Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/Dow76N4nQnC8mWMq0e4MieEh2HQ.roa
File: Dow76N4nQnC8mWMq0e4MieEh2HQ.roa (raw, json)
Hash identifier: DzwtpdeYlPS7CIK2NNJ7pw58rbKx0wRZA7UWf9ym/Xo=
Subject key identifier: 0E:8C:3B:E8:DE:27:42:70:BC:99:63:2A:D1:EE:0C:89:E1:21:D8:74
Certificate issuer: /CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Certificate serial: 05176704
Authority key identifier: FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/Dow76N4nQnC8mWMq0e4MieEh2HQ.roa
Signing time: Fri 27 May 2022 06:56:13 +0000
ROA not before: Fri 27 May 2022 06:56:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204968
IP address blocks: 176.52.132.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85419780 (0x5176704)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Validity
Not Before: May 27 06:56:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0e8c3be8de274270bc99632ad1ee0c89e121d874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:62:a6:98:0f:db:91:9b:1b:93:ba:3a:db:44:
72:e9:3c:81:dc:e1:a2:f4:e3:0f:87:be:9a:3e:94:
46:f7:06:37:6f:91:ae:71:53:7e:07:8d:0f:bd:d3:
7a:8c:6f:68:c5:76:b6:e0:d4:4b:fd:b9:47:5d:e5:
67:ad:97:30:b1:9a:1a:b1:3b:b2:b1:88:90:6f:ca:
14:e8:00:0c:f7:44:95:85:9f:ba:88:0f:1d:ba:35:
6b:3b:e4:ac:b6:49:60:0e:31:13:39:e5:7f:3e:8b:
e6:e0:c4:5a:3f:bf:1e:d0:42:8f:2e:b8:6f:c7:7d:
a2:e6:f0:79:d2:8f:09:84:76:87:bf:54:74:38:52:
a4:b6:9d:d1:13:af:c6:e6:25:84:16:51:73:75:da:
26:63:97:93:e0:1f:ae:2b:89:73:3c:74:3d:67:19:
75:f4:b8:45:d4:92:a6:35:7b:36:45:13:c3:75:cf:
0a:4b:e0:f6:aa:f4:1a:1c:17:19:f8:ea:c5:3b:6c:
46:71:a7:6e:39:06:15:65:ac:3f:f3:65:a6:cd:d9:
f0:ad:4f:10:27:40:23:4f:4b:b1:c5:36:a5:d3:a0:
82:7f:81:51:29:6a:3b:b1:00:24:fe:5a:23:55:55:
f8:a4:b5:1f:31:67:fe:71:ba:cf:fa:8a:ea:78:1f:
dd:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:8C:3B:E8:DE:27:42:70:BC:99:63:2A:D1:EE:0C:89:E1:21:D8:74
X509v3 Authority Key Identifier:
keyid:FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/Dow76N4nQnC8mWMq0e4MieEh2HQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/_neeViOLby6gaO3k4grvAMkEEys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.52.132.0/22
Signature Algorithm: sha256WithRSAEncryption
14:f6:ee:2e:af:23:6a:ea:a4:f1:fa:46:79:9b:7f:3b:c2:22:
36:98:8a:38:5b:11:ed:96:32:5d:8f:b8:6c:61:04:d8:58:b4:
8b:7e:29:84:3c:ad:31:3b:83:36:83:00:a8:14:94:7e:6e:57:
d4:cc:61:d0:7e:e4:51:d8:79:4c:89:b2:46:1c:c3:28:5b:fc:
a3:44:41:5c:12:d4:31:55:9e:0d:a3:69:6f:cc:1d:29:e1:6b:
71:0b:4d:5b:1d:76:6b:b4:53:11:07:49:d7:4e:1a:b1:7f:39:
5e:16:2a:a2:a6:bf:bb:d3:98:98:f4:dc:c0:ce:e5:e8:da:ea:
ab:b6:1e:60:38:31:24:e9:71:7c:98:88:b4:7a:56:91:25:3f:
c1:d8:88:50:32:3a:af:8c:e7:b9:dc:c1:d4:5f:1d:04:70:02:
05:e3:f1:2c:b2:ba:9e:27:a3:92:4e:c4:94:0e:d3:59:82:65:
f1:eb:08:49:a4:8d:c0:9f:ac:d6:32:cc:6d:97:a6:b9:1f:36:
d7:62:68:5c:dc:af:cc:c9:8f:e5:ec:09:4c:1b:7c:dc:19:7a:
d9:cd:1e:6b:d5:d6:4e:65:8f:44:a2:4d:3d:97:1a:74:63:81:
24:fb:6a:bb:d5:18:7f:61:d0:40:8f:36:a0:58:c6:66:3a:0d:
7a:33:a1:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:04 2024 by rpki-client on console-ams.rpki-client.org