Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/KkQP5wiVazggsdNvteCZegmf500.roa
File: KkQP5wiVazggsdNvteCZegmf500.roa (raw, json)
Hash identifier: DQiUB2cXuJZeEx/K378IVJkDHni1cQjmDQ5jmPSU/ic=
Subject key identifier: 2A:44:0F:E7:08:95:6B:38:20:B1:D3:6F:B5:E0:99:7A:09:9F:E7:4D
Certificate issuer: /CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Certificate serial: 0182279095C9FDCB771DE1EBCBCF644A6F1B
Authority key identifier: FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/KkQP5wiVazggsdNvteCZegmf500.roa
Signing time: Fri 22 Jul 2022 20:19:23 +0000
ROA not before: Fri 22 Jul 2022 20:19:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204968
IP address blocks: 176.52.132.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:27:90:95:c9:fd:cb:77:1d:e1:eb:cb:cf:64:4a:6f:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Validity
Not Before: Jul 22 20:19:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2a440fe708956b3820b1d36fb5e0997a099fe74d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:0f:8c:61:b2:ec:cb:c9:03:84:59:db:79:52:
7e:4f:23:67:0d:54:8f:d5:f5:36:c3:ae:57:32:f6:
5e:78:3d:7f:66:7c:4b:e2:b9:dd:b7:3a:3a:0a:8f:
f9:08:86:cb:d8:c3:2e:66:d3:6f:b5:fd:22:7c:d6:
3e:c3:ab:6a:40:5a:c1:0b:49:9a:ac:b0:c2:81:a0:
20:56:01:8b:c6:24:b0:e9:63:d2:49:60:37:38:bd:
e3:79:36:57:ea:42:74:fb:cb:73:97:0e:a4:cc:2a:
bc:64:9d:dc:d5:a8:6b:a2:0d:09:e3:dd:95:94:33:
92:e0:33:fd:96:cb:df:a6:a9:19:45:9f:47:ba:f5:
f2:0d:9a:90:b4:7f:81:a1:15:91:17:8b:a1:9e:7a:
c1:5e:c3:c7:b6:c0:98:ae:a3:6b:75:41:05:73:7d:
b8:00:3d:57:87:60:63:9d:70:51:dc:5d:dc:35:0d:
0c:b3:d7:6e:f4:41:43:26:f7:f5:d7:c3:54:26:1e:
1b:25:47:8a:d2:e1:7a:15:99:6d:e9:48:15:9a:80:
59:55:f4:6a:4f:0f:b0:7b:1a:72:37:55:9e:c4:68:
79:32:b1:87:95:0f:a6:c4:40:0e:67:72:93:4e:79:
59:1f:2f:ed:95:a9:d7:b3:cc:b7:a7:d1:24:a8:8a:
d6:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:44:0F:E7:08:95:6B:38:20:B1:D3:6F:B5:E0:99:7A:09:9F:E7:4D
X509v3 Authority Key Identifier:
keyid:FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/KkQP5wiVazggsdNvteCZegmf500.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/_neeViOLby6gaO3k4grvAMkEEys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.52.132.0/22
Signature Algorithm: sha256WithRSAEncryption
3c:7a:30:b5:f6:38:2c:0b:1b:f9:36:11:ae:fa:e2:5e:57:98:
2e:d2:76:0f:df:98:8f:0a:7f:36:c3:af:34:de:d8:56:33:2b:
20:a4:66:8f:a5:ee:38:b8:6f:b4:3d:43:2b:f5:55:7f:45:82:
da:d7:5c:1d:5b:1c:e7:0a:c3:8c:a5:07:dd:a4:ad:4d:ce:af:
98:d1:29:98:60:92:ac:56:7f:28:fa:e6:eb:6f:24:aa:bf:95:
71:8b:16:92:5b:dd:65:ce:72:95:64:56:bc:2b:45:49:f4:58:
ea:45:99:8a:ab:81:b9:49:38:3e:30:c7:ad:82:5f:0c:84:86:
dd:fd:dc:10:56:49:f0:48:bd:30:a5:63:f7:78:a7:2b:ef:c3:
46:65:0d:e0:b7:9d:f2:ed:96:18:83:c5:e9:c9:17:51:68:5c:
73:4a:cf:76:1b:79:1a:fb:41:bf:9d:0c:28:64:de:9e:62:6c:
4e:e0:4f:a6:0a:0d:7f:d0:d8:88:02:27:55:78:29:5e:95:00:
ae:27:2d:d0:0d:2f:4d:21:7e:e3:92:5c:11:ec:74:a9:ae:49:
06:40:98:d5:13:7c:a4:03:0b:65:b8:21:e8:21:2f:3d:e4:dd:
b0:a0:6c:a1:6c:f0:45:77:36:0d:68:1f:d3:ef:99:e1:04:45:
6f:7c:68:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:04 2024 by rpki-client on console-ams.rpki-client.org