Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/Eku7h3rIfhJygnGjY5wf-4S-1o0.roa
File: Eku7h3rIfhJygnGjY5wf-4S-1o0.roa (raw, json)
Hash identifier: s2yeCk5D9pW1QqB7Tz2yU2UOzbNjaP5QbLh78DlRmhs=
Subject key identifier: 12:4B:BB:87:7A:C8:7E:12:72:82:71:A3:63:9C:1F:FB:84:BE:D6:8D
Certificate issuer: /CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Certificate serial: 01856F1DC14A33AE40B4F93CFACE83B49B30
Authority key identifier: 5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/Eku7h3rIfhJygnGjY5wf-4S-1o0.roa
Signing time: Sun 01 Jan 2023 20:54:59 +0000
ROA not before: Sun 01 Jan 2023 20:54:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51427
IP address blocks: 80.76.63.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:1d:c1:4a:33:ae:40:b4:f9:3c:fa:ce:83:b4:9b:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Validity
Not Before: Jan 1 20:54:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=124bbb877ac87e12728271a3639c1ffb84bed68d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:6e:34:fd:55:c4:bf:57:39:5c:2b:04:d4:40:
6f:5f:25:96:49:ea:f2:c3:b7:c9:ed:9a:a2:3d:85:
7c:4b:91:5a:ea:f1:45:87:e6:f5:20:6f:7c:9e:8f:
54:09:3d:ab:32:ed:52:03:11:41:e3:98:9b:78:67:
7e:df:a6:0a:99:03:b6:56:e0:46:93:16:df:6b:7a:
78:db:b4:b6:aa:7f:ae:5a:52:e8:57:bd:a5:84:7d:
32:e0:31:38:96:d0:c3:f1:4a:fb:e0:48:61:4c:ab:
20:a6:b6:da:6f:8d:a2:f1:3a:f9:31:12:30:e9:ca:
e5:5d:20:44:63:35:05:14:a4:b1:7d:29:39:ca:52:
c5:bf:63:87:0b:6a:a0:3b:9b:81:8a:28:84:49:f9:
ce:84:96:b3:e2:38:63:e4:82:3c:05:e4:9a:8c:f0:
09:fb:ee:ec:12:4e:22:3e:53:0c:53:47:2c:9e:70:
46:25:33:4a:4e:af:53:06:18:d8:05:1a:1e:45:b8:
2e:e3:d0:59:1e:53:38:32:82:d7:1b:60:a7:7f:16:
79:b1:38:0c:6a:c9:a1:ba:18:2b:1c:89:46:12:07:
fb:ee:e2:f4:b8:d1:0f:08:43:fa:32:0a:4c:19:0a:
c5:c2:39:e2:f4:43:18:64:08:cc:30:18:30:18:f0:
44:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:4B:BB:87:7A:C8:7E:12:72:82:71:A3:63:9C:1F:FB:84:BE:D6:8D
X509v3 Authority Key Identifier:
keyid:5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/Eku7h3rIfhJygnGjY5wf-4S-1o0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.76.63.0/24
Signature Algorithm: sha256WithRSAEncryption
62:a5:87:5d:d1:5a:52:b6:86:ff:83:de:02:98:a9:ae:36:87:
ab:cd:f7:87:9d:6f:d7:e5:aa:13:ae:ed:3b:9f:24:9e:6f:86:
b2:11:a1:65:38:30:0d:19:7f:26:04:37:fe:52:36:5a:b4:d2:
ef:6e:7d:fe:a6:2c:d4:0a:7c:87:fe:cb:e1:b6:46:2f:2c:8b:
48:89:42:44:44:89:46:93:e2:1f:87:0f:c6:a0:7b:a8:04:17:
66:08:96:dc:70:5d:b0:7f:d6:e6:8b:d8:20:6f:4a:19:e1:33:
8b:3a:14:6f:31:de:04:fc:51:54:07:a9:d0:0b:72:0f:7d:13:
f0:d2:9c:1b:6f:ae:31:e3:46:73:18:ce:f2:ce:fc:72:d5:cf:
e0:ad:7b:cd:40:08:d2:bd:51:60:bd:82:bf:4d:34:7d:43:2b:
26:cf:33:36:45:ea:1e:11:34:b8:57:3e:fe:ac:d8:6c:f7:b2:
8c:e2:ab:d1:30:47:30:5d:96:b7:f0:74:a5:09:9e:84:74:b9:
65:c5:10:29:df:15:a8:34:85:f1:f9:43:d2:f0:86:a9:cd:37:
2e:37:9e:f2:43:a0:5a:f3:d7:9f:7a:99:c8:d3:67:a4:22:18:
8a:14:61:f4:6d:8c:6c:4c:41:eb:e0:48:a1:11:0d:11:07:e3:
dd:6a:23:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:47 2024 by rpki-client on console-fra.rpki-client.org