Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/zcEFSQxuNO8lOjicaoNyYbTKAS4.roa
File: zcEFSQxuNO8lOjicaoNyYbTKAS4.roa (raw, json)
Hash identifier: wYIG0S7Nrcq2hrK9OfZC67IGUPEr6KoTkNIdRY3POHU=
Subject key identifier: CD:C1:05:49:0C:6E:34:EF:25:3A:38:9C:6A:83:72:61:B4:CA:01:2E
Certificate issuer: /CN=94d98e8fec680775a157266e0c6b78b141a34f5e
Certificate serial: 017C0D83
Authority key identifier: 94:D9:8E:8F:EC:68:07:75:A1:57:26:6E:0C:6B:78:B1:41:A3:4F:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lNmOj-xoB3WhVyZuDGt4sUGjT14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/zcEFSQxuNO8lOjicaoNyYbTKAS4.roa
Signing time: Thu 21 Apr 2022 18:15:45 +0000
ROA not before: Thu 21 Apr 2022 18:15:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34248
IP address blocks: 82.117.242.0/23 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24907139 (0x17c0d83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94d98e8fec680775a157266e0c6b78b141a34f5e
Validity
Not Before: Apr 21 18:15:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cdc105490c6e34ef253a389c6a837261b4ca012e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:9c:85:1b:5e:d1:62:ac:fb:78:27:23:be:4c:
f8:ec:dd:59:89:0a:37:f9:0e:90:96:f8:06:62:e0:
93:bc:54:6d:3a:7b:2b:a6:b7:69:42:f9:04:79:4c:
49:1a:e0:1a:da:49:18:16:ed:23:af:68:51:ed:79:
2c:41:51:9f:d7:cb:25:27:a2:22:8e:d4:9c:23:14:
19:bd:8b:18:8b:06:27:5a:bb:d2:29:2e:5a:32:2c:
6e:cd:41:fb:40:91:fb:48:09:fe:13:33:11:1a:b7:
1b:4c:94:07:4c:45:36:07:58:5a:7e:da:fa:b9:73:
53:24:1a:73:d5:af:4e:c4:f3:3f:8c:6c:25:69:db:
fc:2c:1c:a6:f3:2a:a1:a4:c4:46:5e:01:94:19:26:
c7:46:ec:83:60:ea:51:f0:a3:44:dc:ec:71:3a:0b:
57:d9:4b:25:98:da:72:1c:14:91:81:2b:2a:de:5d:
56:04:5f:09:96:2a:93:f7:52:69:05:c4:cf:0e:74:
76:a2:40:e4:df:5c:77:f3:82:a0:22:f7:10:f3:48:
df:e8:ad:cd:f3:b4:30:f7:14:45:17:cb:c0:01:86:
56:9f:c6:68:2f:42:1b:8f:83:f1:0b:c5:49:9f:d3:
f5:39:8c:13:e7:5b:b5:b0:18:c2:c7:d4:d9:81:95:
17:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:C1:05:49:0C:6E:34:EF:25:3A:38:9C:6A:83:72:61:B4:CA:01:2E
X509v3 Authority Key Identifier:
keyid:94:D9:8E:8F:EC:68:07:75:A1:57:26:6E:0C:6B:78:B1:41:A3:4F:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lNmOj-xoB3WhVyZuDGt4sUGjT14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/zcEFSQxuNO8lOjicaoNyYbTKAS4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.117.242.0/23
Signature Algorithm: sha256WithRSAEncryption
12:a5:96:87:87:a8:ae:b9:aa:28:7a:a0:90:42:8a:7c:c4:37:
a8:58:be:93:55:63:80:0d:dd:c0:9e:28:87:15:eb:3a:36:d1:
d1:06:46:c5:6f:bc:1d:ca:49:b9:39:9a:c9:d3:0a:23:c4:02:
2a:fe:92:59:0c:5d:aa:24:a5:55:e8:74:19:3a:7c:98:67:72:
27:52:4c:eb:57:e4:4f:44:7a:26:cf:c6:92:fe:ee:db:5f:59:
f0:a4:e2:b8:08:ea:d7:cd:78:0a:af:52:56:60:bf:a7:a2:33:
43:94:14:ce:ae:4e:d8:d6:a2:de:4f:74:da:03:ea:88:dc:6e:
8a:0b:39:1e:4e:04:01:af:f5:11:27:39:59:ce:f5:fa:92:21:
b0:79:50:2b:34:13:b2:8b:32:ae:10:c3:1b:b8:1a:fc:20:1b:
0c:2c:72:9b:46:ca:e8:54:6d:51:81:7d:5f:cf:6c:bb:8f:9b:
86:99:04:7c:c0:4a:ab:70:5b:4f:2d:94:8f:06:b0:73:ac:30:
55:f6:c0:15:94:55:7f:e3:c8:20:be:30:fb:54:f6:56:22:65:
86:62:ba:ef:a2:f9:5a:84:7e:86:03:a5:c0:a6:19:74:bf:92:
77:fe:5d:5d:08:a4:9a:d0:bb:f2:72:83:86:d3:b3:b6:d9:8a:
5e:d4:68:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:52 2024 by rpki-client on console-fra.rpki-client.org