Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/cPKXevB3KCv6x-SDw8glfFVSxTw.roa
File: cPKXevB3KCv6x-SDw8glfFVSxTw.roa (raw, json)
Hash identifier: JatBRopLhpAajGU2nvDwJD50wS7jkdnKDdWUMEPhLTo=
Subject key identifier: 70:F2:97:7A:F0:77:28:2B:FA:C7:E4:83:C3:C8:25:7C:55:52:C5:3C
Certificate issuer: /CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Certificate serial: 0391A35E
Authority key identifier: FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/cPKXevB3KCv6x-SDw8glfFVSxTw.roa
Signing time: Sat 01 Jan 2022 11:01:25 +0000
ROA not before: Sat 01 Jan 2022 11:01:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1299
IP address blocks: 176.52.140.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59876190 (0x391a35e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Validity
Not Before: Jan 1 11:01:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=70f2977af077282bfac7e483c3c8257c5552c53c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:94:79:2d:e5:ba:a6:c1:8a:a2:36:26:c2:c2:
7f:ab:6c:d8:c1:b8:e2:8c:85:c5:0d:2e:ee:86:b2:
11:30:f0:4b:11:b5:39:09:c2:67:a7:3b:5f:cd:55:
18:d9:89:4e:7d:63:09:49:b3:c3:4a:b5:7d:89:d4:
e4:47:83:97:79:83:ef:46:ed:ce:03:fa:5c:d4:57:
3b:56:22:21:a8:8e:b7:c8:f0:12:9f:5e:cb:2f:34:
bc:47:62:5d:e1:16:24:9e:13:6d:ac:dd:72:ab:6b:
3e:eb:c3:6b:b3:fe:1e:58:c8:7f:ca:55:db:9a:c1:
7a:e1:26:74:53:19:a8:c8:09:ea:02:b3:93:04:ae:
d1:dd:94:1d:36:71:fe:4f:ab:ef:5d:c7:cc:7c:ae:
e3:a5:87:ff:e5:0f:52:8a:9d:cf:7f:0c:a6:b4:4a:
44:c5:1c:4d:3f:bf:e8:2a:09:8b:bb:62:99:18:23:
15:bd:13:4a:e1:11:86:dd:02:86:9d:0f:97:6e:64:
b6:30:08:02:a2:2a:98:1a:1e:e6:b9:35:a7:f7:a1:
76:3b:03:d5:bd:95:bb:3d:a7:16:8a:ce:cb:18:d0:
26:3b:35:1f:fb:0f:10:77:7c:29:93:10:46:00:36:
75:de:aa:ca:f3:5e:e4:5d:c3:ee:66:8f:58:05:4b:
aa:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:F2:97:7A:F0:77:28:2B:FA:C7:E4:83:C3:C8:25:7C:55:52:C5:3C
X509v3 Authority Key Identifier:
keyid:FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/cPKXevB3KCv6x-SDw8glfFVSxTw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/_neeViOLby6gaO3k4grvAMkEEys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.52.140.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:16:00:b8:fc:cb:49:37:95:b7:16:5a:4c:e2:b6:ae:e4:a7:
43:29:44:be:67:ea:46:ed:98:34:25:9d:e9:02:96:7b:f3:3a:
49:0a:37:e2:7e:72:78:56:18:8f:5d:99:3c:1c:89:e5:81:92:
e5:e3:81:2f:61:cc:58:4b:72:5b:df:0d:3c:4a:4d:9a:70:20:
6f:fc:d1:3f:e6:30:1a:60:82:1d:8f:2e:0d:4d:8d:39:11:0f:
f1:dc:c2:c3:89:f0:ad:60:80:f6:94:d2:c3:0e:7a:8e:a1:18:
4b:e1:c5:6d:b9:57:78:cb:60:c3:d2:81:ae:27:8f:de:84:0c:
f2:25:44:a2:4a:4a:68:15:27:fc:98:4d:b9:bd:52:e6:11:68:
b5:12:bc:87:31:8a:e4:bd:96:e8:8c:c3:52:21:3f:4c:6c:01:
bc:86:41:9c:25:3f:c7:a6:4d:f5:c1:86:0a:60:34:a0:78:8a:
cb:75:0b:b3:db:90:a2:4d:4b:c0:40:84:d1:a5:16:00:80:a7:
ae:c5:fb:7c:82:a3:54:37:6f:bb:59:b3:d3:40:6b:12:54:db:
ed:85:c5:1f:6c:93:0b:8a:f4:ce:1b:63:2a:a0:d8:6f:6d:4f:
f6:33:1b:58:ec:e2:ff:96:0a:2b:53:84:54:54:cd:f3:52:15:
b1:61:92:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:13 2024 by rpki-client on console-fra.rpki-client.org