Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/278663-b135-4db1-a044-20624b3c157f/1/q8tXtiuxKyukFMDqpH_MPQFB1Kc.roa
File: q8tXtiuxKyukFMDqpH_MPQFB1Kc.roa (raw, json)
Hash identifier: s0dYqik9GanpWuHsiplfezeGnJMrii2gjbLzYzY4BFA=
Subject key identifier: AB:CB:57:B6:2B:B1:2B:2B:A4:14:C0:EA:A4:7F:CC:3D:01:41:D4:A7
Certificate issuer: /CN=fb32e9f4aa32aba7312fab054b174dce8c515ca3
Certificate serial: 0184CD85610120264605533244F3B4E6EB2A
Authority key identifier: FB:32:E9:F4:AA:32:AB:A7:31:2F:AB:05:4B:17:4D:CE:8C:51:5C:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-zLp9Koyq6cxL6sFSxdNzoxRXKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/278663-b135-4db1-a044-20624b3c157f/1/q8tXtiuxKyukFMDqpH_MPQFB1Kc.roa
Signing time: Thu 01 Dec 2022 11:49:41 +0000
ROA not before: Thu 01 Dec 2022 11:49:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203727
IP address blocks: 77.91.124.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:cd:85:61:01:20:26:46:05:53:32:44:f3:b4:e6:eb:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb32e9f4aa32aba7312fab054b174dce8c515ca3
Validity
Not Before: Dec 1 11:49:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=abcb57b62bb12b2ba414c0eaa47fcc3d0141d4a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ea:36:6b:08:8d:6a:fb:4b:cc:7c:ee:2c:95:
e9:b5:8a:02:6d:30:fc:9f:ad:ba:84:d0:ca:25:46:
9b:1d:e7:c1:e4:5e:e4:58:c3:62:7e:88:0c:48:82:
f8:c9:1c:95:4a:4b:b1:d6:ad:67:5c:0f:13:7b:89:
0b:ba:79:8d:af:ba:3c:68:4c:86:ad:f3:d6:a3:32:
42:13:7e:a5:b3:7b:2a:8d:71:af:2d:b5:16:9c:b1:
4d:7d:1a:79:99:db:c3:94:d8:ac:3d:5a:f7:20:9b:
b0:de:00:4a:cd:56:d9:86:ab:f3:da:e9:22:7d:c0:
bb:23:d2:be:73:71:e9:84:49:17:6e:0d:cc:54:a3:
12:c0:5b:4b:bb:8e:67:84:4c:1f:31:11:e5:26:9e:
44:b8:04:98:b2:cb:57:c6:cd:33:e0:0c:ad:e1:ad:
7d:a1:82:9f:d3:b2:71:8d:e2:17:b3:09:5e:fc:a6:
09:74:30:b8:1b:5f:0e:ff:51:a1:0b:46:bb:4e:32:
9c:65:a9:51:7c:97:09:82:b9:6b:75:25:ee:d1:f7:
95:00:d8:00:5f:53:ba:1e:ab:1f:83:e4:e0:26:ce:
10:99:85:ad:b4:e2:5f:ed:d8:69:d0:9f:32:18:41:
4c:46:da:19:65:41:f2:37:5e:59:06:4c:f3:30:81:
79:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:CB:57:B6:2B:B1:2B:2B:A4:14:C0:EA:A4:7F:CC:3D:01:41:D4:A7
X509v3 Authority Key Identifier:
keyid:FB:32:E9:F4:AA:32:AB:A7:31:2F:AB:05:4B:17:4D:CE:8C:51:5C:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-zLp9Koyq6cxL6sFSxdNzoxRXKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/278663-b135-4db1-a044-20624b3c157f/1/q8tXtiuxKyukFMDqpH_MPQFB1Kc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/278663-b135-4db1-a044-20624b3c157f/1/1-zLp9Koyq6cxL6sFSxdNzoxRXKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.91.124.0/24
Signature Algorithm: sha256WithRSAEncryption
59:a5:d6:81:fd:77:28:44:40:eb:34:cc:af:7e:1e:1e:1f:80:
81:60:d3:11:55:32:67:45:b5:7e:5d:13:13:ce:35:f4:8b:c3:
5e:5d:54:b6:b3:17:6e:43:23:bb:52:ee:e4:e1:21:97:e1:13:
8c:ae:cb:d7:65:91:ac:0f:e0:fc:5e:11:04:e0:9e:1f:77:1e:
a2:09:a4:e3:b4:a4:f3:17:b9:60:fc:17:60:e2:db:ed:b8:e1:
fd:11:69:90:c8:b4:bd:28:a6:5d:2f:81:ef:0b:54:ca:91:5a:
e8:d3:76:9f:8c:a9:ed:9a:e3:8d:9f:d5:4e:61:26:fd:a2:80:
f1:f1:bc:95:a4:33:10:66:2e:6c:76:01:a8:c3:09:67:d8:89:
7a:c0:5d:99:47:c1:32:16:ed:5b:5d:85:4b:4b:4f:83:62:f4:
45:ba:3e:ec:f8:15:b1:1e:73:c2:b3:bb:e5:28:2d:64:c6:d2:
a1:dc:62:68:2d:50:4f:9e:6d:b2:c2:89:1d:d8:41:8d:e3:ed:
fa:c7:48:a3:a4:12:58:7d:06:2a:5c:b8:b5:ef:15:50:ee:1e:
5d:a5:3b:e1:26:58:6b:48:62:66:47:e1:32:9f:77:95:ad:b9:
0c:33:5f:35:c1:4c:58:08:94:78:7e:1c:35:f8:3d:95:f6:88:
66:d4:51:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:07 2023 by rpki-client on console-ams.rpki-client.org