Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/fc0G2dAKKTTppwfZpmtVH3ovGwI.roa
File: fc0G2dAKKTTppwfZpmtVH3ovGwI.roa (raw, json)
Hash identifier: a6MNEWX1J2D9g6Kyg5akNIE37ccJOpcjAJ2YIkS/mjU=
Subject key identifier: 7D:CD:06:D9:D0:0A:29:34:E9:A7:07:D9:A6:6B:55:1F:7A:2F:1B:02
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 018CC7955FE4A0924D0DE52B7683A4EB3204
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/fc0G2dAKKTTppwfZpmtVH3ovGwI.roa
Signing time: Tue 02 Jan 2024 00:31:44 +0000
ROA not before: Tue 02 Jan 2024 00:31:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60408
IP address blocks: 77.81.101.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:5f:e4:a0:92:4d:0d:e5:2b:76:83:a4:eb:32:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 2 00:31:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7dcd06d9d00a2934e9a707d9a66b551f7a2f1b02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f8:db:83:b6:e7:ac:46:1a:df:39:30:0c:4e:
9f:fc:58:1f:30:5e:a3:f3:c2:97:c3:24:9e:0e:45:
19:d9:52:92:fc:cb:c3:7b:2a:e9:db:37:6b:86:95:
79:db:35:29:1b:43:e4:9b:86:83:a7:0b:dc:e7:3c:
51:c3:0b:3e:13:c0:8d:6e:83:f1:50:92:32:f7:ad:
43:62:96:a3:79:b1:ff:85:d4:55:a3:72:5a:18:09:
68:55:7a:70:51:63:c9:1e:7e:70:ed:fc:ef:1b:93:
6d:36:fe:27:09:b4:d7:80:9d:61:45:b0:ce:60:0d:
12:24:a6:a2:19:41:9f:ed:a6:ed:fd:27:45:18:27:
25:bc:73:d6:94:48:9e:76:6b:4a:2a:2f:84:0e:d8:
fb:ed:85:e3:06:37:71:83:39:f8:05:13:87:67:fa:
ac:3a:a5:ca:63:43:84:36:ac:c4:f0:a6:46:31:10:
3f:75:71:71:b9:ac:be:89:c2:9b:60:56:e0:91:81:
f7:96:27:5a:c7:7e:96:0e:3a:d8:35:9d:8d:32:38:
3d:0f:70:39:a4:10:87:4b:df:e1:be:45:34:db:08:
e3:76:fa:f3:96:03:b5:92:6f:57:16:29:33:64:4a:
94:36:37:d2:7c:59:64:af:23:0a:12:19:93:9f:bd:
19:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:CD:06:D9:D0:0A:29:34:E9:A7:07:D9:A6:6B:55:1F:7A:2F:1B:02
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/fc0G2dAKKTTppwfZpmtVH3ovGwI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.101.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:2a:8b:05:5e:99:6b:dc:28:3b:88:27:65:8c:d3:0f:a7:6e:
44:45:a3:8f:81:23:38:90:df:ad:93:7e:f1:ae:30:42:f3:78:
13:c3:b6:d3:42:ef:12:c8:fd:b3:5c:52:74:c9:fd:74:52:37:
36:a9:36:ff:22:17:72:3b:15:7c:2c:29:26:ba:e3:13:a0:d0:
ed:dd:bb:c0:ba:da:0e:e1:21:6f:9d:27:15:13:b7:9b:a0:68:
6d:5a:16:7c:5a:64:a3:78:b3:a6:1e:37:16:46:d3:17:97:7d:
3d:38:a2:cc:a2:1d:f2:82:67:12:2d:a0:ca:da:94:bc:1b:34:
8f:68:58:60:00:6b:21:98:f6:c8:5d:a1:5c:c1:44:f3:e7:a8:
c3:3c:0b:61:4d:74:79:1f:5d:21:ea:5d:fe:98:59:2a:21:11:
ac:2b:c7:c9:0b:d2:df:e7:c5:9d:66:24:21:e8:88:91:fa:27:
39:70:81:7b:e6:29:31:33:70:a8:14:3f:f8:4c:e8:b4:27:24:
08:c4:e4:9d:b4:7c:3d:7a:97:29:c3:8d:2a:5a:4c:e7:0a:fb:
8d:ee:43:93:8e:d1:5a:6e:66:7a:4d:12:6e:19:73:0b:d1:80:
e8:c5:ba:c5:13:c3:14:32:f0:15:29:59:f7:24:b4:a3:d6:c0:
f3:b5:81:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:40:29 2025 by rpki-client