Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/5c7468-1a33-4255-827f-4bfc66ad08c9/1/1z_x0-c7NG7JspHYJmAAm-3q4gE.roa
File: 1z_x0-c7NG7JspHYJmAAm-3q4gE.roa (raw, json)
Hash identifier: AC3AyXUAo413UrJ18yZlwkPpFuCsTa4LSC2jVVQOwSU=
Subject key identifier: D7:3F:F1:D3:E7:3B:34:6E:C9:B2:91:D8:26:60:00:9B:ED:EA:E2:01
Certificate issuer: /CN=7e6d7a16c3fcd679d05d28ed920935c086ae8cfd
Certificate serial: 01856F2FF40A75E37CED3AD40693C2E6614D
Authority key identifier: 7E:6D:7A:16:C3:FC:D6:79:D0:5D:28:ED:92:09:35:C0:86:AE:8C:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fm16FsP81nnQXSjtkgk1wIaujP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/5c7468-1a33-4255-827f-4bfc66ad08c9/1/1z_x0-c7NG7JspHYJmAAm-3q4gE.roa
Signing time: Sun 01 Jan 2023 21:14:51 +0000
ROA not before: Sun 01 Jan 2023 21:14:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210579
IP address blocks: 217.13.111.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:2f:f4:0a:75:e3:7c:ed:3a:d4:06:93:c2:e6:61:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e6d7a16c3fcd679d05d28ed920935c086ae8cfd
Validity
Not Before: Jan 1 21:14:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d73ff1d3e73b346ec9b291d82660009bedeae201
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:bb:ec:0e:ed:99:c8:bd:ce:76:c3:1c:d1:5c:
4c:ac:13:6d:85:a4:e3:b3:5a:e3:52:36:00:12:c9:
7c:5c:99:d8:fa:9e:24:3a:90:b0:a4:72:c5:38:38:
2d:31:a6:85:18:ba:ff:ee:83:8b:cc:3b:dc:d7:88:
b1:db:0c:5c:95:a8:26:dd:af:a0:4a:66:fe:32:a8:
f2:d9:cc:32:67:c3:fa:07:f8:33:29:94:40:ea:ea:
15:1c:7f:ad:46:9a:ac:d2:f0:1e:5c:f5:3f:a6:a4:
eb:50:9d:be:f9:c9:43:c4:5b:e6:c2:3b:c6:f6:65:
f6:c4:88:92:c5:c2:38:c8:ef:8d:ab:8f:71:d2:47:
59:d8:f8:4d:99:53:de:f1:bf:0f:dc:d4:f4:68:db:
f8:1d:a7:22:b3:cd:8c:cd:91:37:e9:83:1b:96:f7:
73:52:14:86:8a:04:26:56:4e:77:c2:a5:b1:ec:56:
38:29:57:08:c6:ea:02:c0:17:64:b0:e4:60:c4:56:
cb:08:56:0c:3e:b3:24:e0:66:60:5c:ba:b1:36:2d:
2b:41:35:6b:8c:75:9c:32:19:14:a1:dc:f7:4e:97:
1d:1a:e1:8a:ba:1d:f2:72:b5:e3:03:87:32:ae:11:
12:2e:47:26:c3:1e:d8:5f:09:75:4f:f6:e4:ff:9d:
44:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:3F:F1:D3:E7:3B:34:6E:C9:B2:91:D8:26:60:00:9B:ED:EA:E2:01
X509v3 Authority Key Identifier:
keyid:7E:6D:7A:16:C3:FC:D6:79:D0:5D:28:ED:92:09:35:C0:86:AE:8C:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fm16FsP81nnQXSjtkgk1wIaujP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/5c7468-1a33-4255-827f-4bfc66ad08c9/1/1z_x0-c7NG7JspHYJmAAm-3q4gE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/5c7468-1a33-4255-827f-4bfc66ad08c9/1/fm16FsP81nnQXSjtkgk1wIaujP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.13.111.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:2b:85:8f:e2:16:91:d2:7c:95:ba:99:d3:5c:d1:6a:a0:77:
6e:d1:d9:8a:29:47:d3:20:bd:86:0c:7e:db:aa:66:3f:ef:6b:
eb:15:75:2a:fd:c8:30:b9:3b:6c:4c:9a:fb:1f:11:82:c8:fe:
f5:92:39:00:19:63:96:14:15:17:37:e3:09:bf:f6:ac:03:53:
06:a7:52:2f:d3:1a:23:57:9b:7b:76:90:00:a5:dc:ba:3b:5b:
5e:e1:06:ed:15:f0:69:a7:1e:16:4e:ff:32:a8:a1:5a:27:4b:
95:a6:d4:1c:25:e1:e3:84:b5:41:a7:d9:23:fe:cb:ee:50:6b:
58:86:e6:f8:07:b2:a3:21:ac:5c:b0:1c:ca:3f:73:3c:8b:1f:
8d:c9:91:37:2e:4c:61:ae:06:64:43:8b:1e:d4:ec:e7:68:fa:
d3:53:2f:a5:c0:3d:73:d4:49:59:2a:25:53:d0:62:db:c6:7a:
5c:56:3c:54:45:5a:66:60:76:c9:50:7c:c7:c0:55:2e:d1:fe:
fe:e0:10:ec:41:97:2b:de:82:8e:1c:1c:a3:9d:75:9c:d3:5b:
ab:9a:cc:fb:f1:57:b7:94:64:44:53:bc:dc:95:66:9f:56:c2:
8f:82:df:9b:f2:b5:64:ab:5b:e2:0b:ac:fa:f4:51:bc:cb:e8:
09:4a:00:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 28 17:38:29 2023 by rpki-client on console-fra.rpki-client.org