7it3frfA/z4paW48EqeWo=
Subject key identifier: 91:7D:CF:29:93:08:46:D3:F1:C3:78:23:D3:FA:4D:5A:8D:CE:91:E1
Certificate issuer: /CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Certificate serial: 018570D561961E02345EE6C814F6F42B60F3
Authority key identifier: CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/kX3PKZMIRtPxw3gj0_pNWo3OkeE.roa
Signing time: Mon 02 Jan 2023 04:55:10 +0000
ROA not before: Mon 02 Jan 2023 04:55:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 77.83.192.0/24 maxlen: 24
77.83.195.0/24 maxlen: 24
77.83.194.0/24 maxlen: 24
213.139.202.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:d5:61:96:1e:02:34:5e:e6:c8:14:f6:f4:2b:60:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Validity
Not Before: Jan 2 04:55:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=917dcf29930846d3f1c37823d3fa4d5a8dce91e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:21:52:87:aa:62:67:1c:60:66:ff:75:a7:1f:
a0:96:6a:6f:e0:f7:24:77:4c:bb:6b:9d:81:84:cc:
8a:5e:0e:42:7c:5b:d2:02:16:ab:19:12:fd:56:fb:
f9:ff:48:44:54:5d:c9:04:e7:a2:6d:72:08:29:71:
45:de:a4:92:7f:8a:1a:42:0c:0e:b1:89:2b:38:2b:
0b:a1:fd:cb:37:ca:22:0d:b7:41:a9:5e:1e:2c:9a:
f0:2e:7c:e6:9c:c5:a1:24:bb:ee:ee:58:70:ec:e1:
03:b5:0e:01:39:f2:16:d8:a4:1e:99:86:0b:fd:04:
70:7c:e2:58:e7:3b:26:b9:81:5b:69:86:f8:28:57:
76:bc:ce:03:80:19:2e:72:4d:7e:62:d8:b2:a2:67:
99:d1:31:20:92:ae:09:82:1b:3b:51:cf:3e:e3:65:
34:e2:05:64:5c:1b:ac:af:44:ea:68:24:91:5b:c0:
be:4b:ee:4c:ad:b6:33:99:41:8f:92:14:40:94:0e:
6a:84:4e:32:08:94:3d:c7:50:a2:bc:49:fc:5d:34:
3b:2c:00:08:b3:af:be:19:15:a6:7a:82:c9:d4:30:
32:e4:b2:4b:f4:24:07:08:79:29:f8:d8:0c:b9:5e:
43:dc:e8:b2:03:7c:b1:fa:3c:00:5c:88:27:43:f3:
d4:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:7D:CF:29:93:08:46:D3:F1:C3:78:23:D3:FA:4D:5A:8D:CE:91:E1
X509v3 Authority Key Identifier:
keyid:CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/kX3PKZMIRtPxw3gj0_pNWo3OkeE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.192.0/24
77.83.194.0/23
213.139.202.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:29:1c:f2:ee:82:4d:32:20:dc:34:c0:98:38:a8:53:a2:1d:
49:fe:69:c0:4b:9d:02:9c:0f:8b:8f:cd:1e:08:23:18:bf:fd:
7a:8d:4c:2a:cc:be:0b:45:c4:05:31:92:e1:6c:04:67:9e:09:
88:7d:cc:3d:b8:65:fa:f5:8c:fe:f4:c4:64:97:a8:50:92:35:
bb:78:ca:95:c5:14:91:1f:5d:56:43:da:d4:42:7a:9c:51:32:
e2:d3:0b:ac:3d:ca:e0:6b:43:6f:68:c7:43:42:31:80:94:d9:
8b:e2:7d:c0:af:cf:45:f6:a2:11:d8:4d:79:47:ca:22:1e:33:
0b:da:53:ca:81:f3:b1:8e:5a:b9:6c:b6:da:cd:83:41:ef:12:
24:b5:f9:44:28:6e:2a:83:e8:e6:bf:27:40:db:77:23:9a:d5:
66:51:f0:3a:c2:93:3c:70:21:e7:59:2a:81:e4:64:6b:41:3f:
ac:1e:9d:d4:b3:63:96:31:13:e9:0a:d2:bf:dc:ca:6b:fc:9a:
77:43:09:4b:49:00:8d:b9:e3:a4:e5:55:ff:57:b0:b2:d4:f5:
13:ad:b1:98:fc:6b:51:e4:bb:ce:d4:33:d9:14:36:28:01:b9:
cc:a1:82:93:d0:02:f4:c3:4e:19:70:22:aa:1c:a4:9b:c5:37:
25:66:a3:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:17 2024 by rpki-client on console-fra.rpki-client.org