Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/rxJMsFtfO5ajcbu4O02iLCTvwqs.roa
File: rxJMsFtfO5ajcbu4O02iLCTvwqs.roa (raw, json)
Hash identifier: 8e3AxiYXVEq1realyV/tJPqok52y0623FneMrvoaUJc=
Subject key identifier: AF:12:4C:B0:5B:5F:3B:96:A3:71:BB:B8:3B:4D:A2:2C:24:EF:C2:AB
Certificate issuer: /CN=e4a2b8e90d157ea022f8e700024a93dc356a514d
Certificate serial: 01856BC113F8A6D73F654A05D6FF8BDA16DF
Authority key identifier: E4:A2:B8:E9:0D:15:7E:A0:22:F8:E7:00:02:4A:93:DC:35:6A:51:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5KK46Q0VfqAi-OcAAkqT3DVqUU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/rxJMsFtfO5ajcbu4O02iLCTvwqs.roa
Signing time: Sun 01 Jan 2023 05:14:53 +0000
ROA not before: Sun 01 Jan 2023 05:14:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42216
IP address blocks: 77.92.142.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:c1:13:f8:a6:d7:3f:65:4a:05:d6:ff:8b:da:16:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4a2b8e90d157ea022f8e700024a93dc356a514d
Validity
Not Before: Jan 1 05:14:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=af124cb05b5f3b96a371bbb83b4da22c24efc2ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:fc:34:bd:ab:38:2f:ec:98:6c:2c:00:14:ff:
a2:75:d3:cf:e3:19:f9:2b:60:dd:8a:b6:e8:2f:6b:
6e:c1:6d:b8:72:4e:bc:53:e9:eb:64:b2:83:0a:62:
fa:01:c3:c6:38:59:95:ee:ad:88:b6:d4:5b:66:0a:
db:d3:ec:85:6d:ff:38:23:a7:91:82:41:4f:cc:05:
8c:66:df:19:6b:be:15:d5:54:49:c7:46:a9:1e:68:
1b:5f:40:ea:24:6e:ae:9a:bc:4b:58:25:90:eb:01:
ab:56:fe:e2:75:ae:84:f0:98:ee:8c:8f:81:8e:e4:
e2:e9:fd:cc:2c:68:ed:90:56:10:dd:8e:f5:f8:de:
0c:1e:a6:48:6f:f9:11:91:6b:af:4e:f2:da:1d:32:
95:f8:4a:5a:44:a7:5b:3a:3d:0b:f2:fc:66:d7:12:
35:28:1c:8b:79:c4:c5:d8:e9:4a:dc:86:16:c7:3c:
b1:80:b8:52:93:36:55:2d:ca:42:85:48:bc:17:90:
38:40:81:df:21:d0:04:da:af:c5:3d:a6:d6:23:e4:
9f:3e:f5:17:4a:25:b4:29:dc:e5:7c:bf:d0:15:c2:
68:91:cf:25:03:d7:f9:98:86:2f:c9:b3:c9:7c:2b:
a7:8b:3b:14:f1:da:7e:c9:2c:1c:3f:c9:f1:78:e6:
2c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:12:4C:B0:5B:5F:3B:96:A3:71:BB:B8:3B:4D:A2:2C:24:EF:C2:AB
X509v3 Authority Key Identifier:
keyid:E4:A2:B8:E9:0D:15:7E:A0:22:F8:E7:00:02:4A:93:DC:35:6A:51:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5KK46Q0VfqAi-OcAAkqT3DVqUU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/rxJMsFtfO5ajcbu4O02iLCTvwqs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/5KK46Q0VfqAi-OcAAkqT3DVqUU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.92.142.0/24
Signature Algorithm: sha256WithRSAEncryption
