Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/yI7NXJddg506tX55k2P56eaxbnc.roa
File: yI7NXJddg506tX55k2P56eaxbnc.roa (raw, json)
Hash identifier: 40BcQ4Ea7eHEuE/8Tnm1fblbPxhgGR3BHrn2gdM9TbY=
Subject key identifier: C8:8E:CD:5C:97:5D:83:9D:3A:B5:7E:79:93:63:F9:E9:E6:B1:6E:77
Certificate issuer: /CN=145ceb292089e0df75719db3e96c509754f94837
Certificate serial: 0D2C5B25
Authority key identifier: 14:5C:EB:29:20:89:E0:DF:75:71:9D:B3:E9:6C:50:97:54:F9:48:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/yI7NXJddg506tX55k2P56eaxbnc.roa
Signing time: Thu 05 May 2022 13:05:27 +0000
ROA not before: Thu 05 May 2022 13:05:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205845
IP address blocks: 45.92.52.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 221010725 (0xd2c5b25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=145ceb292089e0df75719db3e96c509754f94837
Validity
Not Before: May 5 13:05:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c88ecd5c975d839d3ab57e799363f9e9e6b16e77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:47:7d:7d:8e:3b:27:87:41:b2:63:42:e8:4d:
2f:0b:b1:91:a6:f7:f1:8d:3b:48:7c:e3:56:36:e6:
fd:58:cb:1b:09:b7:e1:0e:a8:3b:3b:15:80:6e:49:
9b:1f:6a:62:22:90:1a:5c:90:22:fe:3c:3f:46:71:
8d:25:70:7a:34:e7:12:dc:40:8e:42:ad:f0:87:c4:
0b:62:c0:37:49:8c:04:47:d8:e2:f7:0f:11:26:39:
ce:3d:8c:5a:4a:f9:97:1c:37:1a:4e:3a:46:18:aa:
ce:c4:74:92:63:bf:86:e0:60:c2:61:47:f9:f9:32:
f6:30:45:ee:ce:6e:56:b9:e0:8a:65:0f:40:a2:c4:
f0:a8:75:25:58:9a:d4:7f:60:0e:ad:8a:e8:23:37:
62:2d:d4:95:a6:bb:61:2f:ee:d9:5d:88:24:ff:ad:
fd:3a:34:cc:d2:06:af:50:71:4f:c3:ed:1d:63:99:
83:27:91:7f:cb:30:d3:d4:36:60:73:0f:cd:2f:a6:
68:32:9d:4c:f4:42:69:fb:43:ea:79:4d:27:bd:04:
ba:9a:7a:ed:8f:08:b3:f1:23:55:15:e3:6e:11:8f:
36:3d:66:55:03:87:c3:90:68:1f:f2:26:62:bb:38:
a6:34:19:7e:37:9e:c8:78:dd:45:36:17:ae:e8:96:
0f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:8E:CD:5C:97:5D:83:9D:3A:B5:7E:79:93:63:F9:E9:E6:B1:6E:77
X509v3 Authority Key Identifier:
keyid:14:5C:EB:29:20:89:E0:DF:75:71:9D:B3:E9:6C:50:97:54:F9:48:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/yI7NXJddg506tX55k2P56eaxbnc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.52.0/22
Signature Algorithm: sha256WithRSAEncryption
84:9a:eb:32:75:5d:d4:a7:63:b4:31:85:42:9a:92:28:62:ad:
a2:3a:52:cc:14:7c:c7:8d:81:ff:fd:90:3d:19:8d:fb:98:2a:
27:ae:6b:4d:35:d1:73:ef:23:0a:92:64:a1:8c:70:e4:c5:c9:
ba:0a:80:4d:78:2c:37:08:50:d8:de:42:0c:35:dd:64:5b:83:
c8:8e:16:b0:e6:06:c4:69:01:8f:f6:a6:4e:48:a2:84:84:0c:
43:2c:45:f4:05:47:e5:1a:e1:5a:d7:94:53:aa:4d:6b:ac:cf:
b6:d2:4a:7f:46:10:32:90:24:ae:0e:f1:e9:17:4e:c0:99:04:
c0:2c:cc:2c:06:dc:a6:a2:0d:86:b9:20:e8:d2:5c:10:09:5b:
dc:5f:58:7d:dd:c0:d6:29:52:79:76:e6:87:bd:51:2f:52:4e:
04:65:ea:e3:ca:ec:50:ac:87:ac:6b:17:86:87:08:e7:91:fd:
8e:8a:98:de:bd:b0:51:6b:20:c5:77:f2:f7:f6:3e:0f:ea:98:
38:2a:f9:37:69:a4:aa:b8:54:11:2d:1f:46:6f:59:72:d8:60:
a0:78:c3:fa:cc:e0:87:36:0c:c7:ce:a0:12:5d:4f:bd:51:77:
e4:2b:b5:98:c2:a0:df:fe:ba:08:ff:98:5d:4f:d7:36:54:82:
cf:35:31:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:30 2023 by rpki-client on console.sobornost.net