Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/278663-b135-4db1-a044-20624b3c157f/1/9FCQqnuI1FNcebclmgd1NfXAqlY.roa
File: 9FCQqnuI1FNcebclmgd1NfXAqlY.roa (raw, json)
Hash identifier: Xt7ZMTbdfybz5zFaeDDdXRytIEtb8u5+w81bcKAOULg=
Subject key identifier: F4:50:90:AA:7B:88:D4:53:5C:79:B7:25:9A:07:75:35:F5:C0:AA:56
Certificate issuer: /CN=fb32e9f4aa32aba7312fab054b174dce8c515ca3
Certificate serial: 018570305A4FF189236F2541552FFB239A2D
Authority key identifier: FB:32:E9:F4:AA:32:AB:A7:31:2F:AB:05:4B:17:4D:CE:8C:51:5C:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-zLp9Koyq6cxL6sFSxdNzoxRXKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/278663-b135-4db1-a044-20624b3c157f/1/9FCQqnuI1FNcebclmgd1NfXAqlY.roa
Signing time: Mon 02 Jan 2023 01:54:55 +0000
ROA not before: Mon 02 Jan 2023 01:54:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42861
IP address blocks: 77.91.64.0/24 maxlen: 24
77.91.65.0/24 maxlen: 24
2a00:1e68:112::/48 maxlen: 128
2a00:1e68:100::/48 maxlen: 128
2a00:1e68:100::/47 maxlen: 128
2a00:1e68:101::/48 maxlen: 128
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:30:5a:4f:f1:89:23:6f:25:41:55:2f:fb:23:9a:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb32e9f4aa32aba7312fab054b174dce8c515ca3
Validity
Not Before: Jan 2 01:54:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f45090aa7b88d4535c79b7259a077535f5c0aa56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:f5:c7:88:86:3d:48:bc:d6:7b:0b:e5:0a:d9:
5c:5e:7c:76:68:88:48:6f:09:88:09:d2:61:75:47:
02:77:de:05:98:23:c9:da:63:b1:bc:77:9a:b4:87:
f6:eb:de:cc:2a:be:4a:db:1b:60:3e:e8:be:42:9e:
bb:0d:23:d9:18:6a:20:94:85:d3:45:1d:d3:9a:02:
89:d6:7c:7d:25:4f:57:50:8e:e2:dc:3a:b6:8e:93:
04:da:ad:8c:7d:00:58:09:c1:c3:e5:21:c0:35:9e:
3f:3a:c5:8a:e1:e0:d1:d5:18:4b:71:d2:d5:99:4d:
61:20:72:a7:c4:5a:43:1d:8b:87:60:aa:c2:38:6e:
2d:ab:fd:a4:8e:92:c9:5d:80:d0:6d:90:97:3e:98:
eb:06:9a:58:8e:cb:91:36:fd:6a:8e:d0:ec:2c:c0:
07:e1:ae:ea:0f:62:32:a6:83:b5:08:f6:fc:1c:cb:
ac:fd:cb:cd:bd:28:1c:f8:66:47:f4:00:6c:90:54:
78:bc:3c:8e:e5:48:d4:2e:ff:47:a8:6e:32:36:06:
53:93:bf:56:f6:7f:21:74:73:63:29:74:ca:af:4c:
de:06:62:51:a7:0a:9b:d2:01:d5:38:33:79:ad:9a:
a3:be:fa:f4:a9:67:69:91:b1:c9:08:55:bd:5e:82:
94:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:50:90:AA:7B:88:D4:53:5C:79:B7:25:9A:07:75:35:F5:C0:AA:56
X509v3 Authority Key Identifier:
keyid:FB:32:E9:F4:AA:32:AB:A7:31:2F:AB:05:4B:17:4D:CE:8C:51:5C:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-zLp9Koyq6cxL6sFSxdNzoxRXKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/278663-b135-4db1-a044-20624b3c157f/1/9FCQqnuI1FNcebclmgd1NfXAqlY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/278663-b135-4db1-a044-20624b3c157f/1/1-zLp9Koyq6cxL6sFSxdNzoxRXKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.91.64.0/23
IPv6:
2a00:1e68:100::/47
2a00:1e68:112::/48
Signature Algorithm: sha256WithRSAEncryption
c4:22:d6:23:67:30:75:ea:fb:bc:08:d4:06:9f:94:6d:a8:3a:
17:8e:82:43:6f:0d:06:27:7c:ad:c0:79:cc:2a:07:f5:e1:0e:
37:c8:87:84:78:18:ec:23:55:15:bc:c7:28:a9:a2:8d:c8:c6:
07:4e:df:ee:80:f5:b8:42:e7:96:fd:07:68:9d:9d:74:b7:de:
65:31:69:dd:76:66:e3:32:39:c8:a0:d4:89:34:67:aa:ef:34:
dc:e9:4c:9d:d9:c4:36:db:33:44:f9:5d:04:c2:68:05:c8:e7:
45:d8:45:e8:d9:5e:b0:74:e6:50:83:83:38:de:a9:cc:17:8d:
c0:b0:4a:3e:f5:c9:56:26:5d:4b:79:5a:f5:5f:ca:99:dd:2b:
35:9e:8b:98:ea:39:ac:91:f5:af:a1:86:f5:23:a4:f9:11:1f:
58:24:7e:5f:80:a5:e4:44:47:39:e4:25:28:20:8f:23:64:73:
fb:06:b9:8a:92:74:ea:d2:56:c9:11:39:04:57:a7:b4:60:bc:
f8:f0:98:9c:69:b8:85:bb:c1:49:c0:e5:8a:fe:9b:24:80:2d:
bb:08:48:ea:0d:6f:31:6e:d8:10:dc:e8:c1:99:90:76:d3:26:
c3:06:a0:e5:22:31:c2:eb:d4:77:55:8d:af:50:84:f5:21:a3:
2f:79:99:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:06 2023 by rpki-client on console-ams.rpki-client.org