Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/278663-b135-4db1-a044-20624b3c157f/1/ph1KZBehn1bDTO1RGAF3tqrFiqk.roa
File: ph1KZBehn1bDTO1RGAF3tqrFiqk.roa (raw, json)
Hash identifier: 8Cl+j9xwPXuPFJ55WAvLjEaQ8z3sE7Sh4Te4kjSipis=
Subject key identifier: A6:1D:4A:64:17:A1:9F:56:C3:4C:ED:51:18:01:77:B6:AA:C5:8A:A9
Certificate issuer: /CN=fb32e9f4aa32aba7312fab054b174dce8c515ca3
Certificate serial: 01867CD8050F1B13364E677BBE6131ABF9BD
Authority key identifier: FB:32:E9:F4:AA:32:AB:A7:31:2F:AB:05:4B:17:4D:CE:8C:51:5C:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-zLp9Koyq6cxL6sFSxdNzoxRXKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/278663-b135-4db1-a044-20624b3c157f/1/ph1KZBehn1bDTO1RGAF3tqrFiqk.roa
Signing time: Thu 23 Feb 2023 05:56:17 +0000
ROA not before: Thu 23 Feb 2023 05:56:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199785
IP address blocks: 77.91.70.0/24 maxlen: 24
77.91.77.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:7c:d8:05:0f:1b:13:36:4e:67:7b:be:61:31:ab:f9:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb32e9f4aa32aba7312fab054b174dce8c515ca3
Validity
Not Before: Feb 23 05:56:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a61d4a6417a19f56c34ced51180177b6aac58aa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2a:a0:1f:53:d7:25:61:64:bf:c2:e1:95:9d:
a3:4a:99:e6:fc:00:84:08:52:94:d7:ab:ad:e3:46:
e2:c0:c7:82:72:a7:08:98:10:2c:b0:1e:23:a0:12:
e3:c8:33:e4:aa:b7:39:fb:68:12:6b:cf:77:f0:06:
a2:52:c2:71:93:1d:b0:e5:87:e4:bf:63:a3:d0:02:
f2:c9:aa:f8:41:81:67:32:e9:1f:f8:ee:b8:b3:9f:
b7:ab:95:94:bc:47:f5:4f:cb:14:7d:8b:b5:59:77:
a4:e5:97:ef:df:ea:26:31:59:e1:5e:19:ec:32:78:
66:4c:87:c4:39:6b:d2:db:c9:e2:4d:2f:31:0f:ce:
c4:5c:90:ce:e9:6b:50:b7:bf:97:78:3f:01:6c:da:
75:7b:4a:2c:1a:9f:76:0a:3f:55:d3:51:4a:44:9b:
30:20:03:9f:44:01:63:65:88:bd:28:d2:50:93:d4:
05:21:3e:16:b0:3c:9d:89:a5:37:4a:8a:58:c6:96:
9c:7d:48:eb:3d:46:29:58:3d:bd:c4:94:57:4d:4e:
ef:e6:b9:ca:63:9f:8f:00:3c:09:5a:60:92:21:f1:
a7:7b:b6:6c:85:a1:70:1d:7c:3c:a7:57:11:f0:d5:
ff:89:f6:e0:40:f8:ed:57:ff:54:a8:22:1b:1b:4b:
d8:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:1D:4A:64:17:A1:9F:56:C3:4C:ED:51:18:01:77:B6:AA:C5:8A:A9
X509v3 Authority Key Identifier:
keyid:FB:32:E9:F4:AA:32:AB:A7:31:2F:AB:05:4B:17:4D:CE:8C:51:5C:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-zLp9Koyq6cxL6sFSxdNzoxRXKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/278663-b135-4db1-a044-20624b3c157f/1/ph1KZBehn1bDTO1RGAF3tqrFiqk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/278663-b135-4db1-a044-20624b3c157f/1/1-zLp9Koyq6cxL6sFSxdNzoxRXKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.91.70.0/24
77.91.77.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:64:af:31:64:1b:18:17:17:ec:4f:d1:1d:4d:e6:ec:26:6e:
70:28:89:3d:bd:d6:54:f0:5d:3e:b3:91:9c:ce:1d:e9:a0:62:
12:91:81:cc:11:54:d8:2d:cb:c3:0b:30:c1:59:ab:4a:dc:c8:
fc:fa:1a:25:01:50:94:f4:a7:61:a6:3f:f5:ac:c1:34:74:e1:
c2:ca:be:5f:08:0e:d5:42:ef:cf:98:1b:3a:35:aa:7c:a4:23:
18:61:cf:15:80:c9:0e:2a:98:7f:5e:f0:4d:f5:eb:4e:d3:88:
6d:5c:db:2d:82:85:25:eb:15:82:ff:5b:b6:37:0c:0f:2c:2d:
b2:f3:ce:0c:2e:4b:c3:d0:98:9f:ee:15:31:b8:8b:e2:8c:aa:
61:31:57:92:28:9d:e7:03:22:1a:68:13:ef:bf:a9:e5:28:8f:
35:db:e8:d4:44:e5:61:06:b7:cf:b5:ac:6a:8b:2a:98:ff:fa:
63:23:c2:35:b7:cc:82:87:bc:c6:90:8f:c1:86:fa:0d:8f:b0:
1a:c3:3e:7d:41:68:5c:54:77:21:3c:e9:78:19:f4:0c:e0:b0:
97:c3:fa:ea:4e:8b:1e:ed:c6:1f:64:2e:19:07:49:a1:75:02:
08:9d:17:88:49:f9:bb:b2:69:e5:6b:14:18:93:2a:4c:a3:57:
92:93:7c:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:16 2023 by rpki-client on console-fra.rpki-client.org