Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/vdU3VlVLTpetlbWKYgqVJjFdzFw.roa
File: vdU3VlVLTpetlbWKYgqVJjFdzFw.roa (raw, json)
Hash identifier: opGlPezHxkYxBjwcoYMOPbVnZE0wIBlf9vajYQgcnMQ=
Subject key identifier: BD:D5:37:56:55:4B:4E:97:AD:95:B5:8A:62:0A:95:26:31:5D:CC:5C
Certificate issuer: /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Certificate serial: 0187759A703760BAF3457EB4AAE1CD23D440
Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/vdU3VlVLTpetlbWKYgqVJjFdzFw.roa
Signing time: Wed 12 Apr 2023 13:14:28 +0000
ROA not before: Wed 12 Apr 2023 13:14:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 193.162.78.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:75:9a:70:37:60:ba:f3:45:7e:b4:aa:e1:cd:23:d4:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Validity
Not Before: Apr 12 13:14:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bdd53756554b4e97ad95b58a620a9526315dcc5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:58:ce:f2:ce:1b:60:66:f2:48:f6:4c:bf:bf:
2c:84:5f:30:4c:ad:92:09:1c:70:33:aa:ba:16:5a:
f1:ef:1a:f7:08:94:8b:b2:37:60:a5:42:b5:d1:97:
ce:1a:80:75:b7:17:0a:88:b5:a3:9a:48:3c:30:3e:
9e:a4:3d:ba:17:e6:52:6d:76:eb:b2:96:f8:e4:f7:
21:2f:1b:4e:e4:b1:bf:b8:aa:12:e2:75:88:27:ca:
20:07:15:88:e9:29:9a:e8:d6:91:ed:cf:9e:0d:f6:
ec:1d:37:d5:f1:88:03:f0:5e:31:89:84:d4:05:8b:
fd:e4:a0:34:21:a3:89:98:c1:0b:a6:3f:be:6e:83:
d3:7a:c2:e5:e0:98:3d:9f:9b:21:47:56:39:84:57:
20:d8:ff:4c:2e:1c:52:fe:09:ad:3e:95:5c:dc:fe:
06:7b:0b:95:a3:1a:a3:ff:ce:b1:43:ee:8f:c2:2c:
a4:f3:69:52:c5:0b:f4:fc:27:86:05:9f:4a:6b:34:
21:0a:06:34:00:16:08:54:a0:b7:e7:dd:6a:1c:5b:
2a:2f:87:03:33:75:b8:cb:dc:86:b0:74:6d:09:42:
fb:83:62:e3:3b:6b:13:70:a8:92:87:2f:1e:52:23:
3b:08:ba:bf:87:6c:9d:2a:44:e7:a7:5d:a5:0c:7d:
a9:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:D5:37:56:55:4B:4E:97:AD:95:B5:8A:62:0A:95:26:31:5D:CC:5C
X509v3 Authority Key Identifier:
keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/vdU3VlVLTpetlbWKYgqVJjFdzFw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.162.78.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:81:61:e7:93:bc:cb:a4:b7:25:43:a6:86:61:86:24:91:e7:
66:ff:82:c5:e7:03:1b:ee:0c:8f:85:71:8f:cd:bb:7b:e3:33:
08:40:7d:68:49:02:ba:a4:e0:95:f6:37:e2:44:ff:b4:d7:c5:
8b:0b:02:d2:20:ae:92:c8:30:b4:44:b3:3a:04:5f:d8:a7:b3:
11:40:21:6b:a8:af:8d:d7:2b:46:28:0b:05:ab:77:43:c6:4b:
af:14:32:29:57:ff:f7:cb:b1:8d:a8:21:a6:d9:4c:34:ec:6d:
76:f7:ea:cf:95:bf:fa:d2:51:80:2a:4e:04:72:a5:7b:12:50:
95:a6:44:b9:55:df:26:80:c6:fe:87:40:38:68:df:93:74:cc:
d0:64:f8:32:56:b8:fc:82:72:fd:ee:92:49:5d:03:69:7d:98:
3f:29:e6:2e:6a:1b:8b:44:a2:82:ea:6d:94:a0:16:a3:ca:21:
f1:fc:8c:ba:a9:2f:8b:e0:71:3b:18:e8:5a:ef:c1:b4:e5:03:
64:b8:ae:2b:a1:5a:d0:8a:70:7d:07:54:a5:df:84:a0:7c:2c:
4e:14:f7:22:5a:3c:21:4d:86:0d:63:0f:5b:b7:c1:c8:62:2b:
ff:20:9f:74:37:3c:fc:d0:a3:be:06:28:13:73:77:89:9f:33:
73:53:fb:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:25 2024 by rpki-client on console-ams.rpki-client.org