Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/ArFuqNd6_11aDq7j5e3MrP4ncUg.roa
File: ArFuqNd6_11aDq7j5e3MrP4ncUg.roa (raw, json)
Hash identifier: ZT3jXeVTRuxyeiLCL6UbmP1lPqJy4xTjjUgTIekx2fY=
Subject key identifier: 02:B1:6E:A8:D7:7A:FF:5D:5A:0E:AE:E3:E5:ED:CC:AC:FE:27:71:48
Certificate issuer: /CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Certificate serial: 018CC9BCA85B709CA894F3975823650F0AF2
Authority key identifier: 17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/ArFuqNd6_11aDq7j5e3MrP4ncUg.roa
Signing time: Tue 02 Jan 2024 10:33:53 +0000
ROA not before: Tue 02 Jan 2024 10:33:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 33915
IP address blocks: 145.79.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:a8:5b:70:9c:a8:94:f3:97:58:23:65:0f:0a:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Validity
Not Before: Jan 2 10:33:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=02b16ea8d77aff5d5a0eaee3e5edccacfe277148
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:12:ea:f3:2c:72:39:41:bb:74:3f:3c:28:30:
35:b6:ce:dc:1f:29:a9:32:79:f2:01:bd:ff:c2:dd:
6a:5c:f6:2c:97:c9:19:62:24:9a:65:e1:ff:45:c2:
ea:19:11:ee:dd:ec:f9:00:9a:ec:1a:69:61:d5:dd:
61:04:1d:ef:93:e3:79:c6:fd:28:61:f9:05:e9:14:
b8:4a:25:80:43:d7:de:b3:70:e5:3f:30:b8:b0:1d:
4d:55:a0:07:63:05:40:7d:b2:60:61:1d:f2:77:69:
93:19:ad:5b:06:11:12:9c:d1:0b:57:87:bc:e4:fb:
8c:9a:c8:17:b2:88:e4:c2:cc:25:46:7a:6f:13:42:
e4:11:36:eb:c1:3b:c9:2c:59:90:07:c1:bb:67:f8:
36:be:21:34:db:37:d5:d3:52:8f:ae:e5:5d:c4:bc:
56:c2:77:23:3f:48:d5:d2:63:eb:fd:06:4a:5c:cc:
56:08:ef:e0:8d:e8:19:60:fa:57:0b:ff:c7:83:ea:
6e:ab:92:66:a3:e5:70:73:b3:c7:dd:2c:d8:d3:2d:
71:fc:7c:0b:ba:bd:ed:e9:bc:0f:81:8a:cf:fc:d1:
72:64:34:46:4a:85:c9:ae:55:a1:16:3e:7f:11:3c:
5d:2b:6a:8b:4a:ad:bf:1e:a7:3c:e1:27:62:96:95:
38:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:B1:6E:A8:D7:7A:FF:5D:5A:0E:AE:E3:E5:ED:CC:AC:FE:27:71:48
X509v3 Authority Key Identifier:
keyid:17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/ArFuqNd6_11aDq7j5e3MrP4ncUg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8e:3d:58:c9:63:80:7f:0e:e4:58:ae:6d:d3:a0:75:83:93:97:
6d:c6:17:99:bf:97:f1:e1:da:c7:fb:54:9b:7c:16:66:c3:61:
ef:49:b8:6b:33:95:1b:06:6a:86:eb:b0:a6:b0:46:63:26:55:
74:b8:d4:19:b8:91:ac:f7:17:aa:95:af:c7:14:50:87:21:c7:
ab:92:f2:ad:ef:1a:f6:84:71:3f:c4:1b:a1:17:4e:19:85:56:
3d:9c:2a:26:48:b4:ae:bd:5a:d4:f1:b9:33:de:49:b0:43:8f:
67:d6:94:f2:b9:ea:e1:a5:43:bf:f1:ed:29:30:03:18:fe:6c:
19:ab:dd:d2:43:cc:4f:56:dd:39:66:f5:c2:b7:e2:85:7b:a0:
10:93:a2:14:5c:8e:c4:c7:59:75:6d:1d:75:86:0a:97:6d:03:
51:5c:14:9e:36:3c:87:bc:ee:9c:fb:6d:45:f5:dd:b4:f6:c5:
03:f6:0f:da:e2:cd:29:02:b7:b4:be:45:56:60:57:67:bb:45:
40:41:92:02:11:c7:c4:7e:36:36:d6:9e:37:c9:74:f4:ab:79:
3e:bf:d5:9c:84:12:6a:02:6a:16:4b:1e:7c:cb:7f:8b:74:6d:
d6:1d:7a:b5:fe:41:f1:de:a1:13:79:37:d0:12:f2:06:44:94:
b6:16:39:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 8 14:53:12 2024 by rpki-client on console-fra.rpki-client.org