55:54:01:ae:ec:c1:f3:21:e9:9b:cd:35:62:f4:ec:fc:09:be:
ee:3c:57:88:7b:23:5c:e1:a5:5d:8f:45:39:00:dc:09:92:d9:
43:3a:45:de:23:19:33:93:27:09:34:20:8c:47:bf:09:99:55:
43:c2:6e:ff:9b:9d:64:74:25:d7:c3:d4:47:e7:a5:99:c3:c3:
a3:a8:54:81:00:98:7f:1d:3b:7b:90:f5:03:e0:27:ac:c2:ad:
e3:a4:d0:86:b5:7b:f3:f2:17:eb:b5:71:d8:1c:e0:74:7c:55:
16:a3:06:77:14:e0:14:ec:a4:47:89:2b:b9:b9:f7:a4:99:4a:
c6:37:0a:bd:04:9e:3e:f0:72:5f:33:6c:d0:15:d2:9c:7c:70:
78:d8:1b:4d:8e:79:1f:38:1b:87:0f:ef:ce:0a:27:3c:30:42:
df:72:a3:7a:01:64:e4:91:70:30:72:df:cd:0d:6d:61:7e:56:
44:5b:f9:a2:54:19:0b:1e:b5:17:bb:39:5f:2a:3d:e6:27:e9:
7f:7c:e0:93:4b:dc:76:9d:3e:f6:5d:fc:3f:51:bb:bb:52:bf:
59:82:0e:ff:4e:d2:bf:0d:54:15:15:c5:49:78:05:a4:dd:6e:
c8:79:ef:cc:7d:4d:74:d7:ac:5f:07:f6:d9:a7:ec:32:ce:0e:
7b:96:a6:04
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVrwRP4ptc/ZUoF1v+L2hbfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0YTJiOGU5MGQxNTdlYTAyMmY4ZTcwMDAyNGE5M2RjMzU2
YTUxNGQwHhcNMjMwMTAxMDUxNDUzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZjEyNGNiMDViNWYzYjk2YTM3MWJiYjgzYjRkYTIyYzI0ZWZjMmFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfw0vas4L+yYbCwAFP+iddPP4xn5
K2DdirboL2tuwW24ck68U+nrZLKDCmL6AcPGOFmV7q2IttRbZgrb0+yFbf84I6eR
gkFPzAWMZt8Za74V1VRJx0apHmgbX0DqJG6umrxLWCWQ6wGrVv7ida6E8JjujI+B
juTi6f3MLGjtkFYQ3Y71+N4MHqZIb/kRkWuvTvLaHTKV+EpaRKdbOj0L8vxm1xI1
KByLecTF2OlK3IYWxzyxgLhSkzZVLcpChUi8F5A4QIHfIdAE2q/FPabWI+SfPvUX
SiW0KdzlfL/QFcJokc8lA9f5mIYvybPJfCunizsU8dp+ySwcP8nxeOYstQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFK8STLBbXzuWo3G7uDtNoiwk78KrMB8GA1UdIwQY
MBaAFOSiuOkNFX6gIvjnAAJKk9w1alFNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUtLNDZRMFZmcUFpLU9jQUFrcVQzRFZxVVUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny82OTllODUtMTAyNy00YzdlLThhZTct
ZGY0YTJlNzYwY2NiLzEvcnhKTXNGdGZPNWFqY2J1NE8wMmlMQ1R2d3FzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny82OTllODUtMTAyNy00YzdlLThhZTctZGY0YTJlNzYwY2Ni
LzEvNUtLNDZRMFZmcUFpLU9jQUFrcVQzRFZxVVUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATVyOMA0G
CSqGSIb3DQEBCwUAA4IBAQBVVAGu7MHzIembzTVi9Oz8Cb7uPFeIeyNc4aVdj0U5
ANwJktlDOkXeIxkzkycJNCCMR78JmVVDwm7/m51kdCXXw9RH56WZw8OjqFSBAJh/
HTt7kPUD4Ceswq3jpNCGtXvz8hfrtXHYHOB0fFUWowZ3FOAU7KRHiSu5ufekmUrG
Nwq9BJ4+8HJfM2zQFdKcfHB42BtNjnkfOBuHD+/OCic8MELfcqN6AWTkkXAwct/N
DW1hflZEW/miVBkLHrUXuzlfKj3mJ+l/fOCTS9x2nT72Xfw/Ubu7Ur9Zgg7/TtK/
DVQVFcVJeAWk3W7Iee/MfU1016xfB/bZp+wyzg57lqYE
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:53 2024 by rpki-client on console-ams.rpki-client.org