Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/C6ySSnc3_m80ZaL97LnVz9KBd3o.roa
File: C6ySSnc3_m80ZaL97LnVz9KBd3o.roa (raw, json)
Hash identifier: Moqming5VNsyd4g1UN7wBJJYvKLxObjcNukTU9TVAh0=
Subject key identifier: 0B:AC:92:4A:77:37:FE:6F:34:65:A2:FD:EC:B9:D5:CF:D2:81:77:7A
Certificate issuer: /CN=c4f88b5c6e5116e50cf2b5bdf43e8720f1d8c60f
Certificate serial: 01CF9752
Authority key identifier: C4:F8:8B:5C:6E:51:16:E5:0C:F2:B5:BD:F4:3E:87:20:F1:D8:C6:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xPiLXG5RFuUM8rW99D6HIPHYxg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/C6ySSnc3_m80ZaL97LnVz9KBd3o.roa
Signing time: Sat 01 Jan 2022 09:58:19 +0000
ROA not before: Sat 01 Jan 2022 09:58:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 52036
IP address blocks: 78.111.128.0/20 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30381906 (0x1cf9752)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4f88b5c6e5116e50cf2b5bdf43e8720f1d8c60f
Validity
Not Before: Jan 1 09:58:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0bac924a7737fe6f3465a2fdecb9d5cfd281777a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:bf:c7:94:36:be:08:65:1a:1f:18:aa:eb:74:
c8:9f:8e:dc:81:b4:48:d9:f1:1b:e8:4d:72:91:77:
09:c0:be:2c:ab:1c:f6:4c:5e:43:d5:82:91:c7:12:
19:f3:0b:ce:24:0a:ed:f2:a0:25:26:b4:9c:03:7c:
dc:6b:84:8a:c4:a5:44:67:87:94:10:56:36:18:61:
c8:7c:5d:7a:99:87:ec:63:8d:50:6f:8a:7c:0a:9b:
2f:01:10:82:d0:28:e9:dd:12:38:43:b2:a6:38:70:
6a:c0:a2:eb:f3:5a:94:b1:ca:2e:fe:c9:99:47:f8:
af:b1:cb:62:85:88:a1:81:2e:92:39:60:77:7c:13:
25:42:19:6b:f5:ac:f4:a1:4c:d0:32:9a:e3:c7:d1:
b7:64:85:ad:d8:7a:2e:cb:e9:e2:16:d1:a2:a3:ad:
cd:57:f2:68:b7:0f:7b:6b:b9:aa:21:9b:8a:3c:c6:
f2:00:3f:7f:94:29:ec:57:fa:25:91:74:24:f0:00:
db:e8:ee:2c:50:40:d5:6b:74:5c:96:ec:ad:b2:60:
59:8d:9b:f9:54:97:4a:fa:4a:c0:9b:f7:a7:fa:20:
65:8c:d0:4b:89:36:87:0d:65:b0:3c:93:b0:17:39:
ad:92:f7:c2:35:f6:08:31:09:66:14:d9:b8:03:79:
d5:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:AC:92:4A:77:37:FE:6F:34:65:A2:FD:EC:B9:D5:CF:D2:81:77:7A
X509v3 Authority Key Identifier:
keyid:C4:F8:8B:5C:6E:51:16:E5:0C:F2:B5:BD:F4:3E:87:20:F1:D8:C6:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xPiLXG5RFuUM8rW99D6HIPHYxg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/C6ySSnc3_m80ZaL97LnVz9KBd3o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.111.128.0/20
Signature Algorithm: sha256WithRSAEncryption
18:c7:53:3d:b2:c4:e0:f2:a5:00:bd:ea:fa:5a:39:23:7f:b0:
7a:cb:8f:a5:5c:1f:6a:25:ac:51:e2:86:17:a9:a4:7e:03:62:
46:a0:40:dc:46:7d:12:e2:c3:70:0a:fd:45:7e:9c:a7:4b:32:
10:de:1c:e3:3d:2c:2a:c9:62:9e:dd:8f:9f:7a:80:3a:ac:95:
fd:57:22:a3:a7:19:0b:b0:bb:95:1d:26:af:cc:b4:81:a7:a0:
f5:04:d8:e8:15:5d:a4:fc:be:44:b1:fb:74:81:11:35:66:6f:
48:78:fc:e4:23:14:56:ad:6b:d5:b0:6b:d3:72:2d:fa:e5:3a:
42:6d:9c:cc:c9:91:45:2a:0d:fe:98:b8:e5:a0:2e:ab:21:5b:
b5:5a:51:c4:a4:96:4d:bf:c8:01:60:28:4b:3b:07:c3:8f:80:
05:8f:41:4e:a4:15:51:20:88:7a:78:ad:93:fd:f7:89:f3:e0:
5a:09:02:0e:82:5a:65:c5:da:28:fe:0e:cd:06:ea:ea:95:dc:
f3:9e:7f:31:c8:fd:6a:d2:4d:35:27:aa:e6:f2:df:eb:03:43:
b0:68:6f:17:d9:d8:87:87:f6:3f:12:56:bb:d1:02:70:91:2c:
94:ce:0a:0e:23:a8:98:51:e3:c1:4c:87:68:ba:74:a7:da:fd:
a6:3e:79:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:41 2023 by rpki-client on console.sobornost.net