Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/g1ieit1werkeFaIEGPMQdYjXoEg.roa
File: g1ieit1werkeFaIEGPMQdYjXoEg.roa (raw, json)
Hash identifier: 78bTd2dCj4GOrr6qoR7IWFvwB/5hCbI1VcZgK1t4FU8=
Subject key identifier: 83:58:9E:8A:DD:70:7A:B9:1E:15:A2:04:18:F3:10:75:88:D7:A0:48
Certificate issuer: /CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Certificate serial: 03A071A4
Authority key identifier: 5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/g1ieit1werkeFaIEGPMQdYjXoEg.roa
Signing time: Sat 01 Jan 2022 14:07:05 +0000
ROA not before: Sat 01 Jan 2022 14:07:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51427
IP address blocks: 80.76.63.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60846500 (0x3a071a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Validity
Not Before: Jan 1 14:07:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=83589e8add707ab91e15a20418f3107588d7a048
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:a6:5a:9d:6d:47:c9:ec:47:cc:2e:a2:03:3f:
77:5d:80:79:db:c1:b0:2e:7d:30:56:4c:bb:35:f4:
63:70:b8:50:18:9d:2c:e6:ec:c0:63:4f:30:5f:e7:
3d:cc:fc:1e:0a:10:db:a7:75:da:4f:4e:cd:77:03:
f5:5e:fc:04:2f:19:1b:5c:fb:03:c8:2c:5a:48:43:
32:f6:3c:43:ca:f4:fe:09:7f:81:73:9b:e1:f9:ae:
ca:93:51:a5:1b:81:b0:72:f2:94:80:8e:6d:de:33:
54:8c:03:f1:67:c0:c4:56:8e:7d:d1:f2:e1:76:06:
6c:5a:ba:d0:8f:e0:1a:cc:96:24:ed:a8:7c:93:fa:
28:49:c5:85:0b:94:bf:21:c8:3b:ca:9b:8c:da:69:
95:f2:e9:98:e9:31:97:d0:9f:cb:ff:bf:9c:2e:eb:
e4:4f:08:55:d5:28:22:a9:3e:ff:62:15:a8:a1:aa:
f8:d9:3c:94:6f:83:b4:74:88:2c:84:de:33:48:bd:
a9:ea:61:9e:3e:da:10:1c:9d:24:87:4e:09:74:e6:
d7:47:de:9d:3e:0a:82:ff:c3:dd:6b:61:7e:02:65:
81:c1:9f:3e:c3:4e:8b:9c:90:d0:05:22:1b:81:9f:
50:eb:0a:75:f3:e1:55:7c:7b:dc:3b:2e:e3:67:04:
62:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:58:9E:8A:DD:70:7A:B9:1E:15:A2:04:18:F3:10:75:88:D7:A0:48
X509v3 Authority Key Identifier:
keyid:5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/g1ieit1werkeFaIEGPMQdYjXoEg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.76.63.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:b7:de:34:78:c6:71:7a:7f:e1:94:17:c7:fd:5e:7c:06:49:
61:d3:f8:d1:5f:8c:7a:a1:36:e1:52:8c:b5:bc:18:e8:28:5c:
21:fa:1d:ab:13:14:8c:81:85:e1:6e:2f:0e:2c:73:7e:2d:3d:
21:8e:10:ef:a4:2b:f3:dd:02:1b:35:15:09:3f:85:6a:3e:f2:
17:7e:aa:0d:ea:ab:2a:83:bd:a6:3d:7d:0b:8b:dd:3a:48:42:
ca:e8:ed:e8:e3:95:57:72:a3:80:29:95:90:90:92:81:bc:4b:
92:48:7c:44:58:b6:f0:0b:93:65:26:4f:87:fe:fa:3f:b7:35:
3c:83:10:c2:f1:cb:1c:1e:f8:75:19:6c:bb:1e:dc:99:7f:46:
33:1e:89:57:ed:48:12:27:7c:ce:1d:fe:80:96:a3:3e:43:75:
96:32:db:f3:42:2d:fc:0e:ec:a1:85:fa:e2:3e:37:bb:40:b7:
c9:60:db:01:cf:3b:88:77:32:f9:9e:a9:27:ce:65:c1:c4:8c:
fc:fd:6a:dd:b6:49:a7:6b:db:39:49:08:b4:b6:04:02:e3:7b:
86:81:6f:99:01:81:11:54:99:1b:a0:5a:c4:43:64:ab:0f:c4:
d2:6a:14:f9:bc:96:27:44:66:c2:05:06:5d:fd:fc:ee:da:fb:
e3:69:be:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:25 2024 by rpki-client on console-ams.rpki-client.org