Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/Inam7VUAOdNXAR_2quSNfUO3fyg.roa
File: Inam7VUAOdNXAR_2quSNfUO3fyg.roa (raw, json)
Hash identifier: I1Mt2uhD8F3SQHC5Vr772JrifHlmu4DAOVyfSsopqLQ=
Subject key identifier: 22:76:A6:ED:55:00:39:D3:57:01:1F:F6:AA:E4:8D:7D:43:B7:7F:28
Certificate issuer: /CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Certificate serial: 0183EC3BEA3E3C3659BD7C76972FEA0D22CF
Authority key identifier: 5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/Inam7VUAOdNXAR_2quSNfUO3fyg.roa
Signing time: Tue 18 Oct 2022 17:54:53 +0000
ROA not before: Tue 18 Oct 2022 17:54:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41957
IP address blocks: 77.83.94.0/24 maxlen: 24
195.245.238.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:ec:3b:ea:3e:3c:36:59:bd:7c:76:97:2f:ea:0d:22:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Validity
Not Before: Oct 18 17:54:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2276a6ed550039d357011ff6aae48d7d43b77f28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:66:cb:89:c2:fa:2d:ef:9f:ec:0f:d8:43:0b:
33:f6:41:b6:de:b9:98:5d:02:7e:39:02:29:e3:64:
ec:e7:02:1c:72:74:eb:1d:13:fd:1f:22:4b:38:ee:
56:e3:6f:ea:30:06:7c:aa:cf:01:86:da:22:13:ff:
8c:f6:a5:6c:36:80:b5:58:2d:8a:a8:b0:1f:96:26:
af:62:43:b4:a0:dc:e5:c8:07:62:66:2a:c7:fb:46:
a3:7c:fe:c1:0b:cc:44:a0:75:2c:87:ee:47:71:52:
be:a9:ab:35:ca:f0:b7:4f:fb:e3:28:f3:a8:fb:df:
ba:07:b9:dc:c9:fa:5a:d9:ad:ed:6b:02:b7:a6:8e:
e2:ab:82:4a:15:9e:1e:66:77:0d:24:0e:57:0a:03:
23:56:0a:51:f5:1d:42:28:b6:61:a1:ca:4b:87:f6:
01:3a:0f:6b:fb:75:41:b8:d0:b9:34:5b:bc:56:96:
75:ca:c3:16:e1:cc:d7:b4:22:d9:b0:5b:d4:54:52:
30:fc:c0:fc:cb:23:e2:48:00:bd:cf:b4:b0:cd:3b:
39:e5:e4:58:53:19:c8:f2:7a:19:7d:ff:be:ba:29:
51:55:67:fa:9a:1d:ed:b0:ea:af:3a:47:a9:b1:c5:
d0:06:3c:22:d0:75:d5:85:78:57:c3:02:c5:24:8e:
5d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:76:A6:ED:55:00:39:D3:57:01:1F:F6:AA:E4:8D:7D:43:B7:7F:28
X509v3 Authority Key Identifier:
keyid:5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/Inam7VUAOdNXAR_2quSNfUO3fyg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.94.0/24
195.245.238.0/24
Signature Algorithm: sha256WithRSAEncryption
47:b3:ec:b7:b5:a7:f6:b1:e6:e2:c0:8f:a3:55:5a:a0:57:2c:
53:79:5a:29:e2:58:4c:30:32:f5:8b:9d:72:62:2d:41:b5:be:
c3:8f:cf:72:0e:77:91:68:4c:28:7f:bc:20:91:49:f2:6f:bd:
1a:ee:1f:1e:a6:19:8c:c4:d9:73:7a:b1:9f:88:71:03:46:cc:
61:4d:3f:a7:b3:2c:78:83:d1:35:ad:1c:0f:b6:86:03:ff:37:
22:fe:82:de:07:a2:b7:1d:04:c9:ef:01:e0:bd:b8:18:d6:9e:
dd:ee:03:2a:a0:af:7b:90:54:be:89:bb:38:28:1d:b9:af:24:
6d:7e:76:67:95:9b:25:77:87:ab:e3:c1:1e:04:d4:7c:b8:32:
4d:9a:33:39:42:92:b0:6c:19:01:a3:d2:41:b4:b7:b5:21:60:
9d:e1:17:ff:6d:c6:35:cf:db:75:aa:db:52:03:9d:95:b3:61:
b7:db:c2:9a:34:07:67:9d:3f:be:6f:82:be:60:3a:43:02:96:
c6:9b:93:6b:14:0e:08:b4:10:20:9a:e6:d5:19:43:72:33:01:
cd:7a:f9:bc:e2:51:dd:04:2b:66:95:5c:6c:b5:c2:ae:95:44:
26:44:a0:c4:0a:f2:a5:cf:e1:cd:1e:ce:bb:3a:de:03:08:37:
7b:f3:b0:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:47 2024 by rpki-client on console-fra.rpki-client.org