Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/aH3yfJEVPMPqx_-HrFR7RfA4I7s.roa
File: aH3yfJEVPMPqx_-HrFR7RfA4I7s.roa (raw, json)
Hash identifier: ZyQK1RCNoobsIQm9amrmSunUzBeAW+fPUTRAyz3zgb4=
Subject key identifier: 68:7D:F2:7C:91:15:3C:C3:EA:C7:FF:87:AC:54:7B:45:F0:38:23:BB
Certificate issuer: /CN=3c4ed942e5c742e77bfb9beb954f872534f52848
Certificate serial: 018CC493A045B5B1921F143683A07BE51A16
Authority key identifier: 3C:4E:D9:42:E5:C7:42:E7:7B:FB:9B:EB:95:4F:87:25:34:F5:28:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PE7ZQuXHQud7-5vrlU-HJTT1KEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/aH3yfJEVPMPqx_-HrFR7RfA4I7s.roa
Signing time: Mon 01 Jan 2024 10:30:58 +0000
ROA not before: Mon 01 Jan 2024 10:30:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 83.97.100.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:a0:45:b5:b1:92:1f:14:36:83:a0:7b:e5:1a:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4ed942e5c742e77bfb9beb954f872534f52848
Validity
Not Before: Jan 1 10:30:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=687df27c91153cc3eac7ff87ac547b45f03823bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c3:ef:61:11:20:f5:f3:4e:ee:f0:ff:65:04:
b1:06:8f:f5:4f:0a:e6:b4:6c:5a:4a:89:93:f5:d9:
2a:ad:15:7b:e5:b3:79:32:30:ce:f5:a2:74:24:7d:
74:22:ec:8e:dd:8c:2f:c8:62:79:55:5e:05:24:d5:
75:42:2d:10:d3:ef:ab:c7:b4:61:65:af:b7:3d:e7:
f4:53:e9:69:e0:46:b5:29:86:0d:f1:8f:e9:0a:cd:
38:9b:ab:fc:33:da:40:ba:31:e1:c2:34:ef:38:bc:
83:16:b2:59:40:e0:b3:4e:77:30:e7:18:45:ae:c3:
d3:9e:7c:94:d0:2a:71:d8:42:30:ec:be:6d:e0:bf:
a4:e0:af:d1:81:d7:be:8f:0f:e7:32:6b:53:25:fd:
37:f8:27:eb:ff:80:23:5b:f5:59:60:ed:5f:38:ba:
a6:f1:d8:db:eb:26:93:ed:3e:01:2b:a5:d0:79:10:
58:72:df:23:f0:a7:f1:dd:6e:ab:17:ab:e4:80:81:
2a:96:6d:7e:06:b4:5d:a4:60:b0:d9:89:a8:3d:58:
9e:b5:94:fb:fb:0a:bc:e8:3b:f6:22:eb:0b:c7:11:
78:ed:60:b3:31:56:b9:4d:cb:f2:a6:cb:45:7b:32:
8a:5a:11:24:bb:a8:6a:fe:68:68:6c:db:4c:01:5b:
3f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:7D:F2:7C:91:15:3C:C3:EA:C7:FF:87:AC:54:7B:45:F0:38:23:BB
X509v3 Authority Key Identifier:
keyid:3C:4E:D9:42:E5:C7:42:E7:7B:FB:9B:EB:95:4F:87:25:34:F5:28:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PE7ZQuXHQud7-5vrlU-HJTT1KEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/aH3yfJEVPMPqx_-HrFR7RfA4I7s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/PE7ZQuXHQud7-5vrlU-HJTT1KEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.97.100.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:0c:35:e1:8d:ed:47:a9:b6:e7:3a:d1:57:00:16:e6:dc:63:
5f:47:a2:f7:39:8b:b7:bf:91:9b:72:30:7c:11:40:32:af:3a:
fc:fd:61:53:3c:83:d3:59:fb:68:ba:bc:32:f4:11:ef:cc:73:
de:44:14:12:a4:cd:cc:e2:77:db:da:ee:95:17:2a:35:32:43:
a4:50:3a:99:39:7b:44:70:57:fc:32:4d:cb:15:8c:c8:05:b5:
b4:6e:cc:fc:d6:b5:78:64:53:ab:d0:67:c0:17:85:8f:81:1f:
81:a2:30:47:8b:5d:d7:cd:89:3a:d5:65:e8:e3:08:4f:fa:e0:
ed:af:aa:9b:2e:f0:d7:f6:e8:0a:87:82:f8:0b:48:5e:e9:1f:
bd:37:6c:8d:68:12:06:9f:44:3a:19:48:79:34:26:09:f5:33:
5c:0c:3b:49:ff:6a:73:65:bf:d4:77:5b:01:1d:87:12:44:6a:
04:2f:bb:4e:ee:0f:b3:d7:e7:75:05:85:27:7f:66:a6:84:37:
b5:d3:ed:f6:5b:b8:3d:0a:8f:27:2f:41:b2:b6:27:c1:de:c0:
dd:b8:33:f1:86:6c:18:3c:5e:1b:5a:42:87:e8:13:0e:da:da:
67:56:ab:42:1b:27:b0:85:4c:7d:32:dc:53:7b:76:7d:6f:03:
c2:9d:e5:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:04 2024 by rpki-client on console-fra.rpki-client.org