Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/278663-b135-4db1-a044-20624b3c157f/1/gpw2TMK4dDETkZAl6G2-16O2sJA.roa
File: gpw2TMK4dDETkZAl6G2-16O2sJA.roa (raw, json)
Hash identifier: FSjsLUYOCBeK3o/6hLfPfNbAwUrCn2batDpYK/LmCdw=
Subject key identifier: 82:9C:36:4C:C2:B8:74:31:13:91:90:25:E8:6D:BE:D7:A3:B6:B0:90
Certificate issuer: /CN=fb32e9f4aa32aba7312fab054b174dce8c515ca3
Certificate serial: 0186B6ACC2E4940AE1994E4743D7FDB11B3C
Authority key identifier: FB:32:E9:F4:AA:32:AB:A7:31:2F:AB:05:4B:17:4D:CE:8C:51:5C:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-zLp9Koyq6cxL6sFSxdNzoxRXKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/278663-b135-4db1-a044-20624b3c157f/1/gpw2TMK4dDETkZAl6G2-16O2sJA.roa
Signing time: Mon 06 Mar 2023 11:27:00 +0000
ROA not before: Mon 06 Mar 2023 11:27:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43624
IP address blocks: 77.91.75.0/24 maxlen: 24
77.91.73.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:b6:ac:c2:e4:94:0a:e1:99:4e:47:43:d7:fd:b1:1b:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb32e9f4aa32aba7312fab054b174dce8c515ca3
Validity
Not Before: Mar 6 11:27:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=829c364cc2b8743113919025e86dbed7a3b6b090
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a5:84:4e:ee:e5:ff:a9:3f:94:0e:ef:ca:10:
79:d4:50:88:2b:e0:4a:88:67:6c:e3:f2:c9:74:f0:
e1:e3:40:96:0d:e4:ba:3d:75:34:ea:ea:74:a6:d1:
70:66:b8:36:00:97:af:6f:11:58:61:e5:29:3c:ba:
48:de:d4:78:92:49:d6:6b:be:8b:ad:58:07:4c:1d:
bd:1c:46:c1:a6:19:04:dc:03:47:0f:67:e7:8c:be:
0c:d3:3a:72:eb:18:31:68:69:72:a9:ec:87:f9:b9:
74:bc:bb:e5:e9:bd:9b:c9:c5:9a:2b:01:a7:09:81:
ca:7f:b4:b9:12:b0:78:0d:e9:62:89:00:33:9f:6a:
5d:92:90:b9:b1:3a:af:82:fd:43:88:c7:81:ad:03:
cc:53:d6:a9:d5:7f:1d:0d:fd:6e:59:f0:4f:cc:d2:
4a:92:d3:e3:38:f7:c4:7a:37:8f:fa:79:14:9c:53:
f3:8c:e8:37:44:00:58:e9:31:ca:53:c1:b9:8f:bc:
68:a1:f2:ed:b0:cc:c1:38:2c:09:a8:01:e3:1c:21:
9b:53:38:db:b3:ed:6a:e2:12:fd:77:e2:e8:d4:56:
11:43:87:62:f7:a6:19:02:d8:b0:95:34:39:f4:13:
56:f7:77:bf:69:93:8d:99:7c:ab:4b:50:5d:c6:d6:
ab:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:9C:36:4C:C2:B8:74:31:13:91:90:25:E8:6D:BE:D7:A3:B6:B0:90
X509v3 Authority Key Identifier:
keyid:FB:32:E9:F4:AA:32:AB:A7:31:2F:AB:05:4B:17:4D:CE:8C:51:5C:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-zLp9Koyq6cxL6sFSxdNzoxRXKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/278663-b135-4db1-a044-20624b3c157f/1/gpw2TMK4dDETkZAl6G2-16O2sJA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/278663-b135-4db1-a044-20624b3c157f/1/1-zLp9Koyq6cxL6sFSxdNzoxRXKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.91.73.0/24
77.91.75.0/24
Signature Algorithm: sha256WithRSAEncryption
20:e8:55:c7:22:f6:f8:62:34:fe:77:fa:cb:21:29:01:e6:49:
47:1b:0a:e9:27:1a:fd:6d:6e:f4:a1:a8:57:fe:22:66:9e:31:
bd:da:53:60:05:47:43:45:b3:29:c6:df:92:35:a3:ec:55:19:
8b:2d:69:c3:09:4b:6a:eb:a5:ac:94:17:cd:eb:6f:ad:a7:37:
f6:7c:73:03:f3:21:5c:35:21:fa:c8:e7:55:3c:27:82:13:d9:
95:ee:51:24:54:04:a5:c4:e7:27:0a:95:9a:1b:27:0b:37:80:
82:60:cb:2c:d2:3a:9b:75:57:6b:5a:03:c0:15:86:2d:f0:da:
31:18:42:21:5d:ba:bd:68:3d:89:88:55:24:5e:e5:a4:6b:19:
16:1a:ce:eb:3e:4a:c5:a4:59:0f:b5:6b:41:2e:1e:3c:4d:22:
a5:32:dd:f8:c6:77:f2:6e:83:f0:a4:d7:ac:b0:04:f9:53:3a:
b4:ee:3a:12:39:ce:24:2a:43:4d:af:ca:56:d9:7f:b5:d8:86:
ab:a7:d5:6d:83:08:c6:f8:a3:97:c0:ab:8a:d5:e4:40:8c:b2:
b9:71:5f:dd:52:6e:dd:29:2d:f6:1b:0a:71:57:00:9a:45:a8:
1e:55:0e:e6:b3:0f:da:71:0f:41:4a:7e:41:3a:3a:26:f6:d3:
5e:dd:f4:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:16 2023 by rpki-client on console-fra.rpki-client.org