Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/69MLC6hg4VhzowSfbHQBGfSkFUI.roa
File: 69MLC6hg4VhzowSfbHQBGfSkFUI.roa (raw, json)
Hash identifier: GjPB6w2k7/bUrL83ExIQAAHKjjKa2zmSXhntoUpQL+I=
Subject key identifier: EB:D3:0B:0B:A8:60:E1:58:73:A3:04:9F:6C:74:01:19:F4:A4:15:42
Certificate issuer: /CN=be40b3c2be7835d7b37b5826102f8746a5199d49
Certificate serial: 502B02
Authority key identifier: BE:40:B3:C2:BE:78:35:D7:B3:7B:58:26:10:2F:87:46:A5:19:9D:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vkCzwr54Ndeze1gmEC-HRqUZnUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/69MLC6hg4VhzowSfbHQBGfSkFUI.roa
Signing time: Sat 01 Jan 2022 02:57:44 +0000
ROA not before: Sat 01 Jan 2022 02:57:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204504
IP address blocks: 185.227.244.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5253890 (0x502b02)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be40b3c2be7835d7b37b5826102f8746a5199d49
Validity
Not Before: Jan 1 02:57:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ebd30b0ba860e15873a3049f6c740119f4a41542
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:0c:a3:34:ca:5e:10:7b:58:53:ea:21:6a:db:
11:aa:d2:75:c1:05:43:85:d6:43:04:de:b4:1d:3f:
3c:b1:bd:cc:dd:71:d0:f2:b0:8a:45:fe:47:b7:cd:
85:e4:7b:54:26:e0:de:a9:b0:fa:82:e4:87:e3:45:
5a:f1:7a:80:af:0a:49:1a:cc:29:52:a6:b3:a9:f6:
90:d0:a2:b1:d0:fe:a6:c4:98:99:bd:ce:5d:2a:d3:
5b:c1:e8:8c:47:31:bd:d1:7d:6f:b6:de:4f:49:86:
68:10:b7:4b:70:c3:09:f4:ac:0b:e8:cd:01:c0:5c:
dd:b8:fe:49:d4:48:2c:9b:98:7f:18:a4:07:fa:95:
79:e4:d1:02:50:28:e4:ef:e9:40:b0:4b:fc:3e:f3:
8f:b1:cd:4e:40:c2:7f:2f:a9:1e:f3:cc:69:61:cb:
b6:83:82:b3:bf:74:4f:38:f9:74:6d:18:fe:c6:78:
76:c5:d4:db:3a:45:86:e1:04:db:5b:36:e9:2d:67:
09:08:c9:6b:1e:fe:a6:42:62:af:98:2e:46:87:07:
b1:0d:07:02:73:19:eb:29:d5:c5:7c:41:93:bd:28:
e5:3b:5b:91:32:2d:38:c5:7a:8f:44:6b:91:98:23:
68:6a:7b:d3:8d:e7:7d:9f:fd:08:ef:a5:ab:51:b5:
81:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:D3:0B:0B:A8:60:E1:58:73:A3:04:9F:6C:74:01:19:F4:A4:15:42
X509v3 Authority Key Identifier:
keyid:BE:40:B3:C2:BE:78:35:D7:B3:7B:58:26:10:2F:87:46:A5:19:9D:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkCzwr54Ndeze1gmEC-HRqUZnUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/69MLC6hg4VhzowSfbHQBGfSkFUI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.227.244.0/22
Signature Algorithm: sha256WithRSAEncryption
9d:25:2d:48:59:95:b6:4f:94:a8:68:7e:eb:3f:a1:4f:05:b6:
e6:c3:56:49:ac:9a:4d:30:87:7e:4c:e1:5a:b3:98:b6:10:b8:
db:23:42:83:35:0b:bb:36:7f:0c:2a:f8:07:25:fb:c4:3f:1f:
a4:48:a3:8b:9f:89:a7:a7:7a:f2:f5:be:51:36:71:17:ae:89:
f3:7e:4d:f4:61:20:4a:0f:32:8d:cc:77:b0:0e:34:9a:fe:95:
22:65:f2:79:a6:22:e6:7d:a0:8a:2c:f4:bb:df:ae:d3:26:18:
79:c8:82:48:da:33:a8:ee:78:e8:05:06:f1:ce:08:fd:3c:07:
1a:82:30:16:71:2d:e7:f0:b5:8e:fe:bb:de:46:57:61:a9:ba:
09:6c:33:7a:4a:08:a8:68:a6:e9:a8:66:4d:90:cb:da:33:2e:
6b:16:8e:69:b4:d1:59:ee:24:33:aa:58:37:2f:2c:70:43:7f:
84:13:8b:21:e5:5e:94:6d:22:a3:8d:f2:82:a1:1c:4b:d7:6a:
52:eb:11:88:b8:bf:93:98:4b:b0:00:42:5f:d8:f7:c5:76:1a:
f9:1f:e4:8f:ba:62:ab:79:dc:08:92:2c:68:38:5d:51:98:03:
13:3f:70:f9:bf:7c:a7:b8:7a:eb:8d:f6:bd:b2:4a:d7:30:49:
a7:90:e2:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:39 2023 by rpki-client on console.sobornost.net