Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/278663-b135-4db1-a044-20624b3c157f/1/1-OiBzAW98iKjJlRPdkT3ZOFQkF4.roa
File: 1-OiBzAW98iKjJlRPdkT3ZOFQkF4.roa (raw, json)
Hash identifier: h1GAopG4WBSCaYBomNgqPLc1/p0vD/2I96RxGPHucQI=
Subject key identifier: F8:E8:81:CC:05:BD:F2:22:A3:26:54:4F:76:44:F7:64:E1:50:90:5E
Certificate issuer: /CN=fb32e9f4aa32aba7312fab054b174dce8c515ca3
Certificate serial: 1393319B
Authority key identifier: FB:32:E9:F4:AA:32:AB:A7:31:2F:AB:05:4B:17:4D:CE:8C:51:5C:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-zLp9Koyq6cxL6sFSxdNzoxRXKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/278663-b135-4db1-a044-20624b3c157f/1/1-OiBzAW98iKjJlRPdkT3ZOFQkF4.roa
Signing time: Wed 27 Apr 2022 15:37:15 +0000
ROA not before: Wed 27 Apr 2022 15:37:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206446
IP address blocks: 77.91.69.0/24 maxlen: 24
77.91.74.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 328413595 (0x1393319b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb32e9f4aa32aba7312fab054b174dce8c515ca3
Validity
Not Before: Apr 27 15:37:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f8e881cc05bdf222a326544f7644f764e150905e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c7:81:6d:85:c6:91:aa:a5:6c:c2:52:25:30:
d2:54:bb:c7:43:ab:36:33:9a:fc:4b:c6:d3:a4:05:
f3:f7:de:dc:e2:a9:cb:01:77:df:59:c1:a7:d5:fc:
d6:8f:a8:82:7f:97:5d:a9:0c:a4:55:74:8c:8a:42:
2b:f9:0c:15:4e:17:0f:97:bd:aa:23:0f:a1:13:2f:
a9:56:ec:e2:25:73:24:0d:3b:de:b5:cd:fd:db:14:
96:1e:f1:c7:ef:af:7f:1a:1c:08:fd:e8:63:36:68:
23:61:42:02:57:ff:20:7d:0b:1e:82:04:99:9d:c2:
6a:2f:ea:e1:b3:ca:41:b1:91:43:61:05:10:65:a6:
7d:ec:f9:7a:4f:2d:ab:84:85:17:0a:25:68:ca:ca:
65:19:b6:0a:fd:15:01:18:ad:a4:88:53:40:bd:a3:
bf:bc:2e:f2:39:8b:00:4f:eb:1b:43:43:3e:2d:83:
6e:9b:01:2d:a2:ba:d1:57:4d:ed:26:68:c2:4f:02:
fa:05:4a:e5:72:91:13:b3:78:58:e0:f9:09:e1:52:
0a:95:d1:93:65:21:c9:0c:bb:12:45:a1:67:5a:04:
13:51:b2:52:67:c1:25:e9:4c:09:7b:7b:32:b5:6c:
7f:28:5c:fb:04:72:c6:c3:4c:68:23:76:ed:b2:37:
f5:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:E8:81:CC:05:BD:F2:22:A3:26:54:4F:76:44:F7:64:E1:50:90:5E
X509v3 Authority Key Identifier:
keyid:FB:32:E9:F4:AA:32:AB:A7:31:2F:AB:05:4B:17:4D:CE:8C:51:5C:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-zLp9Koyq6cxL6sFSxdNzoxRXKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/278663-b135-4db1-a044-20624b3c157f/1/1-OiBzAW98iKjJlRPdkT3ZOFQkF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/278663-b135-4db1-a044-20624b3c157f/1/1-zLp9Koyq6cxL6sFSxdNzoxRXKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.91.69.0/24
77.91.74.0/24
Signature Algorithm: sha256WithRSAEncryption
99:1c:83:56:e6:91:d9:5c:0d:84:ad:53:a8:05:ad:29:ed:10:
79:89:76:83:5a:15:87:be:99:b1:00:72:c4:fd:73:44:77:e1:
93:47:a4:1d:b8:5f:ce:88:96:87:95:dd:4f:3f:06:87:62:d6:
53:7a:4f:54:34:44:b4:c4:8b:42:74:1e:9e:24:94:8a:c7:6e:
39:aa:15:b6:28:d5:c8:41:bb:de:cb:7d:79:5c:21:e9:2a:06:
06:03:9c:9a:f6:06:a5:0a:a7:99:a1:de:8b:fe:19:1d:51:aa:
25:ce:63:29:ea:50:d9:77:82:84:50:2c:4f:29:f2:97:a0:de:
01:4a:96:9e:d3:85:dd:61:f7:ff:5f:f0:da:aa:51:03:91:40:
1f:2e:d6:8a:60:f5:80:38:bc:1b:d2:14:ef:b9:31:8b:29:5c:
23:fe:43:a4:7e:4f:6e:0e:e4:df:a1:db:cb:31:30:4e:c7:78:
88:53:eb:f2:fa:64:e2:00:41:bf:12:d7:d9:2c:61:bf:0d:28:
a2:0e:5b:fb:c2:8b:9b:3a:f7:9a:b0:ae:e1:04:a0:e9:5e:23:
f4:e5:12:46:87:de:8f:a0:79:ea:06:b6:a1:4c:d5:e5:68:0c:
90:b1:1a:ce:4b:c8:b9:d2:fc:ca:a9:5f:32:88:23:60:f1:07:
43:dd:f6:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:16 2023 by rpki-client on console-fra.rpki-client.org