Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/3dmm0KtqscEXfKfDyuOkrf3tpt0.roa
File: 3dmm0KtqscEXfKfDyuOkrf3tpt0.roa (raw, json)
Hash identifier: jZQEOW7bgSKxxlrjTeLZfb06INaEbM2zWAms9m14Qxc=
Subject key identifier: DD:D9:A6:D0:AB:6A:B1:C1:17:7C:A7:C3:CA:E3:A4:AD:FD:ED:A6:DD
Certificate issuer: /CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Certificate serial: 01837E8D89A06D0149D5D3336B68D586E046
Authority key identifier: FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/3dmm0KtqscEXfKfDyuOkrf3tpt0.roa
Signing time: Tue 27 Sep 2022 10:45:48 +0000
ROA not before: Tue 27 Sep 2022 10:45:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 0
IP address blocks: 92.53.176.0/22 maxlen: 22
92.53.184.0/22 maxlen: 22
176.52.128.0/22 maxlen: 24
176.52.132.0/22 maxlen: 24
176.52.140.0/22 maxlen: 22
176.52.152.0/22 maxlen: 22
92.53.160.0/22 maxlen: 24
92.53.164.0/22 maxlen: 24
92.53.172.0/22 maxlen: 22
92.53.168.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:7e:8d:89:a0:6d:01:49:d5:d3:33:6b:68:d5:86:e0:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Validity
Not Before: Sep 27 10:45:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ddd9a6d0ab6ab1c1177ca7c3cae3a4adfdeda6dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:e3:0f:91:71:d0:09:43:4a:ea:77:34:ac:e9:
0d:1f:bc:ae:13:bc:94:ec:0a:ee:b3:2c:05:91:cb:
62:15:60:6c:4f:25:3f:ad:40:80:2b:ed:e1:45:f7:
b3:2a:a6:90:e3:00:1f:2f:06:21:7b:23:87:80:0f:
f7:fe:f9:0b:7d:bf:c6:4d:84:05:b3:1b:bf:34:a8:
01:34:36:53:c1:6a:bb:b6:06:fb:88:64:76:7f:08:
29:49:cf:b7:b8:29:4f:2d:74:99:7d:c3:1c:3f:54:
25:53:54:7b:06:2d:a4:be:8a:5f:d0:b9:f1:0e:85:
c2:3e:67:8e:28:3d:9f:cb:3b:d8:55:21:7a:9f:9b:
ce:30:08:9d:72:c7:b9:00:dd:5e:54:2e:2a:fe:09:
6d:60:43:52:e4:17:8f:c3:f4:71:16:6d:5f:54:cd:
a4:e4:14:7a:81:cb:eb:7e:d4:b9:16:41:70:04:10:
9e:0d:6f:e6:ac:30:d4:44:54:0d:43:11:07:d7:20:
c4:3e:9a:46:3c:14:99:62:c3:52:95:49:98:59:76:
a8:5b:4a:95:39:ee:fa:0f:89:55:8f:36:28:01:4b:
68:ae:37:d3:ef:27:d6:4d:bc:3f:bc:06:d9:92:de:
94:c5:95:16:b9:1c:eb:9f:df:94:6b:92:3e:a6:95:
c6:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:D9:A6:D0:AB:6A:B1:C1:17:7C:A7:C3:CA:E3:A4:AD:FD:ED:A6:DD
X509v3 Authority Key Identifier:
keyid:FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/3dmm0KtqscEXfKfDyuOkrf3tpt0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/_neeViOLby6gaO3k4grvAMkEEys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.53.160.0-92.53.179.255
92.53.184.0/22
176.52.128.0/21
176.52.140.0/22
176.52.152.0/22
Signature Algorithm: sha256WithRSAEncryption
00:6c:54:27:12:9b:d0:0d:13:98:3c:56:a4:68:65:cd:3b:9e:
b6:9f:cb:14:df:f7:3d:84:e6:d3:3f:df:47:f7:d0:e3:ca:cb:
e6:4c:46:39:7b:36:84:d0:ac:d0:43:89:65:33:c5:a3:19:1b:
8a:92:b7:6e:ab:91:8c:06:a6:78:ec:0a:97:7e:05:1e:c8:6f:
c7:6c:71:05:ae:f1:e3:4f:42:b4:31:d3:5e:d6:01:3a:57:a3:
fe:a3:29:96:21:4c:2a:99:8b:b2:30:49:e3:06:a6:42:62:ca:
a5:fa:0f:44:ef:a0:bd:86:e2:4d:7c:79:10:cd:f5:7e:e0:c3:
86:b2:1b:d0:88:6a:5f:71:db:d0:fe:0a:2e:4b:c9:98:13:2b:
97:2c:c8:3a:25:e6:0c:7f:18:55:08:c6:5e:58:6a:c2:c7:8c:
83:ac:85:b8:3c:55:e6:df:ff:3b:e5:ee:d8:fa:07:c2:84:c3:
d2:4d:a3:72:2b:b9:b5:54:26:3a:f2:3e:33:51:00:b1:47:59:
f7:76:75:f8:8f:ee:b8:d5:f7:d2:f9:da:f1:c4:05:b0:72:69:
70:25:d3:af:41:f2:9d:a7:ce:b7:ce:83:68:6d:80:fb:06:5b:
41:7c:46:66:d6:7b:6a:a0:aa:ac:94:74:e0:b4:c8:ed:09:24:
58:79:2a:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:04 2024 by rpki-client on console-ams.rpki-client.org