Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/7d9c11-e1ad-47b6-af09-1713fd3ef7a7/1/CeRzuEm2KfUhv9WJ9Mivh-NB-Ss.roa
File: CeRzuEm2KfUhv9WJ9Mivh-NB-Ss.roa (raw, json)
Hash identifier: a+Qz/olvBsnVA/nD9BOcCK5512aquo97KePu5msIElY=
Subject key identifier: 09:E4:73:B8:49:B6:29:F5:21:BF:D5:89:F4:C8:AF:87:E3:41:F9:2B
Certificate issuer: /CN=6177b5b64be49e819995fee7f3e3621bdca6ae8c
Certificate serial: 018570CC08717ADDEE016EA85EAFF9F1F6A2
Authority key identifier: 61:77:B5:B6:4B:E4:9E:81:99:95:FE:E7:F3:E3:62:1B:DC:A6:AE:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YXe1tkvknoGZlf7n8-NiG9ymrow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/7d9c11-e1ad-47b6-af09-1713fd3ef7a7/1/CeRzuEm2KfUhv9WJ9Mivh-NB-Ss.roa
Signing time: Mon 02 Jan 2023 04:44:57 +0000
ROA not before: Mon 02 Jan 2023 04:44:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50857
IP address blocks: 217.64.240.0/20 maxlen: 20
80.91.144.0/20 maxlen: 20
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:cc:08:71:7a:dd:ee:01:6e:a8:5e:af:f9:f1:f6:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6177b5b64be49e819995fee7f3e3621bdca6ae8c
Validity
Not Before: Jan 2 04:44:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=09e473b849b629f521bfd589f4c8af87e341f92b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:26:37:b3:48:5a:20:ed:29:f1:10:84:11:84:
ad:02:69:26:2c:0e:f4:bb:95:67:80:13:59:d0:19:
2f:78:68:50:99:0f:25:94:9e:3f:f3:7c:13:19:de:
02:5b:77:a6:78:47:ae:6a:78:72:d7:52:fc:e1:b1:
01:d9:29:24:f8:be:10:a9:ad:fa:e1:15:fe:5f:06:
34:eb:69:02:81:ca:cf:ab:25:2f:bd:34:61:a3:88:
6f:dd:44:a4:b9:df:e9:67:00:7d:f0:6b:41:84:86:
c2:db:39:5d:1d:76:d3:81:55:2d:8a:3b:3b:20:6b:
92:6c:94:84:37:37:8d:1b:6e:a0:43:8b:ef:4e:aa:
af:f7:d2:82:50:7f:0e:11:a2:4d:ac:d7:3e:d0:7e:
94:8f:2c:af:f0:19:78:e5:29:88:9b:e2:6d:e4:2f:
40:98:ed:82:30:87:21:d3:41:23:7c:d1:a3:fb:d5:
fc:27:6e:20:9d:6f:5d:3b:4f:72:9a:17:a6:46:59:
eb:28:23:63:db:fc:cb:5e:cf:3c:39:d1:90:8e:0b:
62:6c:6b:75:dd:8a:2e:d2:53:9c:6c:8b:93:32:76:
b7:c7:78:43:28:64:75:33:46:e8:2e:b0:cb:c9:bc:
9d:3f:51:95:3b:4d:b1:15:69:24:86:bd:d4:7f:98:
cb:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:E4:73:B8:49:B6:29:F5:21:BF:D5:89:F4:C8:AF:87:E3:41:F9:2B
X509v3 Authority Key Identifier:
keyid:61:77:B5:B6:4B:E4:9E:81:99:95:FE:E7:F3:E3:62:1B:DC:A6:AE:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YXe1tkvknoGZlf7n8-NiG9ymrow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7d9c11-e1ad-47b6-af09-1713fd3ef7a7/1/CeRzuEm2KfUhv9WJ9Mivh-NB-Ss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7d9c11-e1ad-47b6-af09-1713fd3ef7a7/1/YXe1tkvknoGZlf7n8-NiG9ymrow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.91.144.0/20
217.64.240.0/20
Signature Algorithm: sha256WithRSAEncryption
5c:b5:1c:93:81:79:8e:61:6a:d2:d5:60:ab:75:84:18:c5:9b:
b1:fb:91:50:3e:c0:65:57:19:3c:9a:55:69:eb:d1:c1:03:2e:
5f:4a:fa:6a:cd:86:f0:0a:5d:bd:df:44:f5:0e:c5:b2:71:d3:
5b:c2:44:2b:d9:08:c1:64:9e:a3:de:17:16:92:fd:e3:3a:c0:
82:6e:b9:7c:38:d0:8e:8f:50:a0:5e:53:02:5d:90:72:c1:e6:
47:66:7a:0f:c9:35:8f:74:ce:7f:d2:d4:43:59:1e:3c:83:74:
4e:e4:6a:d7:c1:e1:25:fc:b0:1d:51:e8:2c:ee:1c:ff:a4:00:
56:e2:13:4e:99:b3:d2:5f:7f:ff:05:22:c8:f0:51:4c:2a:c6:
d6:d9:33:3d:f8:4b:f4:4e:70:f1:9a:66:d4:07:d8:f4:3d:ca:
59:fb:08:66:3b:cd:b2:a3:db:d3:58:d8:4e:30:dd:df:8c:27:
04:0a:89:9b:60:67:77:17:e6:bf:5e:9b:1f:28:8d:2f:b9:be:
c1:d0:74:83:d5:d7:b2:7c:b7:52:48:4d:64:3f:69:b4:1e:cf:
d1:12:ab:98:3b:5f:b9:4f:ef:6c:ca:a5:2a:fa:02:5d:d9:30:
5e:4b:29:af:f9:8b:8c:f8:64:ec:2d:3e:d1:1d:1d:37:db:ea:
41:87:14:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:46 2024 by rpki-client on console-fra.rpki-client.org