Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/FkpZbKoEOVvCOJdUSOw32ze7vJw.roa
File: FkpZbKoEOVvCOJdUSOw32ze7vJw.roa (raw, json)
Hash identifier: 2FHLl1cOJOF4SGAuevvbdx7gM5RLR0H1twZtBQpzfbo=
Subject key identifier: 16:4A:59:6C:AA:04:39:5B:C2:38:97:54:48:EC:37:DB:37:BB:BC:9C
Certificate issuer: /CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Certificate serial: 051CC8BA
Authority key identifier: FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/FkpZbKoEOVvCOJdUSOw32ze7vJw.roa
Signing time: Fri 27 May 2022 13:53:14 +0000
ROA not before: Fri 27 May 2022 13:53:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60602
IP address blocks: 176.52.148.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85772474 (0x51cc8ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Validity
Not Before: May 27 13:53:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=164a596caa04395bc238975448ec37db37bbbc9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:8c:65:be:a0:37:cc:01:5b:0e:4f:c5:48:73:
9f:d2:52:98:f0:cf:29:74:0f:17:d1:b0:ac:46:ed:
3c:86:0d:85:ac:f4:0c:3a:02:c3:1d:74:08:de:fa:
6f:43:0e:cc:81:64:c8:93:06:62:9a:1a:8a:3e:49:
f1:14:97:12:1d:5d:ad:84:b4:10:99:60:20:e7:f0:
9b:62:54:06:1e:71:f7:c7:e6:60:79:80:ce:d7:28:
c4:a9:cd:95:1c:6b:f5:6a:79:b1:af:8f:33:0b:f7:
04:51:3b:02:79:c8:93:51:d3:90:9a:2f:9d:b7:48:
f9:cc:f8:2f:83:c8:bd:75:9f:db:44:66:81:59:f9:
65:4f:68:a8:ff:cc:f5:3e:a4:b4:d4:58:af:f5:24:
e1:17:81:c3:47:66:5a:10:12:41:7f:de:36:14:31:
8e:cf:7c:68:92:2b:bd:48:a4:4a:f2:93:cc:8b:8e:
cd:84:e2:d0:7d:ad:ca:73:5e:a0:99:13:e0:6b:43:
e7:ba:08:ee:2f:65:76:84:ec:4e:34:9e:e5:c3:ba:
88:31:fc:72:59:fa:e9:1e:7e:66:3d:d6:cd:24:f1:
90:7e:b3:b7:52:81:b5:ef:2e:df:a8:13:0f:06:5a:
90:6c:1e:a0:57:5b:d1:18:61:9c:06:cd:5c:3f:b0:
4e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:4A:59:6C:AA:04:39:5B:C2:38:97:54:48:EC:37:DB:37:BB:BC:9C
X509v3 Authority Key Identifier:
keyid:FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/FkpZbKoEOVvCOJdUSOw32ze7vJw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/_neeViOLby6gaO3k4grvAMkEEys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.52.148.0/22
Signature Algorithm: sha256WithRSAEncryption
5d:6b:cc:fb:07:dd:e1:08:b4:5d:48:5f:8f:22:90:d2:32:2c:
1c:bc:99:ff:e3:30:d6:aa:7b:51:9b:a7:e5:ef:5a:b4:67:33:
8f:c7:7b:e6:e1:0f:08:03:94:f5:ac:83:b5:da:bc:46:7f:b8:
da:3f:02:7a:c4:85:04:66:11:69:72:f9:ca:13:86:23:41:dc:
c4:52:b3:e0:0c:79:7c:8b:76:a2:e8:29:39:fa:34:55:07:10:
eb:b9:75:fe:3b:e6:59:4d:6b:d8:f3:a7:c3:25:dd:3e:21:22:
c1:f1:b6:80:3a:4a:26:44:eb:72:62:84:8b:80:a8:37:cd:ef:
db:0e:a5:99:66:32:da:e0:62:80:eb:76:1d:be:56:d8:ab:3a:
0b:83:40:19:31:d4:49:44:42:bd:30:1f:82:1a:cd:f1:a7:b0:
b9:13:ce:3a:36:4b:58:2d:2b:85:79:4f:69:50:1c:46:70:89:
06:d2:e6:9c:4b:af:37:6a:e9:fd:c6:aa:ff:49:59:7f:a1:49:
4b:9d:53:98:56:ba:23:f4:84:5b:9d:fd:27:69:06:9e:45:9b:
ae:23:11:20:f4:0e:43:b1:b4:ff:55:25:ed:a5:34:f1:d6:91:
97:17:7e:d5:8f:ed:00:2b:dd:86:28:54:f3:2f:9a:04:c0:d1:
eb:51:69:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:04 2024 by rpki-client on console-ams.rpki-client.org