Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/knvN1UHNKSHkq4EDjf12GQlfwRI.roa
File: knvN1UHNKSHkq4EDjf12GQlfwRI.roa (raw, json)
Hash identifier: 4XyXj0sQj9PZVQw5jtkH5ugo/LROEchXbKbvn4AsN2M=
Subject key identifier: 92:7B:CD:D5:41:CD:29:21:E4:AB:81:03:8D:FD:76:19:09:5F:C1:12
Certificate issuer: /CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Certificate serial: 01859D863F5863998E2554789C05BCB7AE6C
Authority key identifier: FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/knvN1UHNKSHkq4EDjf12GQlfwRI.roa
Signing time: Tue 10 Jan 2023 21:11:38 +0000
ROA not before: Tue 10 Jan 2023 21:11:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 176.52.144.0/20 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:9d:86:3f:58:63:99:8e:25:54:78:9c:05:bc:b7:ae:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Validity
Not Before: Jan 10 21:11:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=927bcdd541cd2921e4ab81038dfd7619095fc112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:fd:ec:89:1b:fd:91:02:53:a6:d6:03:3e:d4:
9e:be:a6:5c:af:e8:c7:5f:5a:d9:b1:ff:50:87:bd:
6a:ac:71:57:d1:17:cd:94:3c:05:e9:03:08:26:b6:
01:31:4a:47:57:66:17:33:06:d0:1f:78:cc:b3:48:
44:11:71:c3:e0:8b:13:f1:ad:66:bc:2e:4d:9e:a6:
30:42:2b:3c:59:e1:e7:b9:20:5b:85:5a:29:a6:e1:
9e:8f:69:19:5e:03:0c:b4:49:cd:50:dc:0a:9e:49:
33:4e:c0:80:de:48:ac:64:10:74:05:ba:b6:83:33:
70:42:20:e8:ac:a8:5c:60:68:f2:a4:33:d8:de:9f:
78:a3:ea:21:c9:ea:70:3d:c9:3c:4e:de:63:b2:c6:
d0:f6:f5:84:7d:2c:2f:31:56:ab:1f:bf:3b:86:25:
a6:8e:73:70:6e:33:39:aa:fc:a4:75:74:7d:49:a4:
ba:26:79:60:1f:d2:7d:41:c6:51:18:4c:4a:a5:31:
75:fd:03:9f:df:20:40:5a:7c:bb:b0:8f:9f:67:87:
bb:e9:eb:9d:87:a6:89:f2:88:83:2e:c9:d7:66:d8:
07:33:c5:7d:1d:a8:4a:a1:3a:1c:d2:a2:fe:3d:1e:
c3:72:19:50:c0:3d:bc:69:a4:49:05:91:a1:43:6d:
52:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:7B:CD:D5:41:CD:29:21:E4:AB:81:03:8D:FD:76:19:09:5F:C1:12
X509v3 Authority Key Identifier:
keyid:FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/knvN1UHNKSHkq4EDjf12GQlfwRI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/_neeViOLby6gaO3k4grvAMkEEys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.52.144.0/20
Signature Algorithm: sha256WithRSAEncryption
4f:b6:35:c5:96:a2:46:6b:0a:ff:04:d2:2e:00:9b:51:a8:8b:
27:66:0a:10:42:fe:76:b7:95:f6:52:c0:d3:f9:0d:3e:83:56:
e9:43:d6:a1:55:6e:72:f4:8d:5d:b0:d0:47:47:cb:69:4c:5d:
0a:39:a6:7e:c3:b9:a0:79:c8:df:d4:05:5d:0b:7f:5b:7b:61:
03:20:c0:a4:3b:e5:4c:24:1f:3a:7e:a6:c9:4f:5c:49:0f:dc:
54:a7:c4:ed:85:3c:e2:3e:cf:4a:bf:e0:08:95:3b:07:74:9a:
0f:e4:3f:57:9d:c9:25:10:95:3a:43:68:06:d6:c3:10:89:a1:
c3:65:ca:4d:81:68:4a:5a:a3:4d:4d:93:db:bd:45:de:ce:0d:
e7:10:7b:18:b9:28:10:83:3e:f2:d2:b6:6b:68:4d:03:a7:27:
80:3e:1d:7b:49:7e:c7:68:d1:b8:f6:97:71:e7:92:54:6f:1b:
f7:3b:33:a2:39:e1:ad:39:eb:62:0d:25:9c:1c:95:16:0e:e3:
9c:51:d0:5e:b9:2b:94:18:dc:4c:92:f8:c5:37:49:13:92:d3:
2e:b1:cc:ab:21:35:fd:e6:97:69:80:aa:04:56:9e:c7:4a:bf:
03:48:b5:fc:73:3e:3c:e5:5f:c2:31:17:d7:b3:45:58:02:ad:
cf:58:94:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:13 2024 by rpki-client on console-fra.rpki-client.org