Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/SIXUq-u3VXmefmqRezxZesGIw6M.roa
File: SIXUq-u3VXmefmqRezxZesGIw6M.roa (raw, json)
Hash identifier: eddUGTfzlwN9V38HPK36+UTvrT7h2FHHe42a0gHD3Wc=
Subject key identifier: 48:85:D4:AB:EB:B7:55:79:9E:7E:6A:91:7B:3C:59:7A:C1:88:C3:A3
Certificate issuer: /CN=be40b3c2be7835d7b37b5826102f8746a5199d49
Certificate serial: F797C2
Authority key identifier: BE:40:B3:C2:BE:78:35:D7:B3:7B:58:26:10:2F:87:46:A5:19:9D:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vkCzwr54Ndeze1gmEC-HRqUZnUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/SIXUq-u3VXmefmqRezxZesGIw6M.roa
Signing time: Tue 08 Mar 2022 13:15:50 +0000
ROA not before: Tue 08 Mar 2022 13:15:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206961
IP address blocks: 185.197.141.0/24 maxlen: 24
185.197.143.0/24 maxlen: 24
185.197.140.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16226242 (0xf797c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be40b3c2be7835d7b37b5826102f8746a5199d49
Validity
Not Before: Mar 8 13:15:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4885d4abebb755799e7e6a917b3c597ac188c3a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:11:6d:66:fe:ff:63:0b:ef:24:e1:50:71:84:
45:9b:6a:1d:ac:5b:c4:a7:33:4a:2f:8f:66:91:47:
5c:40:db:a2:1b:1c:39:d0:10:d4:63:fa:4c:66:68:
96:04:97:36:55:d6:37:4e:c1:96:e9:6f:d9:1e:9e:
e5:41:bb:7a:7f:67:c2:47:6d:69:7b:ea:f2:f8:ca:
91:f3:7a:05:07:c4:f3:4d:26:8c:3c:62:bb:05:f4:
74:dd:fc:26:9b:32:4f:a1:42:46:9b:23:32:f4:33:
a5:ff:c4:34:b8:32:aa:5f:28:8d:1c:c8:a1:18:1c:
ce:f2:5b:de:a0:5c:6f:f2:e1:2e:6e:92:f7:66:89:
c7:7f:48:f8:ad:9e:a8:7f:b5:05:01:23:d4:35:3c:
08:36:37:ba:87:53:61:36:5b:64:31:0e:e0:ff:63:
3f:f7:70:78:29:d0:04:62:aa:90:35:74:0f:59:70:
1e:18:87:3c:9b:8e:4b:ae:aa:30:ef:66:22:a8:5b:
9f:80:73:6a:f0:7c:c8:ab:ca:1d:40:16:49:33:e2:
7e:59:30:2c:90:84:73:3f:49:1d:2d:6e:cf:18:24:
93:ed:db:07:d1:00:08:3b:74:cc:f5:ca:e0:2b:82:
ea:1b:ce:1a:1b:d1:98:9a:ac:84:ea:3f:dd:9c:69:
2a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:85:D4:AB:EB:B7:55:79:9E:7E:6A:91:7B:3C:59:7A:C1:88:C3:A3
X509v3 Authority Key Identifier:
keyid:BE:40:B3:C2:BE:78:35:D7:B3:7B:58:26:10:2F:87:46:A5:19:9D:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkCzwr54Ndeze1gmEC-HRqUZnUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/SIXUq-u3VXmefmqRezxZesGIw6M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.197.140.0/23
185.197.143.0/24
Signature Algorithm: sha256WithRSAEncryption
06:fe:37:a6:a1:7e:d7:df:18:a0:93:cf:54:6c:5a:5f:9a:16:
9c:38:a8:f6:21:27:a2:01:6b:10:3b:c7:7e:d0:8a:19:76:61:
e4:d8:a7:bf:47:47:ac:52:00:7b:9f:a2:9c:a4:ee:96:da:5e:
54:09:3d:49:03:ca:2d:00:db:fe:5b:e5:be:1a:8c:f7:64:46:
f3:4a:79:5b:f0:a0:8e:75:d9:e6:ff:7c:70:7c:f7:64:f4:15:
bf:8b:f7:09:b1:43:ad:ea:b5:fc:cb:36:03:11:5c:3d:45:56:
38:f3:6a:55:57:1e:96:e8:0a:37:67:f3:2f:5a:e4:b4:4e:e3:
92:63:6d:cb:e7:9d:14:cf:d2:97:38:ba:5e:ec:02:76:4c:07:
23:8c:5c:0b:69:51:d7:55:24:a2:01:2c:ba:db:7e:a2:e7:14:
50:20:6a:9f:75:2d:95:24:37:54:90:a7:fb:8f:3e:b3:f9:90:
57:c7:23:e5:88:2c:7e:8f:0a:ba:90:4d:85:61:f1:2f:f5:0e:
59:47:d7:e4:ce:8c:a0:e5:2a:b2:09:7b:bd:27:94:fa:0d:73:
fd:19:d7:10:28:77:00:49:05:4a:c2:58:52:10:2c:4d:b3:36:
ac:2c:c9:4c:f2:ef:c6:27:43:26:96:5b:82:4e:62:15:04:58:
20:da:bd:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:39 2023 by rpki-client on console.sobornost.net