Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/NnEUkrRM-lbMoU_yCYQBoh4Q9u8.roa
File: NnEUkrRM-lbMoU_yCYQBoh4Q9u8.roa (raw, json)
Hash identifier: pq2QO8CZXDj3TjUkTak9kdxuXPXC2U+H7C5e6pD/c3M=
Subject key identifier: 36:71:14:92:B4:4C:FA:56:CC:A1:4F:F2:09:84:01:A2:1E:10:F6:EF
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 01856FD53F27BF07C6017816A8F4657D14C3
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/NnEUkrRM-lbMoU_yCYQBoh4Q9u8.roa
Signing time: Mon 02 Jan 2023 00:15:24 +0000
ROA not before: Mon 02 Jan 2023 00:15:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60408
IP address blocks: 77.81.101.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:d5:3f:27:bf:07:c6:01:78:16:a8:f4:65:7d:14:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 2 00:15:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=36711492b44cfa56cca14ff2098401a21e10f6ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8c:54:fa:4a:45:87:f3:ba:d0:94:5c:01:91:
5b:7a:4f:9e:70:06:b3:dd:31:be:8a:ee:04:00:60:
62:88:25:6c:99:21:d5:40:49:8b:ff:14:1a:f1:f6:
e7:9e:66:b0:60:55:bd:4d:cf:72:da:26:32:50:62:
96:59:b8:0e:c7:88:df:d4:25:2e:e9:f3:23:9c:4a:
aa:05:52:0a:3f:fa:c9:df:f6:53:bb:75:b6:ee:b4:
0c:41:e2:13:27:e3:40:b5:2b:44:fb:bd:0e:1f:9e:
48:34:5c:2b:dd:04:ad:6f:96:8d:7b:05:7c:2d:23:
67:0e:d5:ce:24:dd:62:c4:52:e9:e5:b0:7e:1d:db:
8f:14:7a:63:08:08:40:0f:9f:88:b5:93:19:32:3a:
88:c5:02:7b:ec:fb:c8:c4:2a:08:5a:79:d3:75:1c:
d3:ea:f4:d8:59:a3:1a:24:ca:b3:32:e6:92:53:94:
04:6a:86:4b:49:bf:42:05:2f:17:8b:46:b6:cc:1b:
32:88:3f:85:bd:86:16:06:64:7f:93:b8:46:97:1d:
5b:c9:53:d2:b1:98:99:b0:fd:d0:c7:7c:bf:66:8e:
e2:1f:98:87:d3:31:b5:09:71:b2:6e:dc:db:f4:bd:
21:1f:97:99:79:0b:00:7e:7f:44:34:0f:62:0a:f3:
18:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:71:14:92:B4:4C:FA:56:CC:A1:4F:F2:09:84:01:A2:1E:10:F6:EF
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/NnEUkrRM-lbMoU_yCYQBoh4Q9u8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.101.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:8d:0c:36:95:e8:e4:5e:a4:aa:c1:8e:03:77:7b:1f:81:86:
76:81:0c:bd:30:b1:be:0a:01:07:55:3d:0b:bc:52:1f:91:b0:
b0:28:dc:67:13:4a:b0:44:66:6b:56:16:b2:ab:6b:02:f5:d3:
ee:c7:88:74:76:b4:00:6d:58:aa:80:aa:76:cb:aa:05:22:ea:
78:51:ab:2b:55:99:74:74:8b:9d:a5:fe:77:da:a8:b7:db:92:
17:cf:8f:42:e1:1e:d4:e7:c0:d1:18:44:fb:3e:d3:d9:b5:40:
10:b5:26:7d:7f:4d:b4:9c:72:90:9f:e4:7e:eb:66:ed:1d:62:
be:4b:8a:8d:7c:f1:05:e3:6f:6f:5e:f4:df:80:19:30:5a:8d:
71:4b:ae:ad:1a:32:48:28:ab:32:e4:37:de:9f:21:16:39:c7:
c0:26:ff:78:48:9d:96:af:b9:80:ca:7d:9f:96:53:6c:ba:5e:
4e:2e:dc:53:9e:3e:2b:24:f4:99:39:4f:b1:e9:56:b0:d9:fb:
87:19:d1:93:5c:43:25:d2:1c:c0:53:9f:c5:b1:79:4a:7b:08:
f2:09:c2:6c:73:5f:62:ef:90:90:52:42:72:7e:e0:13:f0:5e:
4c:7e:d5:20:c6:92:14:8e:46:39:d1:6c:71:8c:27:12:ca:87:
e7:e5:db:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:34:29 2025 by rpki-client