Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/R8QE3ke_5s-Hibe6hoGiYlikFXw.roa
File: R8QE3ke_5s-Hibe6hoGiYlikFXw.roa (raw, json)
Hash identifier: aWgRpElfgCroe1InhwfeZyNKycTWsiWm2WCUJpiOaE4=
Subject key identifier: 47:C4:04:DE:47:BF:E6:CF:87:89:B7:BA:86:81:A2:62:58:A4:15:7C
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 01856FD5324B949AC7D4E508743BCBA7264C
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/R8QE3ke_5s-Hibe6hoGiYlikFXw.roa
Signing time: Mon 02 Jan 2023 00:15:21 +0000
ROA not before: Mon 02 Jan 2023 00:15:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56840
IP address blocks: 77.81.0.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:d5:32:4b:94:9a:c7:d4:e5:08:74:3b:cb:a7:26:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 2 00:15:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=47c404de47bfe6cf8789b7ba8681a26258a4157c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ef:bf:c3:0a:cf:8e:69:6e:96:68:05:1c:6a:
21:e9:35:00:60:5d:6b:40:6b:91:0a:5d:ae:51:44:
da:22:b1:81:b3:68:3a:6b:9a:d8:62:1b:b6:52:d7:
e7:01:56:c9:5a:3b:a8:2e:b5:64:bf:f5:84:ec:c5:
e6:a8:c1:1d:54:da:9a:4d:91:53:1a:fb:5b:9b:3c:
46:83:43:12:88:f9:5e:9b:2a:6c:96:0a:72:c8:96:
00:14:70:0d:8e:b4:02:a6:10:7d:df:39:83:68:ec:
1f:9b:bb:81:d2:93:0f:32:5f:54:0a:34:52:e2:c1:
16:8a:6d:cd:24:c9:a9:45:41:b4:ab:24:a8:d2:da:
8a:74:7b:1b:79:40:5f:73:31:f8:79:67:fd:c7:75:
da:84:79:ae:ef:2b:13:55:fb:81:b3:d8:bf:d3:e5:
1a:35:5d:11:54:fc:2d:e9:d0:d5:d8:42:e6:0f:e3:
70:01:df:55:91:1f:23:b3:a5:d7:52:1c:9e:35:33:
6b:10:fd:e8:00:eb:44:30:c0:2d:e2:df:c2:aa:00:
d5:91:ca:26:42:bc:e9:6e:5a:77:60:92:d0:21:15:
69:e7:02:fd:4c:1e:fd:28:19:77:78:d5:33:5d:1a:
f5:9c:9b:56:31:95:f0:e5:c0:1c:76:35:87:17:f5:
a7:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:C4:04:DE:47:BF:E6:CF:87:89:B7:BA:86:81:A2:62:58:A4:15:7C
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/R8QE3ke_5s-Hibe6hoGiYlikFXw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.0.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:0c:8e:58:ac:b3:a5:17:43:70:b2:02:f1:61:92:8f:8f:db:
ad:d7:a2:ce:dc:af:b9:c6:dd:70:e6:be:61:3b:2b:d9:fc:53:
d8:6a:8d:8f:da:e5:a3:1d:5c:99:b2:10:ef:a0:70:e2:d5:d4:
47:62:0c:82:c9:b9:74:83:49:02:72:38:69:9e:93:e0:cb:1b:
65:1d:6f:b5:d8:18:fd:6e:c8:ca:0f:11:3c:95:a8:5c:0b:67:
b3:8d:14:db:c0:46:31:51:8d:db:fb:85:4f:42:82:a4:8d:cc:
e6:33:38:24:d3:94:e7:7e:ab:ba:9a:df:0b:36:df:c1:47:e0:
e5:9a:fb:25:d3:11:ed:36:e9:dc:57:a2:4c:60:39:2d:21:f8:
93:9d:73:d6:9b:33:72:03:ef:64:c8:59:dd:d9:37:a1:82:ac:
88:5c:85:2b:18:e7:0d:0a:db:ce:0f:c3:98:13:ac:d6:0e:8f:
65:d0:1c:f6:32:57:f7:74:86:f8:97:74:69:47:b8:42:ba:3a:
59:72:cb:40:1e:81:dc:73:f7:ae:40:6e:db:9b:99:54:48:0d:
3d:e9:b1:79:51:78:1a:9e:af:aa:c4:16:45:46:8e:97:c7:ed:
a5:67:46:ce:32:05:7f:bb:62:88:80:05:cb:bd:59:63:7a:01:
cb:bf:fd:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:12 2023 by rpki-client on console-fra.rpki-client.org