Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/evF3Dm5rMVMjz3KRTQlL388sxa0.roa
File: evF3Dm5rMVMjz3KRTQlL388sxa0.roa (raw, json)
Hash identifier: FrDpVTcSikCWSvMdTv93NjUvzO4ARghLEuVdKRsCbeY=
Subject key identifier: 7A:F1:77:0E:6E:6B:31:53:23:CF:72:91:4D:09:4B:DF:CF:2C:C5:AD
Certificate issuer: /CN=6bc5de7d7255b7d58260c65a120b164ef10ef903
Certificate serial: 018FC97FF322FE04CF0E1F98E8D6963B6771
Authority key identifier: 6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/evF3Dm5rMVMjz3KRTQlL388sxa0.roa
Signing time: Thu 30 May 2024 12:35:56 +0000
ROA not before: Thu 30 May 2024 12:35:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200509
IP address blocks: 185.177.74.0/23 maxlen: 23
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:c9:7f:f3:22:fe:04:cf:0e:1f:98:e8:d6:96:3b:67:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bc5de7d7255b7d58260c65a120b164ef10ef903
Validity
Not Before: May 30 12:35:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7af1770e6e6b315323cf72914d094bdfcf2cc5ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ec:59:55:ec:c8:fa:76:ca:13:a2:31:00:40:
da:c5:44:b0:df:30:55:d9:d1:06:55:47:3e:8a:20:
0a:4d:16:14:c9:38:c9:64:51:a8:a5:81:b3:5c:2e:
8b:7a:d0:b5:bf:69:46:d5:84:9b:28:c5:78:37:29:
16:14:a5:ae:14:04:6f:08:aa:ab:91:03:5b:30:a8:
92:d7:e4:55:b1:5b:09:e0:45:14:bf:d0:90:83:4e:
e0:6c:da:f7:23:01:99:38:29:a9:a0:0b:11:94:3f:
c2:2a:49:ce:38:a9:16:93:08:37:7c:50:6d:9f:8d:
4e:bd:ab:7d:fa:f4:be:b4:8d:b7:6d:40:d3:41:af:
11:b4:0a:e1:e3:42:e1:42:dd:4e:23:59:6f:22:a3:
b1:5c:72:8e:73:e3:b9:0a:44:8a:c3:51:29:96:7b:
79:07:cf:02:21:d9:d9:c9:5c:48:24:5a:00:03:31:
61:fa:db:52:4f:dc:23:19:5a:9d:c5:0e:5c:94:36:
9e:6d:5d:83:0c:ce:4b:79:1a:59:c2:f4:e3:17:aa:
2b:aa:de:f7:26:fe:6f:e1:56:f5:c8:37:64:f5:1c:
39:ac:d7:b0:15:93:ff:3e:39:69:8c:13:cc:3c:eb:
97:9a:02:fe:db:aa:44:c8:51:1b:75:47:44:2a:e6:
0c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:F1:77:0E:6E:6B:31:53:23:CF:72:91:4D:09:4B:DF:CF:2C:C5:AD
X509v3 Authority Key Identifier:
keyid:6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/evF3Dm5rMVMjz3KRTQlL388sxa0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.177.74.0/23
Signature Algorithm: sha256WithRSAEncryption
a0:40:be:15:dc:22:5f:33:39:eb:a5:d3:45:c7:c7:69:9e:0d:
af:bd:02:cc:a7:e0:b4:f1:4e:b2:8d:11:6e:dd:6d:73:f9:e8:
54:e7:e3:5b:e4:fb:d4:3b:8e:93:f7:98:5d:29:93:2e:2e:d3:
7a:fc:0f:4a:e9:7b:32:c6:99:d9:c2:0d:3a:1a:81:a3:d5:37:
4e:de:b1:ee:72:3e:4d:69:99:fa:c9:1f:35:55:bb:63:9e:1e:
34:c8:cf:b0:f1:2d:42:f6:15:42:42:94:d5:d2:78:35:57:08:
53:bf:6b:e5:a6:08:eb:e0:51:5e:6e:a6:4a:1b:eb:a0:23:d3:
eb:99:87:c9:14:49:31:5e:c0:a5:12:2f:3c:45:9e:2e:7d:cd:
c0:fa:54:e9:80:b8:4b:13:0a:37:22:43:00:5c:fe:eb:4f:b0:
ab:9f:91:ff:58:6a:5e:37:ad:13:99:51:6f:d9:23:77:a4:1a:
31:fa:ac:d0:c5:83:32:70:a3:89:b3:db:b9:a3:0d:ad:43:7c:
bb:dd:de:1b:9c:75:1e:34:f3:41:33:22:77:a1:53:c1:85:20:
fb:ce:1b:e4:c7:d2:88:7e:1e:ea:c4:23:14:a5:c3:2b:f4:3b:
82:9d:17:37:ea:5d:63:1b:82:5b:6e:18:2d:0f:bb:79:3b:8f:
58:26:6d:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 6 15:05:26 2024 by rpki-client on console-ams.rpki-client.org