Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/DuEoPUBtcogmYdxlQkCAC2mOXaM.roa
File: DuEoPUBtcogmYdxlQkCAC2mOXaM.roa (raw, json)
Hash identifier: Srd/c8mmLC7+u6JVSILBGSAmtu5yM2vYpTjB8MTEhvE=
Subject key identifier: 0E:E1:28:3D:40:6D:72:88:26:61:DC:65:42:40:80:0B:69:8E:5D:A3
Certificate issuer: /CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Certificate serial: 018335CFBC25FCE56EF1A1D9729C62E8B770
Authority key identifier: FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/DuEoPUBtcogmYdxlQkCAC2mOXaM.roa
Signing time: Tue 13 Sep 2022 07:45:49 +0000
ROA not before: Tue 13 Sep 2022 07:45:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 0
IP address blocks: 92.53.176.0/22 maxlen: 22
176.52.128.0/22 maxlen: 24
176.52.140.0/22 maxlen: 22
92.53.160.0/22 maxlen: 24
92.53.164.0/22 maxlen: 24
92.53.172.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:35:cf:bc:25:fc:e5:6e:f1:a1:d9:72:9c:62:e8:b7:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Validity
Not Before: Sep 13 07:45:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0ee1283d406d72882661dc654240800b698e5da3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c4:d8:64:f0:c3:7f:04:3d:7d:8a:5a:de:a9:
dd:a2:c2:61:ca:3d:70:2e:74:be:77:fd:0f:ba:ea:
5a:14:58:33:70:fb:23:bf:7d:c4:d9:bc:3f:99:d1:
8e:33:1d:3d:e0:86:44:a7:cb:e0:34:6b:cb:5b:bf:
1b:77:10:9f:14:cb:a3:f5:a8:58:8b:b7:38:23:e9:
c9:55:ae:59:52:a6:f9:b8:a7:22:98:c1:0f:fd:05:
7c:7b:33:fc:86:86:9f:5f:02:8d:c2:cb:ff:b1:0d:
e9:54:44:a3:04:a7:53:88:c8:d8:9d:56:28:48:37:
bd:01:7e:87:39:a4:43:62:fc:e8:b7:1f:c4:5d:07:
23:f6:aa:d9:fa:ba:8b:0c:e1:90:34:0a:37:7b:92:
80:e0:ee:1f:aa:98:79:6c:42:97:23:bc:13:95:d1:
d4:c7:e1:0f:44:2f:78:1d:ca:7a:40:b4:5d:6f:5e:
78:03:7b:fb:e8:c6:70:10:44:43:72:6e:24:82:53:
9c:26:4c:1b:a1:09:7e:38:ac:8f:5c:f5:0e:88:8f:
95:37:7d:6d:d3:f5:36:f8:71:30:0c:8a:67:16:79:
d7:8f:5b:63:69:8a:69:61:3c:43:9a:25:c3:0a:2e:
71:49:90:c4:02:fe:b3:27:ec:86:8f:e5:b1:8c:27:
45:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:E1:28:3D:40:6D:72:88:26:61:DC:65:42:40:80:0B:69:8E:5D:A3
X509v3 Authority Key Identifier:
keyid:FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/DuEoPUBtcogmYdxlQkCAC2mOXaM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/_neeViOLby6gaO3k4grvAMkEEys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.53.160.0/21
92.53.172.0-92.53.179.255
176.52.128.0/22
176.52.140.0/22
Signature Algorithm: sha256WithRSAEncryption
13:18:24:27:dd:cb:65:63:39:9d:cc:73:05:a7:e2:bf:49:ef:
78:18:fc:cb:8a:89:c6:b0:5a:50:f1:da:65:d4:05:11:f3:2e:
ca:08:3e:6b:f4:8b:c1:e1:1d:fc:8a:4b:3e:c9:84:a8:60:7a:
2b:6c:ad:fd:f1:3d:04:1b:87:7b:f3:93:72:43:ac:11:17:0f:
c0:09:6d:b6:ce:6e:dd:ff:82:3c:94:37:46:a8:ca:1d:20:38:
95:ff:43:c8:1b:fe:1b:88:00:53:cf:e1:f1:92:64:41:93:58:
8e:1e:7e:64:ff:83:d2:14:68:c4:41:70:8c:c0:9f:9d:fe:9b:
68:3f:f2:27:7d:15:2e:f4:59:e0:ac:a7:55:8e:91:4f:30:e7:
19:b9:d9:b0:77:a3:e2:da:15:39:83:89:88:a0:63:dc:e6:fb:
c7:14:9d:da:4b:d5:e8:24:ed:fd:8e:6b:c2:13:cb:cc:03:1a:
33:52:07:65:3e:cf:ba:13:d9:87:76:09:8c:7c:61:0b:09:e6:
d2:49:13:bb:5d:38:12:e1:52:b1:c3:e9:37:3c:fc:3e:fd:44:
d8:6a:32:ba:eb:8e:8f:ee:71:26:ff:33:04:45:6a:36:6f:a4:
49:bf:a9:5f:17:18:c7:6f:f5:84:95:f2:a7:bd:e8:3c:b3:b6:
b1:f9:86:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:13 2024 by rpki-client on console-fra.rpki-client.org