Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/278663-b135-4db1-a044-20624b3c157f/1/7nTRU_8eVRmO_DpcSh3npNlfyB4.roa
File: 7nTRU_8eVRmO_DpcSh3npNlfyB4.roa (raw, json)
Hash identifier: cUnMYhLbb1vRoRxvYSrY0+TvG3kFEBNha20XAQLi+Gs=
Subject key identifier: EE:74:D1:53:FF:1E:55:19:8E:FC:3A:5C:4A:1D:E7:A4:D9:5F:C8:1E
Certificate issuer: /CN=fb32e9f4aa32aba7312fab054b174dce8c515ca3
Certificate serial: 136B2D66
Authority key identifier: FB:32:E9:F4:AA:32:AB:A7:31:2F:AB:05:4B:17:4D:CE:8C:51:5C:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-zLp9Koyq6cxL6sFSxdNzoxRXKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/278663-b135-4db1-a044-20624b3c157f/1/7nTRU_8eVRmO_DpcSh3npNlfyB4.roa
Signing time: Tue 12 Apr 2022 17:07:04 +0000
ROA not before: Tue 12 Apr 2022 17:07:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206446
IP address blocks: 77.91.69.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 325791078 (0x136b2d66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb32e9f4aa32aba7312fab054b174dce8c515ca3
Validity
Not Before: Apr 12 17:07:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ee74d153ff1e55198efc3a5c4a1de7a4d95fc81e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:aa:9d:51:fc:ea:6b:9f:5f:5b:c1:31:d2:e7:
4b:ce:23:3a:01:22:d4:60:a7:ea:3e:44:fa:df:5a:
ac:96:98:47:70:0f:ea:ab:14:40:88:dd:5d:14:29:
63:b9:32:b2:e3:4f:c9:bd:17:95:4e:37:8a:c1:b6:
c5:77:2c:e7:45:4f:a7:ac:d3:f9:90:d1:2b:29:09:
81:5f:4f:84:ec:ad:91:03:bb:d9:3c:be:04:72:49:
b1:45:5b:f4:46:3d:b0:a1:8b:9a:a0:ba:2a:30:98:
d1:81:d8:b3:c9:0e:b1:e9:24:83:a8:25:d7:46:e3:
35:92:04:dc:9c:67:f2:61:ff:23:83:f9:28:88:0b:
7a:1b:ab:00:cf:a1:9a:ae:12:1f:78:e4:79:71:c4:
b0:57:35:d0:18:2b:34:95:78:bb:f5:c7:8c:ad:53:
24:44:e1:93:5e:a2:88:2c:c6:fa:10:0b:05:9a:7c:
47:9e:b6:c6:95:b6:f9:58:5d:81:dd:f1:9f:12:b1:
fa:af:35:37:08:03:e6:9d:23:82:38:15:10:93:0c:
fe:e0:c3:dc:38:eb:ef:d9:e8:f1:88:eb:46:63:b8:
c2:59:73:f9:d0:0e:5a:45:e0:4d:1a:73:86:99:b8:
f8:e7:ad:9b:98:4c:fd:e0:8d:80:56:0d:eb:95:7b:
63:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:74:D1:53:FF:1E:55:19:8E:FC:3A:5C:4A:1D:E7:A4:D9:5F:C8:1E
X509v3 Authority Key Identifier:
keyid:FB:32:E9:F4:AA:32:AB:A7:31:2F:AB:05:4B:17:4D:CE:8C:51:5C:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-zLp9Koyq6cxL6sFSxdNzoxRXKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/278663-b135-4db1-a044-20624b3c157f/1/7nTRU_8eVRmO_DpcSh3npNlfyB4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/278663-b135-4db1-a044-20624b3c157f/1/1-zLp9Koyq6cxL6sFSxdNzoxRXKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.91.69.0/24
Signature Algorithm: sha256WithRSAEncryption
83:99:75:52:82:b8:a9:eb:21:f5:14:c2:7d:35:aa:1c:5f:e0:
a3:0d:9b:13:59:45:c6:bd:da:4f:a3:ea:eb:48:69:c9:03:ff:
3b:a5:3c:a6:10:19:12:17:bc:f6:43:9d:33:b5:a3:60:85:ad:
f1:f1:c4:7d:3b:f4:22:e7:d7:0a:fb:96:74:bc:53:2e:95:35:
b5:2e:03:e5:87:b5:f6:3c:cb:31:0c:4b:53:28:2e:51:54:96:
74:84:13:a3:05:bc:06:2c:66:f5:65:86:e8:bf:69:3a:03:c6:
c0:fb:33:15:80:86:9b:08:02:0e:73:8e:02:b7:81:fb:28:24:
7e:fa:9e:1e:ba:7f:84:5a:49:f6:34:9b:f9:af:ea:30:dc:db:
4e:2d:78:27:f8:30:fd:e5:cf:16:a7:b1:44:3e:7d:d8:70:85:
73:9a:03:62:fe:fc:75:26:05:a3:4c:32:50:20:9e:f9:70:cf:
52:db:3b:47:97:0d:e0:37:1f:11:e3:0a:77:df:7e:da:43:ac:
2a:35:b5:55:aa:42:66:88:ca:c6:67:77:23:58:51:1b:6d:33:
d0:c6:ac:5d:e1:9c:a0:ad:a3:ac:ac:87:2a:fe:d6:93:f1:f9:
b1:c2:61:98:e9:cf:eb:8b:fd:d7:a7:4f:72:5c:48:66:42:48:
7b:d3:bc:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:06 2023 by rpki-client on console-ams.rpki-client.org