Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/278663-b135-4db1-a044-20624b3c157f/1/_WGDxKuAtH5oR5cNsNs5X6dxjdk.roa
File: _WGDxKuAtH5oR5cNsNs5X6dxjdk.roa (raw, json)
Hash identifier: o/4hXFPh+76cpRYnYRX8oIGXz9TjeJaUHIsy2KhKT2c=
Subject key identifier: FD:61:83:C4:AB:80:B4:7E:68:47:97:0D:B0:DB:39:5F:A7:71:8D:D9
Certificate issuer: /CN=fb32e9f4aa32aba7312fab054b174dce8c515ca3
Certificate serial: 01870EF2C66430A552239395DAE6B7964DD6
Authority key identifier: FB:32:E9:F4:AA:32:AB:A7:31:2F:AB:05:4B:17:4D:CE:8C:51:5C:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-zLp9Koyq6cxL6sFSxdNzoxRXKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/278663-b135-4db1-a044-20624b3c157f/1/_WGDxKuAtH5oR5cNsNs5X6dxjdk.roa
Signing time: Thu 23 Mar 2023 14:50:04 +0000
ROA not before: Thu 23 Mar 2023 14:50:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43624
IP address blocks: 77.91.75.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:0e:f2:c6:64:30:a5:52:23:93:95:da:e6:b7:96:4d:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb32e9f4aa32aba7312fab054b174dce8c515ca3
Validity
Not Before: Mar 23 14:50:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fd6183c4ab80b47e6847970db0db395fa7718dd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:89:1f:42:5b:ad:f9:7c:67:af:a2:47:dd:00:
ba:c1:4b:c7:13:25:92:5d:51:e5:8a:e5:b4:70:59:
b3:7f:3e:f5:48:4c:e8:b7:4e:9f:20:d0:54:91:30:
48:ef:35:aa:27:3d:d0:3a:5b:32:4d:d9:67:47:08:
34:50:7c:e0:75:f0:8c:8c:89:39:1a:42:63:2f:3d:
b2:f6:15:6a:42:c6:20:47:35:e7:a5:91:7b:48:81:
59:7a:1f:20:78:3a:c9:fd:6b:8e:1a:50:eb:97:01:
a1:cf:90:14:97:96:6e:86:36:6b:bd:77:3f:d4:4d:
9a:22:56:13:6d:17:f2:15:7f:e5:27:3c:6e:90:91:
0d:66:1e:b2:67:09:89:60:da:56:e8:f7:75:76:24:
9f:8f:a8:0f:d2:fa:b0:59:c2:ff:f8:6b:dd:3b:fe:
7d:9d:61:f0:a1:31:38:58:34:58:48:77:72:9b:16:
85:71:ef:5d:01:26:49:93:a1:56:ed:b0:7e:5c:c1:
18:c3:cb:79:3b:8d:4b:57:23:95:61:7c:b6:81:ee:
55:aa:2d:8e:f5:20:10:ae:68:9b:3b:90:72:8f:b4:
73:5d:70:cf:93:3b:55:3d:7e:bd:2a:30:03:bb:27:
9c:c8:fa:48:4c:81:20:ab:53:d9:d1:e6:af:01:fa:
8c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:61:83:C4:AB:80:B4:7E:68:47:97:0D:B0:DB:39:5F:A7:71:8D:D9
X509v3 Authority Key Identifier:
keyid:FB:32:E9:F4:AA:32:AB:A7:31:2F:AB:05:4B:17:4D:CE:8C:51:5C:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-zLp9Koyq6cxL6sFSxdNzoxRXKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/278663-b135-4db1-a044-20624b3c157f/1/_WGDxKuAtH5oR5cNsNs5X6dxjdk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/278663-b135-4db1-a044-20624b3c157f/1/1-zLp9Koyq6cxL6sFSxdNzoxRXKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.91.75.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:0f:b8:5a:69:87:a0:63:94:f4:73:4d:fa:6f:28:8f:fa:53:
07:4c:de:8d:dc:ad:29:ef:b8:f0:6e:cc:16:51:74:ee:d4:2b:
e3:53:94:00:96:23:91:3a:4b:d8:cc:3a:d1:59:a6:52:f1:5a:
50:e0:50:8f:c7:89:f2:b9:a6:65:c8:f8:5e:32:42:c0:a3:7a:
4a:03:28:e3:68:30:e0:ee:c9:3e:5c:a2:e5:54:04:b7:d2:b8:
8a:a2:b5:0a:bc:28:0c:0a:a1:55:d1:80:de:b0:48:a3:ee:8d:
e0:e3:34:b5:c1:8e:24:60:42:3a:83:c9:32:c7:70:33:5d:e0:
71:f9:37:97:77:50:2a:e6:a6:94:2e:f1:26:c8:4f:06:49:04:
ed:96:f1:de:9d:53:3e:57:0e:0d:19:49:f5:d4:1b:16:1e:09:
5c:50:cb:d1:5c:cc:ca:04:19:f5:6e:28:82:26:f5:15:c8:79:
b5:3d:a9:38:79:13:fe:2c:c6:4c:fa:84:72:75:42:cb:f4:5e:
fc:9f:72:a2:74:a6:22:e4:07:2e:b3:a8:b5:fe:e8:6f:3b:3b:
43:dc:82:fb:79:31:a0:4c:bb:5f:5b:42:6c:02:c9:5f:4d:27:
fe:8d:00:54:45:73:1d:39:ad:a5:c2:05:fb:07:b3:1c:78:21:
5f:24:84:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:07 2023 by rpki-client on console-ams.rpki-client.org