Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/DpQn8hYThX0o9XVTOQ_ajqQEz5s.roa
File: DpQn8hYThX0o9XVTOQ_ajqQEz5s.roa (raw, json)
Hash identifier: V1eZfnFpJwsrbRbJKiUQKNZ28EdAGZTSk0w7ZGgCypY=
Subject key identifier: 0E:94:27:F2:16:13:85:7D:28:F5:75:53:39:0F:DA:8E:A4:04:CF:9B
Certificate issuer: /CN=4d88eb730ab1a501ea36ea3482d764544e141111
Certificate serial: 0186B77C95A3C9BD369F6FC0BB7CBD251629
Authority key identifier: 4D:88:EB:73:0A:B1:A5:01:EA:36:EA:34:82:D7:64:54:4E:14:11:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TYjrcwqxpQHqNuo0gtdkVE4UERE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/DpQn8hYThX0o9XVTOQ_ajqQEz5s.roa
Signing time: Mon 06 Mar 2023 15:14:00 +0000
ROA not before: Mon 06 Mar 2023 15:14:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62563
IP address blocks: 77.104.187.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:b7:7c:95:a3:c9:bd:36:9f:6f:c0:bb:7c:bd:25:16:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d88eb730ab1a501ea36ea3482d764544e141111
Validity
Not Before: Mar 6 15:14:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0e9427f21613857d28f57553390fda8ea404cf9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:19:b5:9b:d3:ed:ab:f7:ed:82:93:7f:07:2c:
ae:59:cc:d3:81:eb:ba:57:de:45:40:d7:cb:1d:02:
b1:33:ce:48:bc:86:63:55:70:63:92:1e:5d:d5:0d:
66:25:4e:d8:6a:e7:18:9e:a6:b3:10:4b:b7:69:96:
6f:76:43:cd:34:a0:89:4f:aa:aa:9e:3c:94:60:e0:
a8:8c:0e:87:16:ae:76:60:4d:8f:a0:45:3c:6f:00:
9f:b2:0a:04:49:87:02:a0:64:1e:c3:87:b4:ba:d9:
76:39:7c:a9:0f:6c:af:24:5f:32:7e:a2:9a:49:51:
4a:c5:a7:68:fc:37:23:26:cf:d6:ea:e8:19:0a:35:
e0:4a:60:2b:6b:4b:5d:de:f9:ad:15:04:31:f8:b7:
31:29:33:76:7c:80:b3:78:7c:d1:bc:8c:cc:66:7a:
f3:8b:69:74:ff:57:e8:e1:8d:8a:b2:27:ec:d7:e1:
51:2b:48:5d:8a:09:5b:ba:c7:1c:69:e3:15:ed:8f:
59:f5:d3:83:25:0a:8a:2b:90:93:6e:4b:f0:a2:da:
8c:24:5f:3e:13:70:33:7f:dd:dc:17:5f:22:a5:e9:
18:ae:ec:92:cb:c1:df:43:c5:7c:9c:09:9b:15:41:
b6:39:58:7d:e1:35:16:1d:95:f8:96:d0:03:49:c8:
ce:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:94:27:F2:16:13:85:7D:28:F5:75:53:39:0F:DA:8E:A4:04:CF:9B
X509v3 Authority Key Identifier:
keyid:4D:88:EB:73:0A:B1:A5:01:EA:36:EA:34:82:D7:64:54:4E:14:11:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TYjrcwqxpQHqNuo0gtdkVE4UERE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/DpQn8hYThX0o9XVTOQ_ajqQEz5s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/TYjrcwqxpQHqNuo0gtdkVE4UERE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.104.187.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:0f:c9:9b:bd:f4:6c:c4:97:ab:9b:ef:3c:9a:1d:63:dc:b0:
cb:7e:44:28:66:36:5f:39:85:bf:34:6c:d0:f9:db:cd:80:0b:
6a:1e:bb:25:09:5c:df:1b:0f:5e:2e:6c:65:aa:8e:71:32:c3:
05:c7:6c:42:3d:2b:4c:c2:7d:a0:d5:3e:dd:45:a9:c0:32:75:
fd:5e:f5:d9:7a:ef:ec:ec:25:94:30:1a:e4:3e:a5:4d:bc:3a:
f9:c8:e5:3a:52:ce:f2:0c:fd:aa:ea:9c:4c:40:08:be:84:a6:
9c:0d:5f:37:a9:6b:d7:a6:7b:fa:6b:ca:c3:59:c8:cf:07:5f:
88:22:9c:f4:47:5f:a3:89:48:eb:f1:ba:46:f4:44:bc:ff:d2:
7d:aa:74:b2:65:4f:7d:75:40:6c:9e:77:64:1a:35:e4:f2:dc:
77:4d:cf:ed:45:ad:17:14:df:57:7f:8c:06:d9:76:3e:83:1b:
9a:f2:74:14:5c:d0:be:32:8d:eb:d9:61:3b:8d:f0:65:0c:4c:
ba:be:76:9f:43:31:4a:59:58:53:46:c0:2a:b7:b5:8c:61:47:
38:c4:8c:bc:bd:2d:9e:b4:2e:76:61:61:6d:b3:fc:bb:36:ed:
de:19:88:b7:32:ba:8e:ba:16:7d:38:f1:91:de:51:95:86:e1:
e0:e4:25:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:48 2024 by rpki-client on console-fra.rpki-client.org