Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/gd2ktzAiEFa54MG7QWifMLLCsYI.roa
File: gd2ktzAiEFa54MG7QWifMLLCsYI.roa (raw, json)
Hash identifier: kSU6wX/zyQ4mMldCrYWnl4egJY+AID+eaCSGpS22n3A=
Subject key identifier: 81:DD:A4:B7:30:22:10:56:B9:E0:C1:BB:41:68:9F:30:B2:C2:B1:82
Certificate issuer: /CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Certificate serial: 0530F470
Authority key identifier: FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/gd2ktzAiEFa54MG7QWifMLLCsYI.roa
Signing time: Sat 04 Jun 2022 08:56:20 +0000
ROA not before: Sat 04 Jun 2022 08:56:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 176.52.128.0/22 maxlen: 24
176.52.144.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87094384 (0x530f470)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Validity
Not Before: Jun 4 08:56:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=81dda4b730221056b9e0c1bb41689f30b2c2b182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:39:cc:db:e2:eb:06:a6:97:ed:8a:f5:cc:21:
ad:9a:f4:62:f8:d9:5c:1d:29:2d:87:b4:16:ba:cb:
fd:c9:ae:d4:4f:7b:ca:d8:81:9b:f3:ba:87:2a:09:
10:78:73:39:c5:4b:07:ef:79:5c:47:11:56:81:e3:
09:45:27:34:23:73:82:ff:d5:b7:cc:e0:33:39:94:
76:3b:0f:1f:5f:e6:d6:90:bf:4a:e6:17:da:9a:0e:
ec:57:c6:b6:43:7f:54:96:68:5e:87:b7:6a:56:59:
78:de:63:9d:7f:2b:a1:3c:6f:3f:2e:27:44:c6:cb:
07:d3:c0:b3:a6:de:52:70:32:40:fc:ec:44:15:25:
02:9e:1f:b4:59:ca:2c:61:dc:95:f1:73:9f:47:ec:
06:a0:7f:3e:b6:3b:b0:2c:a9:39:b0:19:8b:4f:a2:
eb:29:a9:59:43:ed:f5:9a:b2:07:e3:f6:80:2f:0d:
a9:c8:c4:fa:6a:c2:b8:57:90:23:cf:c0:30:5c:28:
bc:eb:19:6f:59:fd:3f:a5:bf:10:e4:66:93:6a:4f:
98:c9:86:4e:f1:99:9a:09:ed:07:ae:f6:6b:60:a2:
10:d5:56:ee:d5:5f:09:ef:b2:b5:b7:19:ae:55:cc:
ab:12:e7:de:db:55:60:68:06:d4:52:49:02:66:87:
81:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:DD:A4:B7:30:22:10:56:B9:E0:C1:BB:41:68:9F:30:B2:C2:B1:82
X509v3 Authority Key Identifier:
keyid:FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/gd2ktzAiEFa54MG7QWifMLLCsYI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/_neeViOLby6gaO3k4grvAMkEEys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.52.128.0/22
176.52.144.0/22
Signature Algorithm: sha256WithRSAEncryption
a0:08:64:7b:b4:bf:22:f3:73:29:e2:7b:ed:ca:ae:98:27:f6:
27:9b:24:34:94:80:56:e5:0f:3c:62:10:9f:ae:6e:09:44:e0:
fd:24:be:e6:4b:bf:a6:d4:7b:3f:32:d5:ae:89:e3:92:d4:47:
8c:65:22:08:9d:e3:83:9f:f8:27:61:eb:c5:26:af:d6:33:f0:
0a:9c:93:fb:79:f6:32:1b:ab:61:87:8a:c8:ef:04:00:7d:d6:
57:fd:a8:a5:39:c5:fa:fd:a6:fa:8e:8f:c5:52:74:cc:36:5c:
1f:7a:21:2a:be:1c:d0:ea:8f:1c:ec:e4:3b:fe:0e:4f:c6:74:
24:26:fb:b5:50:b3:3a:38:d5:ca:e5:51:16:2b:bd:d6:38:6e:
97:5c:a1:77:65:46:8e:3f:3d:f6:fc:17:6a:c9:e5:bb:55:d2:
6c:66:98:dc:54:50:e2:2a:c6:f7:8d:22:5e:91:0f:60:26:de:
53:b2:b7:88:5b:3b:6d:d9:14:98:52:f7:dd:d3:50:b1:f4:15:
e3:36:7b:36:70:4b:06:d9:a5:be:53:10:ac:28:dc:61:c3:9d:
39:0b:7a:d0:6c:bf:d5:1b:f2:fc:65:2e:2a:e8:a5:7b:f3:18:
2d:ef:3d:4d:5c:ea:47:03:1f:26:b5:7e:d3:ad:01:92:0a:d9:
cb:0f:e7:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:05 2024 by rpki-client on console-ams.rpki-client.org