Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/278663-b135-4db1-a044-20624b3c157f/1/RqhroAm8G8PtC0N2bnjnD7sY4qk.roa
File: RqhroAm8G8PtC0N2bnjnD7sY4qk.roa (raw, json)
Hash identifier: Tk2+FZg4JI7/9z+Wsa7qkP3SZ5HvCf2Wfu5h6Dh1igk=
Subject key identifier: 46:A8:6B:A0:09:BC:1B:C3:ED:0B:43:76:6E:78:E7:0F:BB:18:E2:A9
Certificate issuer: /CN=fb32e9f4aa32aba7312fab054b174dce8c515ca3
Certificate serial: 137A14DE
Authority key identifier: FB:32:E9:F4:AA:32:AB:A7:31:2F:AB:05:4B:17:4D:CE:8C:51:5C:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-zLp9Koyq6cxL6sFSxdNzoxRXKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/278663-b135-4db1-a044-20624b3c157f/1/RqhroAm8G8PtC0N2bnjnD7sY4qk.roa
Signing time: Mon 18 Apr 2022 06:40:15 +0000
ROA not before: Mon 18 Apr 2022 06:40:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 52000
IP address blocks: 77.91.73.0/24 maxlen: 24
77.91.126.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 326767838 (0x137a14de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb32e9f4aa32aba7312fab054b174dce8c515ca3
Validity
Not Before: Apr 18 06:40:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=46a86ba009bc1bc3ed0b43766e78e70fbb18e2a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:da:4d:7d:3b:03:9c:7b:2a:c3:0b:fa:f0:dd:
a9:8f:20:aa:7d:02:43:65:51:29:e5:3e:ef:26:8e:
e0:af:14:fd:6e:ff:24:9f:9b:5e:9c:ce:c8:66:9f:
75:fe:20:81:83:a7:24:eb:00:da:61:9d:66:6a:0f:
52:b0:c8:86:80:2c:6d:d2:13:73:32:4f:c3:e3:5b:
be:ab:e2:92:a0:5e:57:f1:ef:4b:52:03:3f:2b:fd:
f3:78:26:1b:11:d9:18:8f:6e:28:69:42:e2:c2:58:
d4:ee:79:44:1f:0f:30:de:c1:a4:ce:e4:d0:6d:cc:
c5:1a:96:57:62:db:fa:cd:1b:21:19:fa:2e:a8:82:
67:f2:50:b6:a2:05:3f:26:a7:76:b9:4b:c9:08:70:
38:0f:b7:31:4b:1c:e6:29:00:fa:a3:64:5a:6f:69:
1c:3d:fb:a3:cb:f8:8a:aa:97:a3:b0:7c:b1:9c:05:
f1:69:9b:5f:3d:93:80:15:8f:78:c8:6b:2f:26:1e:
0b:b5:9b:39:ea:cf:46:8c:b8:e1:c3:8e:49:4b:3e:
0c:f4:f9:5d:e8:f5:c3:df:f1:ef:d3:92:5f:0a:2d:
af:5d:d2:77:50:45:d1:08:6a:55:ca:42:5d:7f:dc:
0a:ca:76:1c:50:93:6c:a2:25:e9:fe:e1:da:4b:30:
94:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:A8:6B:A0:09:BC:1B:C3:ED:0B:43:76:6E:78:E7:0F:BB:18:E2:A9
X509v3 Authority Key Identifier:
keyid:FB:32:E9:F4:AA:32:AB:A7:31:2F:AB:05:4B:17:4D:CE:8C:51:5C:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-zLp9Koyq6cxL6sFSxdNzoxRXKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/278663-b135-4db1-a044-20624b3c157f/1/RqhroAm8G8PtC0N2bnjnD7sY4qk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/278663-b135-4db1-a044-20624b3c157f/1/1-zLp9Koyq6cxL6sFSxdNzoxRXKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.91.73.0/24
77.91.126.0/24
Signature Algorithm: sha256WithRSAEncryption
01:6e:1d:e5:9f:95:54:47:c9:ae:d6:58:73:4b:0a:50:84:82:
4a:68:76:cc:05:bf:71:34:55:ae:5c:c2:fe:49:00:10:dd:20:
3b:54:e8:b5:92:db:92:0d:99:ad:c2:aa:27:da:ca:41:93:a6:
9f:51:4d:d7:1a:54:d8:dd:26:8a:36:ee:6a:5e:f0:cb:17:e4:
57:09:30:ae:10:93:ac:3a:a1:40:09:c1:f9:6b:29:7c:04:1f:
e3:eb:c6:e8:0c:1b:d0:65:26:4c:22:04:7f:ec:7e:35:7c:e3:
fc:b5:87:5a:46:ba:dc:03:df:f3:ae:4f:e1:5f:6d:a1:25:7c:
fd:86:52:e8:e2:a8:5e:db:93:01:51:98:20:03:55:99:b7:53:
d7:13:f7:28:db:25:2f:e9:83:e1:33:03:38:d4:09:58:3a:4a:
e1:5a:6d:54:81:fe:74:40:9c:9c:6b:03:08:a9:6d:71:88:dc:
64:59:7e:e5:ff:99:3e:e9:37:e5:e0:56:d8:71:6c:72:1e:e9:
b2:6e:fd:c9:ae:8a:67:cd:37:63:65:0a:9d:52:91:d4:f2:95:
6e:92:14:20:2a:a3:62:53:46:e3:c6:c6:2c:c9:02:c2:d6:88:
ef:87:7b:76:6c:a7:c2:82:4e:1c:1a:7f:5a:b6:b8:80:67:88:
d4:a7:61:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:07 2023 by rpki-client on console-ams.rpki-client.org