Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/XvVRaF_zuFGWAJG7YQMxFoAP4AI.roa
File: XvVRaF_zuFGWAJG7YQMxFoAP4AI.roa (raw, json)
Hash identifier: jCSxSK+Q7JKv7XhTOTS0kwCum9hHWd8MDEknz0ymVcg=
Subject key identifier: 5E:F5:51:68:5F:F3:B8:51:96:00:91:BB:61:03:31:16:80:0F:E0:02
Certificate issuer: /CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61
Certificate serial: 242487DF
Authority key identifier: 79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/XvVRaF_zuFGWAJG7YQMxFoAP4AI.roa
Signing time: Sat 01 Jan 2022 02:57:16 +0000
ROA not before: Sat 01 Jan 2022 02:57:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209665
IP address blocks: 62.32.78.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 606373855 (0x242487df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61
Validity
Not Before: Jan 1 02:57:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5ef551685ff3b851960091bb61033116800fe002
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:7a:f7:18:6c:e6:0a:e2:5b:95:dd:80:e5:20:
63:2d:fc:42:45:50:4b:18:21:7a:e6:f6:bf:bd:67:
9b:be:97:d4:9d:fa:b1:fe:4e:88:59:a9:80:b9:7b:
bb:5c:4d:c2:f6:bd:51:e6:09:a8:b5:42:14:e7:31:
5b:fc:58:0e:85:06:d0:65:3d:b7:29:36:59:9b:cf:
27:d0:9f:57:49:33:5b:43:e2:a2:d6:62:5f:ff:3e:
41:c7:1e:53:75:6f:39:7c:8f:fd:db:90:d8:e3:da:
ec:37:e5:79:75:6b:fa:32:c7:71:3f:59:d3:62:58:
be:0e:30:6f:69:fc:3d:fa:63:41:7b:51:e2:a5:e3:
f9:4b:74:a8:63:73:e4:ae:51:6b:74:57:5c:87:f1:
96:4a:73:67:bb:6b:3a:ec:51:0e:6e:3d:3a:c8:2a:
b7:92:de:78:8a:e8:96:cf:dd:70:83:79:a9:8a:9c:
f5:50:e6:c5:62:69:d3:3a:dc:64:5f:1d:a5:5e:47:
83:b6:65:ef:5d:09:92:83:8a:f9:b0:fb:1f:7b:86:
6b:55:b5:4b:80:2b:9b:e4:9c:2e:d4:38:7c:db:a7:
48:43:c8:81:e7:0c:2b:43:e7:43:ab:0e:17:d3:2c:
58:ed:5c:e8:47:9b:d7:af:91:8a:ac:38:cd:bd:c8:
4f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:F5:51:68:5F:F3:B8:51:96:00:91:BB:61:03:31:16:80:0F:E0:02
X509v3 Authority Key Identifier:
keyid:79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/XvVRaF_zuFGWAJG7YQMxFoAP4AI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.32.78.0/24
Signature Algorithm: sha256WithRSAEncryption
40:0e:07:45:12:e6:4f:c6:36:4a:7c:bd:9f:7e:8d:25:dc:aa:
5e:50:b1:63:15:6e:fe:bc:05:3e:77:8a:3b:30:7b:c5:51:59:
19:70:88:ed:fb:4f:e3:ae:28:44:2a:d8:d0:59:74:c7:ea:f6:
25:ee:4c:eb:93:4f:51:46:1b:7b:1d:14:82:90:4e:36:5e:ee:
b5:f5:28:f7:48:38:3d:30:3f:f3:6e:aa:4c:db:70:25:20:d4:
a6:ca:93:c9:6b:f7:50:ae:97:bb:b1:88:57:98:d5:c0:6d:89:
7b:44:9e:f5:50:3e:73:6c:c3:6c:b0:ab:c4:54:59:3a:c5:79:
b1:93:07:b6:a6:7b:b1:ad:52:ef:d3:70:f2:b3:f9:41:a1:ca:
2f:bc:3e:c2:9c:56:90:05:de:fa:72:cf:fc:82:68:84:67:94:
4f:8b:37:aa:18:8d:ea:47:bf:98:a7:72:07:d5:18:1e:dc:3e:
f5:0c:27:c0:ad:45:5b:66:c2:75:45:7c:55:60:10:fc:b2:aa:
fd:11:20:4c:47:08:39:8a:c5:ad:be:f4:9b:8f:c8:25:dd:5a:
c0:d8:57:ab:1b:92:f1:f1:8f:37:bc:89:45:92:f8:3c:f1:de:
9c:09:2b:4f:f0:9d:5a:ce:28:8c:f1:a8:40:aa:9e:db:f2:93:
33:15:7f:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:19 2024 by rpki-client on console-ams.rpki-client.org