Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/koOXBGDBKeRbI9uqu9jEVTyVvhk.roa
File: koOXBGDBKeRbI9uqu9jEVTyVvhk.roa (raw, json)
Hash identifier: 6LQyjh4jnSBQfSmbx5uKSG+uo8cHdttG2Bm0UBTYVbA=
Subject key identifier: 92:83:97:04:60:C1:29:E4:5B:23:DB:AA:BB:D8:C4:55:3C:95:BE:19
Certificate issuer: /CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Certificate serial: 04CC5147
Authority key identifier: FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/koOXBGDBKeRbI9uqu9jEVTyVvhk.roa
Signing time: Fri 29 Apr 2022 19:10:11 +0000
ROA not before: Fri 29 Apr 2022 19:10:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 0
IP address blocks: 176.52.148.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80499015 (0x4cc5147)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Validity
Not Before: Apr 29 19:10:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9283970460c129e45b23dbaabbd8c4553c95be19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:37:99:90:f1:51:69:d1:3d:f1:cc:7a:ac:df:
b7:e0:8a:4f:41:80:ef:6b:0b:94:ea:32:47:ed:ef:
09:af:78:0f:74:c0:3c:6a:84:8e:83:ac:a7:89:46:
c3:cd:60:aa:21:77:19:56:19:22:6c:a4:9c:a1:d7:
51:d6:4d:35:c7:d3:0a:ac:dd:5f:b5:03:b2:f0:3b:
78:09:2c:c0:f1:9e:31:cb:27:12:06:4c:84:91:51:
e9:f4:a2:67:2d:4c:13:4f:cc:01:cf:b3:df:7e:0e:
df:fb:e5:20:ff:60:c0:07:4a:b6:c8:a8:bf:d9:27:
c1:d9:60:0e:98:ed:a5:78:cd:ab:87:e8:14:46:1c:
b3:7a:8d:8a:4a:80:41:0d:37:f3:ce:fd:8d:af:9a:
1a:31:68:6a:8c:39:08:96:90:2f:ac:60:8b:f0:5c:
64:7b:84:26:b1:ff:4c:8b:ef:d2:83:25:43:3a:f2:
b2:a0:fe:e5:73:a0:32:32:cc:de:1f:e3:73:f9:03:
74:91:e7:02:04:c0:27:03:f6:a8:74:f1:67:be:83:
f3:08:08:f5:b8:bc:78:6b:5a:f1:49:75:17:09:96:
46:2f:de:c1:dd:18:2b:01:e4:f9:9d:cc:c6:7b:bf:
24:b4:0e:78:c0:83:eb:6a:b2:8a:64:14:be:a0:e6:
09:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:83:97:04:60:C1:29:E4:5B:23:DB:AA:BB:D8:C4:55:3C:95:BE:19
X509v3 Authority Key Identifier:
keyid:FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/koOXBGDBKeRbI9uqu9jEVTyVvhk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/_neeViOLby6gaO3k4grvAMkEEys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.52.148.0/22
Signature Algorithm: sha256WithRSAEncryption
10:3f:2b:b6:56:83:37:7d:21:bc:e9:6c:c5:94:7a:ae:19:8c:
75:c6:a4:f3:b5:92:12:88:51:e6:58:83:47:a3:e3:df:8e:38:
06:40:3f:d0:5d:43:2c:e3:f4:05:6e:4f:df:0d:6b:5a:e3:58:
2b:6c:4e:e1:b5:59:2f:45:a9:b7:9e:d1:19:42:96:2b:49:54:
86:96:80:93:0a:31:a2:88:9d:4c:9b:28:ae:12:0d:cc:de:37:
f2:3a:cc:d6:68:c5:ad:a6:01:bd:62:16:70:4b:64:ee:6e:4c:
ca:fc:b5:8e:72:dc:a2:60:6f:4b:e3:f0:5d:36:4e:02:88:8c:
f0:33:18:70:e5:3b:6e:1f:a0:d4:d3:69:f0:43:ab:13:dc:d0:
24:e9:19:7b:51:ce:b1:e6:ea:72:35:7a:e3:a7:59:23:78:58:
1f:b7:16:6f:09:4e:82:97:98:f0:4d:b2:fb:5b:b1:e4:85:16:
12:26:52:52:ff:99:5b:8c:10:c2:f6:77:66:4d:8c:67:20:3b:
4e:ca:a2:53:bf:d3:ad:1d:c3:73:55:24:83:80:0b:8f:9d:3a:
f0:25:52:34:38:34:60:b6:29:fe:0e:fb:c2:20:1a:d7:b9:16:
84:b7:fc:51:40:4e:b8:16:62:0a:a2:91:21:7f:ca:04:46:b0:
b1:b7:78:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:13 2024 by rpki-client on console-fra.rpki-client.org