Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/bVLUMecjyEiI8JwmJN4GSA1cQQ0.roa
File: bVLUMecjyEiI8JwmJN4GSA1cQQ0.roa (raw, json)
Hash identifier: ZpeYt0t0k3W16cm+VEunf09X7Jqey6QmkS7QcrRfP7M=
Subject key identifier: 6D:52:D4:31:E7:23:C8:48:88:F0:9C:26:24:DE:06:48:0D:5C:41:0D
Certificate issuer: /CN=be40b3c2be7835d7b37b5826102f8746a5199d49
Certificate serial: 4EC260
Authority key identifier: BE:40:B3:C2:BE:78:35:D7:B3:7B:58:26:10:2F:87:46:A5:19:9D:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vkCzwr54Ndeze1gmEC-HRqUZnUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/bVLUMecjyEiI8JwmJN4GSA1cQQ0.roa
Signing time: Sat 01 Jan 2022 02:57:43 +0000
ROA not before: Sat 01 Jan 2022 02:57:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9009
IP address blocks: 185.187.46.0/23 maxlen: 23
92.42.20.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5161568 (0x4ec260)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be40b3c2be7835d7b37b5826102f8746a5199d49
Validity
Not Before: Jan 1 02:57:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6d52d431e723c84888f09c2624de06480d5c410d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:fc:3c:91:7f:84:88:15:15:b8:d0:15:9d:f8:
8f:81:3f:aa:67:ab:b8:da:7d:3b:5d:ae:c1:62:a2:
d3:e7:9c:75:5f:4e:14:5e:66:0e:79:10:f7:99:bd:
35:4a:2c:c5:e7:ba:fc:cb:df:6c:ba:84:3d:41:b6:
0b:9e:cd:43:ad:3d:6d:e6:97:a9:6a:9b:4c:98:66:
33:60:3c:5e:41:d6:66:1a:b7:7d:00:35:6e:7c:8d:
25:c5:49:47:14:3d:8d:83:1d:77:7e:19:81:aa:0e:
a0:c7:3f:11:aa:01:e4:2a:a7:2d:83:f2:4a:dd:6e:
b0:d0:f7:91:f5:8d:7b:f7:68:b3:43:0e:f5:45:8b:
b9:47:14:aa:89:27:04:cc:fe:e2:c5:ac:1d:69:b5:
87:97:4a:5b:33:25:4c:f9:31:7a:5e:7c:4a:d6:93:
f8:ea:0e:db:66:6e:94:ab:b7:fa:db:c1:1a:ed:3e:
c3:8e:83:7e:c1:cf:17:a0:80:48:e7:7f:ba:96:45:
3c:db:10:c4:86:6e:b5:88:26:be:b2:de:c0:57:4d:
3b:55:ea:18:ac:2d:46:03:1e:9e:fe:b7:bc:c7:65:
80:93:12:98:1a:57:08:ca:1d:73:fc:66:d1:9f:ce:
07:e3:61:81:10:ec:f1:58:34:7a:ad:82:d2:7e:8b:
37:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:52:D4:31:E7:23:C8:48:88:F0:9C:26:24:DE:06:48:0D:5C:41:0D
X509v3 Authority Key Identifier:
keyid:BE:40:B3:C2:BE:78:35:D7:B3:7B:58:26:10:2F:87:46:A5:19:9D:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkCzwr54Ndeze1gmEC-HRqUZnUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/bVLUMecjyEiI8JwmJN4GSA1cQQ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.42.20.0/22
185.187.46.0/23
Signature Algorithm: sha256WithRSAEncryption
6c:6e:e2:34:f8:dd:e6:eb:b5:9d:2f:2c:f7:bc:b3:1e:10:3b:
7f:40:c8:16:ca:4e:20:3e:ff:b2:a4:a5:1e:34:2a:32:1d:cd:
43:d2:83:d1:89:84:4a:3a:17:42:56:20:66:58:5d:3e:f3:5a:
23:05:ba:60:08:b8:72:0d:60:f6:36:fd:04:cd:dc:99:97:89:
6f:54:97:e1:4e:24:86:bd:27:7c:2e:ec:d6:cf:d2:e5:24:29:
7c:2f:d5:af:7a:04:1d:12:dd:0d:eb:2e:59:04:7a:b7:c8:4c:
e3:9f:96:75:34:a6:ab:24:d9:73:cd:00:b8:31:6d:81:90:4f:
0a:79:34:e8:9c:65:d2:8f:89:fa:71:f1:b2:bf:c4:29:c8:46:
f3:df:ad:cd:b3:1b:ff:74:a6:5c:88:e0:48:8b:e3:f5:89:43:
87:38:20:0c:93:cb:2b:f2:5d:81:6e:2a:e0:5a:3d:07:72:5d:
fd:5c:e1:9c:b7:11:13:7a:7b:cf:17:d5:aa:6f:d0:46:3e:0d:
b6:74:39:5d:52:33:c0:8b:d6:27:5a:10:e2:11:60:eb:53:41:
03:58:65:fa:79:4c:39:2d:67:f8:64:35:30:19:e6:8f:35:38:
f0:b3:e8:11:f7:ad:c0:19:09:78:68:1f:18:83:9f:bb:16:d2:
53:3f:4e:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:39 2023 by rpki-client on console.sobornost.net