Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0d903f-1831-4d03-aab4-81af7c657e05/1/9dLY11sYltZlU79MKj23Y5x9k9c.roa
File: 9dLY11sYltZlU79MKj23Y5x9k9c.roa (raw, json)
Hash identifier: iScKGiTKxealChabUAjOJhVseWPR1rYPvDvoxjbfVnY=
Subject key identifier: F5:D2:D8:D7:5B:18:96:D6:65:53:BF:4C:2A:3D:B7:63:9C:7D:93:D7
Certificate issuer: /CN=d123b8d462134667ec6a9d1e154e5c7f0596662c
Certificate serial: 01826DFFBB0790C06C26DB6DBE238C663C42
Authority key identifier: D1:23:B8:D4:62:13:46:67:EC:6A:9D:1E:15:4E:5C:7F:05:96:66:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0SO41GITRmfsap0eFU5cfwWWZiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0d903f-1831-4d03-aab4-81af7c657e05/1/9dLY11sYltZlU79MKj23Y5x9k9c.roa
Signing time: Fri 05 Aug 2022 12:34:12 +0000
ROA not before: Fri 05 Aug 2022 12:34:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43478
IP address blocks: 62.78.91.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:6d:ff:bb:07:90:c0:6c:26:db:6d:be:23:8c:66:3c:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d123b8d462134667ec6a9d1e154e5c7f0596662c
Validity
Not Before: Aug 5 12:34:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f5d2d8d75b1896d66553bf4c2a3db7639c7d93d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:26:02:b0:f3:e2:27:a2:2c:fc:df:ea:49:b2:
55:e7:08:84:e6:69:a1:73:2e:8d:dc:5e:a0:eb:40:
95:df:34:b2:4f:3b:64:9a:f9:3f:f2:4e:1c:d3:02:
65:fb:d9:83:08:70:cf:91:75:75:60:ff:09:c9:26:
9a:9a:67:b6:83:0b:bc:90:f0:a8:54:9b:cc:e0:4b:
8e:f4:9d:87:02:6b:b0:9e:47:ce:5d:15:df:d7:5f:
ca:1f:49:e1:c1:a5:cf:a3:31:30:ec:7b:e3:48:6b:
e4:fd:7d:e5:42:21:bc:87:88:a1:35:d5:91:09:c7:
7a:49:d2:24:08:33:72:a9:79:cb:c9:50:ce:c9:50:
d8:51:cb:64:89:a2:5a:81:d3:92:f6:0c:9b:13:67:
dd:fa:ec:75:d3:aa:5c:c3:31:d9:7f:18:b7:b0:07:
4f:ac:5c:4e:3f:c9:bc:0c:0a:28:76:dc:58:33:fe:
22:e9:c7:ed:16:56:48:04:03:72:c0:0e:b9:1e:98:
1b:48:35:a4:32:99:7c:a1:ef:1a:55:74:4f:31:e3:
7f:b0:13:98:cc:a8:31:8c:48:ab:df:41:04:48:3d:
31:1a:26:d2:23:7e:e3:26:68:25:87:d3:63:1f:4a:
7a:45:c7:92:c9:69:b7:58:cb:3f:7a:8b:08:91:6e:
c2:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:D2:D8:D7:5B:18:96:D6:65:53:BF:4C:2A:3D:B7:63:9C:7D:93:D7
X509v3 Authority Key Identifier:
keyid:D1:23:B8:D4:62:13:46:67:EC:6A:9D:1E:15:4E:5C:7F:05:96:66:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0SO41GITRmfsap0eFU5cfwWWZiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0d903f-1831-4d03-aab4-81af7c657e05/1/9dLY11sYltZlU79MKj23Y5x9k9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0d903f-1831-4d03-aab4-81af7c657e05/1/0SO41GITRmfsap0eFU5cfwWWZiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.78.91.0/24
Signature Algorithm: sha256WithRSAEncryption
47:49:7d:95:87:ce:9c:dc:b7:de:60:42:a1:7b:3c:44:fb:2c:
41:22:20:8c:00:00:89:a4:69:7a:46:4d:07:e6:a0:92:12:ea:
f6:2d:3b:ed:c2:0b:b3:76:65:63:f0:75:2a:44:05:c0:63:bb:
ef:50:84:fb:e2:9e:62:37:b3:82:e9:cf:39:16:1e:42:5e:90:
5a:6a:21:97:4d:75:aa:b1:37:34:98:3f:78:9b:f5:e7:b2:5d:
41:41:b8:c5:27:ce:82:11:c6:73:92:78:80:de:85:bb:c6:db:
c0:a3:02:12:cb:fb:70:6f:7b:72:77:87:06:1f:72:95:10:fc:
7e:1d:5a:0c:97:4c:d7:67:f0:bc:2e:73:eb:7e:5c:c6:aa:9f:
8e:70:55:24:bc:ba:43:ca:41:5e:43:25:4a:2b:3f:a6:e0:97:
10:40:89:20:23:6d:f2:81:18:b6:bc:79:e8:58:91:b8:dc:6a:
2f:07:c0:c5:58:c4:2b:0c:04:23:d4:21:0d:83:d6:68:af:02:
b4:e0:e6:41:f1:74:c7:47:44:bd:61:2f:d2:c2:a0:bd:57:3d:
d5:4f:12:bb:b6:df:f1:08:5f:a6:f0:5b:49:12:8d:8f:da:1b:
46:b1:00:e6:1f:9f:1d:0c:70:5f:c3:3b:49:cf:8a:c9:44:37:
bc:6b:91:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:39 2023 by rpki-client on console-fra.rpki-client.org