Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/278663-b135-4db1-a044-20624b3c157f/1/BTskA1mc7jnH9dLO72B2aSDFH1w.roa
File: BTskA1mc7jnH9dLO72B2aSDFH1w.roa (raw, json)
Hash identifier: 291QYFvumaf2ROh9TgthO3UoLRdwDAURRzlmzHe1oGw=
Subject key identifier: 05:3B:24:03:59:9C:EE:39:C7:F5:D2:CE:EF:60:76:69:20:C5:1F:5C
Certificate issuer: /CN=fb32e9f4aa32aba7312fab054b174dce8c515ca3
Certificate serial: 01868D1393B725FDAD4A90CD68BC40CB526D
Authority key identifier: FB:32:E9:F4:AA:32:AB:A7:31:2F:AB:05:4B:17:4D:CE:8C:51:5C:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-zLp9Koyq6cxL6sFSxdNzoxRXKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/278663-b135-4db1-a044-20624b3c157f/1/BTskA1mc7jnH9dLO72B2aSDFH1w.roa
Signing time: Sun 26 Feb 2023 09:35:15 +0000
ROA not before: Sun 26 Feb 2023 09:35:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204603
IP address blocks: 77.91.76.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:8d:13:93:b7:25:fd:ad:4a:90:cd:68:bc:40:cb:52:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb32e9f4aa32aba7312fab054b174dce8c515ca3
Validity
Not Before: Feb 26 09:35:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=053b2403599cee39c7f5d2ceef60766920c51f5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ca:ba:02:c0:31:9d:60:48:f9:16:d4:a2:5e:
48:29:3c:1b:f9:73:e2:09:fc:77:da:47:71:5f:e4:
4b:ca:7a:47:86:2b:cb:d0:d1:49:6e:76:f0:3a:b4:
87:16:2b:11:97:3a:69:a3:2a:3f:04:94:91:2d:dc:
7f:9a:c2:2d:21:3d:c5:d9:83:f9:d3:2c:37:29:98:
b5:1e:3a:e7:0f:58:13:63:5b:ea:49:fd:0e:a0:8c:
8b:eb:a9:71:ff:3b:fc:31:eb:53:d3:96:2d:f3:e0:
75:e5:3a:f8:09:36:c9:4f:2c:cf:29:85:b4:ba:18:
ab:a5:9c:9d:9a:f9:b7:7a:44:21:0c:00:d0:ce:83:
48:0f:03:35:3d:7f:31:be:bd:dc:59:f8:8e:82:ff:
32:d1:c7:5b:92:b0:d4:52:f2:4c:e5:6f:34:c5:71:
b9:63:50:bb:a2:45:4f:6f:c1:42:84:a4:c4:62:42:
5e:6b:03:e2:b5:82:f6:9d:82:ea:f7:91:a7:18:2a:
55:fb:89:73:1a:d9:b6:66:72:0d:ff:31:2e:01:29:
02:22:c3:d9:56:f5:29:4c:30:50:2b:3e:f5:1a:7b:
17:da:91:ed:5c:af:cd:c0:bc:b6:ee:07:eb:61:c2:
38:3b:86:cb:cb:99:95:79:4e:ec:11:92:9b:d2:6a:
c5:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:3B:24:03:59:9C:EE:39:C7:F5:D2:CE:EF:60:76:69:20:C5:1F:5C
X509v3 Authority Key Identifier:
keyid:FB:32:E9:F4:AA:32:AB:A7:31:2F:AB:05:4B:17:4D:CE:8C:51:5C:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-zLp9Koyq6cxL6sFSxdNzoxRXKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/278663-b135-4db1-a044-20624b3c157f/1/BTskA1mc7jnH9dLO72B2aSDFH1w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/278663-b135-4db1-a044-20624b3c157f/1/1-zLp9Koyq6cxL6sFSxdNzoxRXKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.91.76.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:2a:86:d8:d9:e6:7f:10:8b:a8:e9:0c:5a:1a:db:9f:c9:f0:
c2:0f:e6:a2:f2:23:d2:86:f8:3b:db:31:ce:eb:5c:88:d2:8d:
e1:d6:85:3a:62:94:92:1a:b1:d8:46:ea:a8:1a:3d:04:04:90:
17:e2:6a:aa:83:96:74:22:8b:ff:d9:5e:38:55:e3:01:f4:91:
18:c3:1f:61:52:17:9f:1f:99:ad:ca:45:05:cd:f8:f2:a7:70:
af:20:9a:6a:82:5a:8f:47:c2:4d:fb:21:c5:86:70:6d:a2:b3:
93:87:fb:be:e0:50:e0:e5:3d:f9:8e:88:c6:69:65:32:9b:ce:
ee:b2:da:6c:c9:87:40:eb:83:ec:b2:5c:f7:65:e5:d9:88:d8:
9b:9c:20:54:b9:7b:f0:c2:93:e2:83:98:46:e6:79:40:4b:f5:
0b:c9:2a:e1:74:d5:90:78:3c:b1:88:09:2d:93:19:61:af:1d:
59:04:33:89:ed:9f:a7:5b:bc:69:98:a3:36:e3:0c:9a:b3:3a:
56:41:d7:b6:2b:31:cb:75:3d:08:37:17:2e:9c:78:66:38:fd:
20:f8:05:c4:92:4d:45:30:86:a1:b6:a6:91:45:fd:22:9f:c9:
62:90:9f:18:93:57:79:04:45:11:71:1a:55:8f:73:4e:3f:ef:
c4:1f:43:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:16 2023 by rpki-client on console-fra.rpki-client.org