Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/za9UGw4mLpobBHgq2BIDsJHjkwU.roa
File: za9UGw4mLpobBHgq2BIDsJHjkwU.roa (raw, json)
Hash identifier: mRdUiz8OvXLaHWhQNm+HgN1ALHz+7gZtM26gSDW8k/c=
Subject key identifier: CD:AF:54:1B:0E:26:2E:9A:1B:04:78:2A:D8:12:03:B0:91:E3:93:05
Certificate issuer: /CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Certificate serial: 05B06C82
Authority key identifier: CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/za9UGw4mLpobBHgq2BIDsJHjkwU.roa
Signing time: Sat 01 Jan 2022 07:57:12 +0000
ROA not before: Sat 01 Jan 2022 07:57:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50024
IP address blocks: 77.83.82.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95448194 (0x5b06c82)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Validity
Not Before: Jan 1 07:57:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cdaf541b0e262e9a1b04782ad81203b091e39305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:83:0a:59:62:33:e6:4a:5d:5c:10:f3:07:a8:
9d:0e:3b:5b:d2:47:98:33:8b:e7:43:78:57:8c:04:
89:39:1b:d8:3a:4e:b9:4f:90:bd:8d:61:7a:26:53:
2a:5f:a6:af:9f:8f:36:b5:ee:1b:d4:55:ab:98:2d:
5b:18:63:aa:59:fb:a5:2e:b5:fc:3a:d6:75:6d:58:
42:3a:cf:d9:11:0e:a3:86:cf:b6:a8:c0:93:db:7e:
f8:3f:c4:08:3d:97:a7:e3:56:d7:2d:b0:55:57:25:
ee:ac:2d:65:6a:09:78:b5:72:c9:9e:bc:35:4c:5a:
67:66:f9:4f:bc:20:0c:5f:ff:7a:a0:0b:5f:ec:a8:
72:2d:1e:36:ac:12:71:c3:83:59:46:12:c3:c5:4e:
a3:6d:28:bc:50:3a:a6:2b:6d:e0:c2:11:7d:c7:39:
89:e0:73:23:1e:14:42:ce:a6:2b:ca:45:34:61:a7:
a1:9b:ff:df:64:1f:cb:4f:45:30:62:0d:4a:be:7a:
0e:19:69:d6:80:0b:7f:e0:2a:53:90:8a:b5:17:a4:
c8:34:40:b1:80:9a:8c:04:f3:e1:4a:8b:31:a6:bc:
92:62:34:9c:85:bb:2f:95:5e:c8:94:47:a7:87:2f:
ef:80:ec:e2:99:48:aa:54:e5:8a:a5:91:a5:82:ba:
69:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:AF:54:1B:0E:26:2E:9A:1B:04:78:2A:D8:12:03:B0:91:E3:93:05
X509v3 Authority Key Identifier:
keyid:CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/za9UGw4mLpobBHgq2BIDsJHjkwU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.82.0/24
Signature Algorithm: sha256WithRSAEncryption
93:15:55:fe:0a:9c:14:c3:a9:0c:3f:05:3b:bb:bd:43:1c:95:
10:3d:d1:25:9c:80:08:cf:d9:b6:e2:32:6d:60:05:69:12:a5:
92:94:3e:9c:5d:d5:25:d7:e7:c9:d4:09:e4:dc:ce:52:04:43:
fc:9f:62:ed:52:f5:bb:e7:e2:df:e4:00:b9:0b:28:45:fd:bf:
ce:7c:eb:c7:17:e0:50:4d:10:a3:69:1c:54:31:a5:a1:b3:05:
11:cf:b2:db:df:22:d6:80:96:b0:bb:8c:96:62:b7:87:48:3b:
0c:d1:7e:ae:a8:d4:d8:92:45:49:8a:50:e0:b6:66:29:1d:59:
76:68:cd:3d:d9:98:4a:f8:10:aa:1e:e2:fb:67:25:30:f7:38:
76:78:89:24:9c:70:3f:c2:37:68:6b:db:23:ce:48:51:f8:a5:
5b:d3:95:2f:18:e3:bb:a2:46:0f:ac:ed:8a:e6:83:f5:73:42:
be:68:36:e4:ac:c4:a1:dd:43:7b:40:2c:9a:ca:e5:c4:76:3d:
1b:1a:a1:42:d6:03:7b:96:aa:d3:6b:51:3b:38:00:2f:61:ef:
f8:02:07:d9:2c:48:87:a6:ce:27:c7:4a:39:4e:88:52:0a:bd:
f9:64:ad:aa:eb:c8:e6:50:2d:79:c0:ff:6a:2f:a0:1f:6d:c7:
25:6f:77:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:11 2023 by rpki-client on console-fra.rpki-client.org