Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/EKJJNcDoaBqgKqlxzfGuYTjtr_I.roa
File: EKJJNcDoaBqgKqlxzfGuYTjtr_I.roa (raw, json)
Hash identifier: +2JaEPYImzvRb2ZUHdub5PKF/vOwIHwaYgKSTmEHiFM=
Subject key identifier: 10:A2:49:35:C0:E8:68:1A:A0:2A:A9:71:CD:F1:AE:61:38:ED:AF:F2
Certificate issuer: /CN=da00e981953061972c896bd6d27738d083aadb0e
Certificate serial: 02830523
Authority key identifier: DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/EKJJNcDoaBqgKqlxzfGuYTjtr_I.roa
Signing time: Sat 01 Jan 2022 13:02:55 +0000
ROA not before: Sat 01 Jan 2022 13:02:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22773
IP address blocks: 77.81.124.0/22 maxlen: 24
85.204.148.0/22 maxlen: 24
86.105.104.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42140963 (0x2830523)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da00e981953061972c896bd6d27738d083aadb0e
Validity
Not Before: Jan 1 13:02:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=10a24935c0e8681aa02aa971cdf1ae6138edaff2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:5d:d2:8a:89:dc:dd:c0:31:22:2a:20:be:ac:
b1:27:39:f8:ce:f6:48:4a:b7:48:1f:a3:6a:4f:58:
b0:97:e2:b2:a1:68:d3:14:09:1d:77:c6:60:ef:c8:
71:87:a2:05:fc:ac:b3:b3:47:22:5c:bf:22:54:40:
61:91:e2:34:82:37:5a:eb:b1:05:74:ca:9a:0f:dd:
22:a2:eb:92:ee:4e:df:cb:17:e6:8c:58:7f:31:25:
cb:a4:c0:fd:a3:9d:59:62:1c:5c:11:1b:cf:3b:6c:
bd:a6:8a:58:26:f6:03:ff:49:d1:79:e4:2c:74:89:
29:47:c6:8d:be:90:59:9c:e1:81:34:50:89:67:3d:
94:1d:db:8b:3b:18:52:3d:de:dc:64:df:55:b4:dc:
fa:23:5f:fe:a1:b7:da:75:0a:e8:29:63:96:50:69:
0f:6e:fc:3a:31:42:0a:37:14:87:74:fc:78:84:f2:
5c:0a:3f:12:dd:64:65:5a:3f:c2:8a:46:59:63:de:
8b:e5:da:74:07:e6:49:b4:48:cf:26:79:0f:ac:1c:
28:43:ac:8a:f2:de:15:be:47:f2:dd:38:4b:92:bc:
37:10:25:12:f4:fd:82:9d:66:32:14:73:d1:2d:b9:
13:e9:f6:d3:a9:97:a9:65:ed:7c:0a:25:9b:39:50:
43:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:A2:49:35:C0:E8:68:1A:A0:2A:A9:71:CD:F1:AE:61:38:ED:AF:F2
X509v3 Authority Key Identifier:
keyid:DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/EKJJNcDoaBqgKqlxzfGuYTjtr_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.124.0/22
85.204.148.0/22
86.105.104.0/22
Signature Algorithm: sha256WithRSAEncryption
93:ab:ec:44:7b:a6:53:20:46:b5:44:4a:7b:8b:9e:57:32:bd:
55:de:f5:8f:88:59:2e:b4:bb:56:27:5f:b4:5c:f0:c7:37:a7:
9d:6d:3c:90:e6:48:ee:c1:1e:0d:06:3a:08:d6:b4:ed:7f:9f:
b3:44:dd:c6:6d:69:20:47:da:d5:c3:fc:46:1f:b6:bf:96:67:
31:4d:23:cf:55:ad:f2:3d:ee:6f:34:83:ac:2d:a6:59:eb:ea:
73:e7:fc:9a:5c:51:a0:65:3c:91:22:48:9c:60:cd:a7:94:af:
95:ab:f6:f2:be:ae:60:2f:fd:f1:73:37:a7:51:56:34:48:88:
d4:52:5f:75:aa:db:3d:74:aa:8a:2a:be:4b:32:5d:45:fa:c6:
3d:ff:da:21:ea:35:44:7e:f0:7d:cc:39:ea:08:91:56:1f:af:
11:e2:42:2c:8b:c4:11:9f:19:95:12:9f:d6:b0:97:ad:d5:84:
40:83:10:c8:4a:56:b1:3b:9e:35:ed:e8:15:67:32:58:3b:25:
34:c8:c1:13:62:32:7f:24:9a:db:31:61:ea:b5:a1:40:9e:1f:
75:39:b7:7f:f9:b7:5d:36:25:e6:75:89:8e:2b:cf:15:7a:3c:
a3:1c:4f:42:8c:c3:63:29:5a:e9:06:3e:71:7c:bc:b2:6a:65:
9b:ad:7d:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:55 2023 by rpki-client on console-ams.rpki-client.org