Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/p8un65BegKvuA_8MBjD9wjkojls.roa
File: p8un65BegKvuA_8MBjD9wjkojls.roa (raw, json)
Hash identifier: vfzQ8vW/zUseinHcNHDuqldY7hBKrXxTh4UXm/l+mwU=
Subject key identifier: A7:CB:A7:EB:90:5E:80:AB:EE:03:FF:0C:06:30:FD:C2:39:28:8E:5B
Certificate issuer: /CN=e4a2b8e90d157ea022f8e700024a93dc356a514d
Certificate serial: 01856BC1155B628F0A992218593AEB50DAF8
Authority key identifier: E4:A2:B8:E9:0D:15:7E:A0:22:F8:E7:00:02:4A:93:DC:35:6A:51:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5KK46Q0VfqAi-OcAAkqT3DVqUU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/p8un65BegKvuA_8MBjD9wjkojls.roa
Signing time: Sun 01 Jan 2023 05:14:54 +0000
ROA not before: Sun 01 Jan 2023 05:14:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49334
IP address blocks: 77.92.145.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:c1:15:5b:62:8f:0a:99:22:18:59:3a:eb:50:da:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4a2b8e90d157ea022f8e700024a93dc356a514d
Validity
Not Before: Jan 1 05:14:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a7cba7eb905e80abee03ff0c0630fdc239288e5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a0:60:ac:e5:fe:58:2c:67:eb:04:9b:74:78:
ed:32:e4:f1:6b:46:47:a4:ed:14:bd:d7:46:b2:6e:
44:84:1c:79:27:30:25:ed:a1:2b:15:1d:db:d3:f4:
98:cc:f5:76:b3:9d:55:65:14:89:38:e6:32:dd:c6:
dd:a6:99:82:4c:fc:f6:85:f8:35:fb:95:dc:b4:da:
44:a3:9f:18:2d:06:ed:1b:1c:36:2a:46:08:0c:cd:
02:9c:ac:62:f7:17:71:6a:7c:eb:ed:d8:13:9a:0f:
5d:83:e7:f4:c9:c4:35:30:cc:94:c6:3e:74:fb:cb:
1d:84:a7:f8:b4:54:f6:94:c7:08:32:07:64:b3:ec:
3f:3c:05:72:37:92:64:03:0d:e8:1c:3f:16:bd:5b:
76:24:f2:4c:62:fe:57:4c:82:c2:78:ca:4d:06:5b:
4c:6f:9e:53:d5:5b:8e:0c:1c:ab:be:b9:6a:1b:50:
ab:f4:88:3d:8f:95:4f:f4:e6:04:78:b1:6b:96:c8:
f1:32:dc:cd:09:c0:65:05:b6:19:ae:a4:15:90:b8:
08:db:29:77:5e:2a:f2:05:a0:1f:e6:65:68:15:7e:
fb:f4:99:7b:fa:07:70:8d:19:5b:b1:a3:4b:b4:5d:
93:7d:b6:a9:5d:0a:10:3d:a4:e6:ed:ba:7e:ed:2b:
be:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:CB:A7:EB:90:5E:80:AB:EE:03:FF:0C:06:30:FD:C2:39:28:8E:5B
X509v3 Authority Key Identifier:
keyid:E4:A2:B8:E9:0D:15:7E:A0:22:F8:E7:00:02:4A:93:DC:35:6A:51:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5KK46Q0VfqAi-OcAAkqT3DVqUU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/p8un65BegKvuA_8MBjD9wjkojls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/5KK46Q0VfqAi-OcAAkqT3DVqUU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.92.145.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:52:a5:25:b9:fd:31:9f:98:b5:e8:be:4a:5b:53:12:f7:2e:
f8:b9:bf:a8:d1:d8:22:e1:39:be:84:ce:9e:6a:b4:57:2a:11:
96:07:f8:b1:09:31:91:fb:b7:3d:3b:ef:0e:e1:31:b6:01:cf:
e4:09:9b:97:60:4c:fa:f3:61:78:ad:e7:ca:0d:47:08:23:75:
fe:b9:30:bf:a8:22:7e:8e:11:e0:04:c1:16:d8:18:ed:82:2e:
ea:e7:ce:42:96:9c:f2:a4:80:80:3f:90:2f:94:6c:28:a2:2f:
b5:d3:49:1e:08:5b:52:10:35:39:ed:0e:11:de:84:8b:b6:7d:
ba:35:5a:41:a6:e8:2e:22:ce:f8:01:1c:2c:26:52:6b:8b:c7:
3d:e7:a5:15:4c:7b:c2:d7:72:88:d7:60:e3:ae:bd:25:1c:ab:
82:c4:32:90:95:ff:3a:8d:84:52:59:53:82:cd:af:fe:85:ad:
75:6f:2f:6a:51:65:75:4a:02:2d:8c:03:4b:5c:58:9b:34:3c:
8b:d8:a0:66:b9:89:50:32:b0:bd:0e:6f:67:d2:20:3a:e6:27:
5d:75:5b:eb:68:db:08:df:9b:05:9d:74:75:5d:58:d4:8f:4d:
3b:03:34:a8:2e:db:ab:3f:e8:64:83:a8:5d:bc:f5:33:14:c4:
6e:27:dd:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:01 2024 by rpki-client on console-fra.rpki-client.org