Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/680324-ee1f-40f2-88df-196931962d3c/1/bBPbsb5_VyX4fntCsqaJm6mMNuQ.roa
File: bBPbsb5_VyX4fntCsqaJm6mMNuQ.roa (raw, json)
Hash identifier: 0QH1KTqZGvSnxDnzMpQaqIHiij7Ezdt6fS7LqMwtVQw=
Subject key identifier: 6C:13:DB:B1:BE:7F:57:25:F8:7E:7B:42:B2:A6:89:9B:A9:8C:36:E4
Certificate issuer: /CN=7f7734dfea120657412ea867ddbc7b84d132bf78
Certificate serial: 01838B28C4660FF4BCBB695C7791394E5E51
Authority key identifier: 7F:77:34:DF:EA:12:06:57:41:2E:A8:67:DD:BC:7B:84:D1:32:BF:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f3c03-oSBldBLqhn3bx7hNEyv3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/680324-ee1f-40f2-88df-196931962d3c/1/bBPbsb5_VyX4fntCsqaJm6mMNuQ.roa
Signing time: Thu 29 Sep 2022 21:30:48 +0000
ROA not before: Thu 29 Sep 2022 21:30:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205570
IP address blocks: 146.19.252.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:8b:28:c4:66:0f:f4:bc:bb:69:5c:77:91:39:4e:5e:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f7734dfea120657412ea867ddbc7b84d132bf78
Validity
Not Before: Sep 29 21:30:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6c13dbb1be7f5725f87e7b42b2a6899ba98c36e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:4d:62:a9:0a:bc:f9:34:07:28:1c:67:6e:a3:
78:73:f3:fd:c6:d8:11:d9:17:3a:dd:e8:d3:4b:9e:
2d:21:5d:6c:a8:c7:1a:5f:2b:b3:07:45:75:ad:b1:
8e:97:d7:e4:e2:dd:67:a9:30:5e:5e:b4:53:2b:a7:
ab:c5:7e:3c:02:92:1b:09:fc:22:5e:63:27:06:c4:
4b:3c:01:09:08:3e:7c:2c:31:67:8e:9f:e1:f1:13:
e4:a4:16:fc:7b:5e:c1:42:8f:ac:0e:5b:e5:11:55:
7b:7e:db:7c:7c:e1:b5:ec:c3:d8:f3:f1:d1:e8:80:
7c:91:f7:a0:75:5e:d7:19:9c:61:c9:b4:a3:3b:e3:
0b:8e:2c:2b:8c:2d:16:f5:16:1a:90:15:4f:94:39:
39:d1:02:a1:ad:0e:f0:22:70:c8:d1:d3:3f:9c:28:
d4:c1:b2:38:6b:c9:2a:bf:2b:17:19:5f:10:a9:3c:
68:8c:70:0c:c4:e0:6a:12:7d:59:14:83:1d:55:de:
49:2f:46:d2:cd:77:d0:9d:d6:81:3c:db:d2:66:54:
5a:d0:fe:94:d0:83:2d:05:cb:1a:7e:26:dd:43:a2:
ba:e7:eb:37:74:59:c0:14:c7:9d:32:2b:6a:c1:76:
da:ee:0b:86:cb:44:95:81:68:90:91:ed:14:5c:a3:
5d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:13:DB:B1:BE:7F:57:25:F8:7E:7B:42:B2:A6:89:9B:A9:8C:36:E4
X509v3 Authority Key Identifier:
keyid:7F:77:34:DF:EA:12:06:57:41:2E:A8:67:DD:BC:7B:84:D1:32:BF:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3c03-oSBldBLqhn3bx7hNEyv3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/680324-ee1f-40f2-88df-196931962d3c/1/bBPbsb5_VyX4fntCsqaJm6mMNuQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/680324-ee1f-40f2-88df-196931962d3c/1/f3c03-oSBldBLqhn3bx7hNEyv3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.252.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:6c:bb:c5:9b:81:20:f8:16:01:ec:04:43:92:fc:04:3d:13:
c9:38:78:ca:6d:a3:02:82:61:82:f7:47:2e:c0:8a:6c:f4:fe:
bc:c0:56:a1:11:28:7c:02:50:ba:96:35:2e:fa:71:8a:a2:91:
b8:fb:20:cf:6d:ae:58:06:8c:3d:b2:ae:60:d1:b2:e6:1f:02:
79:cb:b2:90:e7:78:f5:80:6a:82:b6:ce:75:8b:5d:28:fa:91:
da:91:35:9e:d1:f2:1c:5a:fb:af:a5:b8:1c:d4:cb:45:3c:18:
cd:d2:9f:f8:dc:56:0b:9b:6d:36:5e:f6:ec:3d:3f:94:a6:3a:
c2:77:ce:df:06:f3:6b:6f:ce:b4:59:bd:67:4c:6f:65:0a:98:
7d:a3:66:00:c0:d4:df:47:4f:d7:fb:86:18:11:c2:3a:2c:31:
09:ce:cb:07:7d:ed:c8:7d:81:43:63:8e:20:9c:c8:f6:8e:78:
90:ae:c3:21:e5:d9:f3:2f:bc:67:59:8e:02:d7:91:5d:15:2b:
df:db:64:d4:68:08:dc:37:9e:82:a3:3d:47:c5:cc:da:36:57:
6f:7b:27:d7:32:25:99:0f:25:96:64:a5:c4:eb:e9:b9:c6:fb:
af:8e:54:c6:ae:44:4a:3f:98:85:df:b0:4a:e3:66:cc:44:53:
56:3d:09:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:29 2024 by rpki-client on console-fra.rpki-client.org