Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/7d9c11-e1ad-47b6-af09-1713fd3ef7a7/1/IXWtz0oM-dDxOJ7efONLK1N6cA4.roa
File: IXWtz0oM-dDxOJ7efONLK1N6cA4.roa (raw, json)
Hash identifier: of8lD7yUROyTg70uEOIwAUnaWtt+t0yhE/nb5KcGPOs=
Subject key identifier: 21:75:AD:CF:4A:0C:F9:D0:F1:38:9E:DE:7C:E3:4B:2B:53:7A:70:0E
Certificate issuer: /CN=6177b5b64be49e819995fee7f3e3621bdca6ae8c
Certificate serial: 37DB6D5E
Authority key identifier: 61:77:B5:B6:4B:E4:9E:81:99:95:FE:E7:F3:E3:62:1B:DC:A6:AE:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YXe1tkvknoGZlf7n8-NiG9ymrow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/7d9c11-e1ad-47b6-af09-1713fd3ef7a7/1/IXWtz0oM-dDxOJ7efONLK1N6cA4.roa
Signing time: Sat 01 Jan 2022 11:04:59 +0000
ROA not before: Sat 01 Jan 2022 11:04:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50857
IP address blocks: 217.64.240.0/20 maxlen: 20
80.91.144.0/20 maxlen: 20
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 937127262 (0x37db6d5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6177b5b64be49e819995fee7f3e3621bdca6ae8c
Validity
Not Before: Jan 1 11:04:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2175adcf4a0cf9d0f1389ede7ce34b2b537a700e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ea:92:0a:61:0a:18:04:75:1e:05:4d:08:a6:
8c:15:b3:04:39:3c:86:4a:a4:6a:42:52:8e:ac:0d:
a7:9a:58:4c:e0:83:28:eb:a1:90:c7:10:06:20:c9:
53:6e:68:7c:5b:26:6a:ef:b1:d3:34:5d:9b:99:19:
5d:0f:a6:fa:8d:f5:5f:a2:a3:94:fb:c1:c8:ed:a8:
e5:37:38:6f:19:a2:ad:fe:1d:b3:60:0a:4b:9d:2d:
f3:e3:76:0a:3d:d1:f9:44:b9:3a:a5:a2:9b:b4:e6:
1d:2c:31:6f:6f:78:f8:c6:22:a1:e7:68:37:bf:12:
db:bc:76:71:b9:80:3e:24:b8:75:bc:84:81:8c:ff:
e2:e2:70:5d:bd:36:f7:f9:94:b2:35:28:1b:86:99:
35:6a:37:bb:db:96:45:8e:2a:62:ad:5f:dc:d6:2e:
7f:58:38:c9:6c:61:f4:c3:1a:65:79:1a:af:9f:65:
87:09:ce:c5:9b:a8:24:3f:69:2b:36:44:cb:2a:ee:
8b:ad:2f:82:cf:ca:56:85:29:c5:1a:0a:1d:37:8c:
82:c0:6a:b0:c7:1c:11:12:b5:75:5c:bd:c1:90:79:
fa:26:f3:c7:e4:a8:5d:c4:bd:b1:22:39:09:4e:8a:
34:3d:d2:4f:54:2d:eb:5d:44:8e:b3:bc:92:cc:4f:
33:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:75:AD:CF:4A:0C:F9:D0:F1:38:9E:DE:7C:E3:4B:2B:53:7A:70:0E
X509v3 Authority Key Identifier:
keyid:61:77:B5:B6:4B:E4:9E:81:99:95:FE:E7:F3:E3:62:1B:DC:A6:AE:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YXe1tkvknoGZlf7n8-NiG9ymrow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7d9c11-e1ad-47b6-af09-1713fd3ef7a7/1/IXWtz0oM-dDxOJ7efONLK1N6cA4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7d9c11-e1ad-47b6-af09-1713fd3ef7a7/1/YXe1tkvknoGZlf7n8-NiG9ymrow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.91.144.0/20
217.64.240.0/20
Signature Algorithm: sha256WithRSAEncryption
42:47:8c:02:3d:c9:ce:79:1d:ac:c4:b3:bb:b6:6f:cc:4b:21:
ae:22:4f:20:a6:9d:51:db:da:d2:42:82:79:5e:eb:33:b0:2c:
ee:95:af:03:a2:17:9e:be:1d:3f:7f:a9:c4:62:30:19:2d:09:
19:ff:4d:c7:c5:2d:f4:6a:fe:fc:5d:58:0e:83:b2:48:5c:f7:
b9:29:8b:a4:24:46:8a:ad:3c:4b:6c:9d:52:10:44:f9:b3:3c:
dc:71:5d:0b:dd:86:4b:7a:82:1f:04:0c:57:70:ba:f3:f3:f8:
82:eb:c1:51:c6:64:ff:e9:5d:9c:18:35:6d:1b:31:59:1f:86:
16:75:d2:8c:0c:04:b0:2c:e6:a7:a7:56:e1:69:2f:6c:dd:ca:
24:11:ad:11:5d:85:8f:82:3a:b1:a2:be:1c:fd:17:f3:87:18:
6a:86:c0:d3:a7:49:6b:9d:62:84:16:51:2b:78:a6:71:03:7f:
8a:6c:11:7e:91:b3:38:dd:e0:69:6d:a7:53:4c:fb:a2:da:76:
55:d6:32:44:79:02:16:da:be:45:b6:99:4d:58:45:2c:6e:c0:
fe:24:a0:21:29:f2:84:d4:9a:cc:4e:15:4a:41:68:29:5e:e4:
78:58:8d:2f:0b:d4:ed:b7:8b:2d:31:20:da:c3:86:54:69:33:
ad:cc:9f:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:46 2024 by rpki-client on console-fra.rpki-client.org