Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/b2fKBl5xgr6lMsh9aDZQCtiV0x0.roa
File: b2fKBl5xgr6lMsh9aDZQCtiV0x0.roa (raw, json)
Hash identifier: trt6fKD4mnqy2g2Fhf1QmB8AQHCHn2hNcEmYlTlRLZ0=
Subject key identifier: 6F:67:CA:06:5E:71:82:BE:A5:32:C8:7D:68:36:50:0A:D8:95:D3:1D
Certificate issuer: /CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Certificate serial: 048184E1
Authority key identifier: FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/b2fKBl5xgr6lMsh9aDZQCtiV0x0.roa
Signing time: Wed 30 Mar 2022 07:29:51 +0000
ROA not before: Wed 30 Mar 2022 07:29:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207461
IP address blocks: 176.52.156.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75597025 (0x48184e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Validity
Not Before: Mar 30 07:29:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6f67ca065e7182bea532c87d6836500ad895d31d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6a:04:13:96:2f:6e:35:ae:17:49:a1:56:d4:
cf:b8:a1:87:fa:fa:d5:82:d1:42:0d:ee:14:94:7d:
e2:70:7d:ab:0f:d6:bd:35:c9:70:66:b4:e5:bd:d2:
1f:92:06:64:59:ca:38:4b:ca:11:cf:28:98:ab:0e:
91:e0:3a:d9:90:4e:99:46:18:ab:d0:3e:61:f9:b8:
be:f5:5f:2c:b6:63:f5:43:b8:8d:a3:7a:c2:64:02:
7e:bf:14:08:4e:68:d7:6f:3a:7b:e2:31:f9:89:ec:
51:bf:e0:1a:93:2e:86:a4:97:6c:b8:7c:0e:39:15:
68:2e:60:00:fc:1c:cd:4e:69:a4:a4:4b:08:e6:ef:
f5:7c:c3:a6:64:2c:56:0e:c2:3f:1f:d0:2f:76:7d:
ad:8c:7a:6f:2b:0a:50:6f:1a:68:f5:11:7b:8f:7f:
ff:4d:2b:0c:65:38:c6:0a:12:12:42:98:94:43:54:
31:e2:24:08:07:9c:c4:4a:64:07:ec:ac:b8:e0:a6:
c4:3f:17:e4:16:d0:78:5e:7d:20:0e:b4:89:25:78:
86:7e:b4:6f:ed:55:6a:aa:ef:c6:41:09:e5:1a:94:
f3:69:82:b4:49:d7:39:a6:94:06:8c:8f:94:fc:e6:
cd:ef:18:40:31:af:14:83:6a:1e:6e:47:65:6c:a5:
97:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:67:CA:06:5E:71:82:BE:A5:32:C8:7D:68:36:50:0A:D8:95:D3:1D
X509v3 Authority Key Identifier:
keyid:FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/b2fKBl5xgr6lMsh9aDZQCtiV0x0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/_neeViOLby6gaO3k4grvAMkEEys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.52.156.0/22
Signature Algorithm: sha256WithRSAEncryption
34:dc:0f:9f:69:b7:56:77:5c:0e:47:b2:2a:af:77:9c:83:97:
e5:cc:b8:38:53:34:00:50:01:80:4c:2e:10:5f:bb:fa:20:65:
57:c4:93:94:32:fc:46:f5:6d:a3:12:16:72:2b:9f:6c:98:7e:
53:c9:f5:ac:e2:b7:ca:96:e7:f7:06:51:cc:73:1b:00:7e:57:
9d:27:10:eb:ef:e2:75:1c:e7:89:d3:73:d4:ef:db:c2:af:99:
92:45:98:7b:58:3c:61:b5:86:07:c1:a6:88:db:5f:38:34:74:
d1:3e:31:8f:e2:eb:f4:fc:4e:43:7d:80:66:00:44:4b:06:37:
dd:f9:11:9a:ce:10:51:ca:36:56:e9:38:c7:09:76:33:9b:1f:
95:50:a2:b5:b8:0a:e2:e5:37:51:38:b0:49:34:5e:16:44:9d:
ec:c9:0a:6c:75:04:d8:8c:99:52:91:53:2e:ac:11:3b:1a:eb:
55:0a:c0:40:c3:6c:45:79:35:18:75:ca:fe:17:b5:45:40:1a:
ca:a4:97:49:39:33:81:49:77:62:fc:96:4c:c2:a2:1f:9d:03:
1a:23:3e:9e:4b:78:b8:91:6f:93:70:55:54:1c:a3:5e:50:2a:
a2:e9:43:1c:3b:44:81:57:76:b5:73:52:2c:6a:f1:86:58:0e:
05:b3:a9:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:05 2024 by rpki-client on console-ams.rpki-client.org