Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/7dWJav5KCbCrLKIpp0ax7OjReh4.roa
File: 7dWJav5KCbCrLKIpp0ax7OjReh4.roa (raw, json)
Hash identifier: jmjYf5pF+aJ/y1cVziDSLwNqPrlT8kkj5gClP/gGoNk=
Subject key identifier: ED:D5:89:6A:FE:4A:09:B0:AB:2C:A2:29:A7:46:B1:EC:E8:D1:7A:1E
Certificate issuer: /CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Certificate serial: 0424535C
Authority key identifier: FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/7dWJav5KCbCrLKIpp0ax7OjReh4.roa
Signing time: Mon 21 Feb 2022 09:11:20 +0000
ROA not before: Mon 21 Feb 2022 09:11:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210441
IP address blocks: 92.53.176.0/22 maxlen: 24
176.52.132.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69489500 (0x424535c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Validity
Not Before: Feb 21 09:11:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=edd5896afe4a09b0ab2ca229a746b1ece8d17a1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b6:d4:51:97:ed:1d:ab:9e:2f:b5:ed:21:3b:
21:e8:f4:cb:fa:0d:af:30:eb:5e:1b:52:e1:08:27:
4c:75:44:37:8e:dd:1c:dc:b0:1f:0f:e0:bf:41:6d:
91:60:5b:57:64:48:27:ff:5f:fd:2d:17:ca:b5:85:
80:2d:30:b7:a3:99:0a:7c:1b:5f:22:ac:4f:7e:bd:
8f:5b:2e:69:71:5d:de:68:5c:56:c8:ea:4c:ec:1f:
fc:d6:2f:0e:e1:5b:31:77:7b:6c:d3:24:a4:f0:cd:
6a:64:cf:fa:2c:a8:71:15:d7:ca:cb:03:1a:d2:82:
9f:87:b9:b2:d7:8d:ce:9b:f3:58:13:2f:18:fd:75:
c5:78:93:67:f9:20:e8:c8:6b:e6:98:fc:01:e4:b1:
07:f2:f2:87:ad:36:de:02:b3:7d:33:55:0b:99:55:
ac:7c:64:01:f4:35:a5:24:5a:33:1e:28:b6:7e:71:
54:8d:50:dc:f0:7d:7c:bb:57:cc:9e:c0:4c:d9:dc:
fd:92:ce:73:90:eb:36:87:6d:24:57:33:09:5e:4f:
03:6f:1f:55:ab:e1:2b:27:0a:69:ca:45:1f:36:44:
c7:b0:1a:a2:2a:48:6d:ef:5b:39:ed:5a:93:c4:37:
29:86:3c:d7:47:4d:f3:d9:ae:1a:c5:54:56:28:53:
e5:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:D5:89:6A:FE:4A:09:B0:AB:2C:A2:29:A7:46:B1:EC:E8:D1:7A:1E
X509v3 Authority Key Identifier:
keyid:FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/7dWJav5KCbCrLKIpp0ax7OjReh4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/_neeViOLby6gaO3k4grvAMkEEys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.53.176.0/22
176.52.132.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:5d:1d:ae:69:c6:2e:4b:2e:cf:bf:3c:50:83:36:f3:2f:7e:
17:26:cb:a4:dd:a1:d0:b4:ac:6e:c2:7b:d9:1c:46:ff:d8:eb:
e1:71:df:ce:01:c6:33:10:82:e8:c8:50:40:4d:2c:69:59:d7:
f7:fc:b6:a5:65:22:ac:fd:3d:e0:1a:dd:9e:1a:29:f5:82:a7:
15:96:ba:f8:1f:d5:a9:03:b6:c0:2a:df:a1:0a:ba:d2:80:ae:
fe:78:90:d8:24:64:3a:84:e2:fc:6a:96:e5:4d:d8:f6:1e:8f:
68:76:5d:78:ff:32:0a:89:e2:88:50:ff:66:04:de:60:a1:79:
14:02:08:12:68:17:50:f7:cb:bb:8a:82:35:6f:e4:b7:dd:95:
58:d0:b9:3a:9f:a2:ca:20:11:e7:71:56:10:ea:51:b0:62:84:
41:53:af:1e:c3:c4:f5:32:0c:44:d0:31:f6:c8:b3:81:3e:e4:
18:98:1a:15:61:e4:1b:4b:9f:45:12:77:c5:b9:08:c6:89:0b:
fc:c2:84:09:cb:01:40:23:22:e7:c9:1d:5b:ce:ac:a7:33:e9:
aa:2c:70:00:0b:cc:c2:dd:f7:fa:8b:24:94:a7:1c:bf:02:1d:
8e:d8:5a:be:37:10:01:36:25:91:96:47:d3:0b:4a:c5:a7:73:
a2:64:c5:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:13 2024 by rpki-client on console-fra.rpki-client.org