Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/fB3VAZvSCRBvFWhTmxBy3Jibcic.roa
File: fB3VAZvSCRBvFWhTmxBy3Jibcic.roa (raw, json)
Hash identifier: Z3QZ6mdG/vAx0o69/EweZOaz8bNPukmb+RV47nFNc9s=
Subject key identifier: 7C:1D:D5:01:9B:D2:09:10:6F:15:68:53:9B:10:72:DC:98:9B:72:27
Certificate issuer: /CN=e501815c6f98f3a2b6184afebf18ea341be882ea
Certificate serial: 0181FD1DA68CDB417F639982DA91D3E82DBF
Authority key identifier: E5:01:81:5C:6F:98:F3:A2:B6:18:4A:FE:BF:18:EA:34:1B:E8:82:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5QGBXG-Y86K2GEr-vxjqNBvoguo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/fB3VAZvSCRBvFWhTmxBy3Jibcic.roa
Signing time: Thu 14 Jul 2022 14:29:47 +0000
ROA not before: Thu 14 Jul 2022 14:29:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47894
IP address blocks: 94.103.36.0/24 maxlen: 24
94.103.35.0/24 maxlen: 24
94.103.38.0/24 maxlen: 24
94.103.37.0/24 maxlen: 24
94.103.33.0/24 maxlen: 24
94.103.32.0/24 maxlen: 24
94.103.34.0/24 maxlen: 24
94.103.43.0/24 maxlen: 24
94.103.42.0/24 maxlen: 24
94.103.44.0/24 maxlen: 24
94.103.39.0/24 maxlen: 24
94.103.41.0/24 maxlen: 24
94.103.45.0/24 maxlen: 24
94.103.46.0/24 maxlen: 24
94.103.47.0/24 maxlen: 24
185.35.20.0/24 maxlen: 24
185.35.22.0/24 maxlen: 24
185.35.23.0/24 maxlen: 24
2a00:7300:42::/48 maxlen: 48
2a00:7300:1::/48 maxlen: 48
2a00:7300::/32 maxlen: 32
2a00:7300:100::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:fd:1d:a6:8c:db:41:7f:63:99:82:da:91:d3:e8:2d:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e501815c6f98f3a2b6184afebf18ea341be882ea
Validity
Not Before: Jul 14 14:29:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7c1dd5019bd209106f1568539b1072dc989b7227
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:81:ab:cd:6a:48:33:a9:4c:3b:f0:31:65:fb:
0c:85:84:2a:28:03:3b:b7:fb:eb:4e:ac:01:d4:f3:
35:25:91:92:67:f8:21:84:87:64:bc:6a:43:65:21:
c1:71:ad:c1:7a:48:9c:1b:da:b0:4e:81:de:4b:f8:
2c:32:af:41:fb:14:9a:10:1b:e7:0d:41:71:ec:dc:
f1:dd:74:da:74:b0:32:ad:a9:e7:34:d0:8d:1e:37:
82:5b:4a:aa:e9:ae:05:c2:8b:45:71:78:6a:5d:d4:
80:73:e2:03:27:6c:97:05:73:ef:ce:e8:b6:f3:20:
dd:50:07:d0:18:c5:c5:5b:ec:1e:72:8e:62:29:09:
71:78:d5:f3:de:1f:32:02:29:dc:99:d1:94:85:75:
4c:1a:05:1f:f4:95:5f:58:33:be:d7:db:83:c4:17:
ff:b1:84:3d:bb:ab:9b:22:f1:f8:38:0e:35:22:28:
38:5a:49:f7:db:90:a3:da:72:fe:c7:f9:41:57:05:
22:97:bc:ed:46:38:6a:76:0b:4c:55:ba:31:6d:d0:
17:39:19:22:0c:42:93:bc:f8:0b:65:5a:e4:73:56:
e9:6b:c8:8a:d8:c0:15:ec:a2:08:09:92:12:ce:ed:
a3:3d:0f:53:5c:02:18:05:08:76:aa:05:97:00:5c:
f1:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:1D:D5:01:9B:D2:09:10:6F:15:68:53:9B:10:72:DC:98:9B:72:27
X509v3 Authority Key Identifier:
keyid:E5:01:81:5C:6F:98:F3:A2:B6:18:4A:FE:BF:18:EA:34:1B:E8:82:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5QGBXG-Y86K2GEr-vxjqNBvoguo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/fB3VAZvSCRBvFWhTmxBy3Jibcic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/5QGBXG-Y86K2GEr-vxjqNBvoguo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.103.32.0/21
94.103.41.0-94.103.47.255
185.35.20.0/24
185.35.22.0/23
IPv6:
2a00:7300::/32
Signature Algorithm: sha256WithRSAEncryption
72:83:b4:54:3c:c6:76:e2:83:b5:7f:b3:9f:29:ab:9a:29:d0:
03:1f:cd:bd:cb:9c:94:ab:79:ce:e9:57:de:ab:6a:79:8e:53:
ae:95:7c:be:6c:71:c8:a8:4f:a1:d7:e5:07:c0:61:44:b3:a3:
8c:a5:6e:92:2c:04:3e:f6:ac:d9:91:a8:3b:d5:31:4e:10:10:
15:49:84:ef:4f:83:c5:b2:f0:12:91:29:18:8d:6a:48:44:50:
c9:11:6a:5c:fd:b9:cb:86:20:99:20:9c:84:b4:a5:da:63:ec:
9e:32:3f:d7:bc:c3:b8:4e:92:b4:18:f0:81:f0:80:3c:5a:67:
fa:e9:23:21:88:62:97:d2:8f:e3:1d:0c:90:97:b9:22:12:09:
e1:42:cb:4e:fa:3e:19:12:68:e4:67:42:3d:4e:a5:93:67:ec:
86:3d:9d:5b:ac:0b:b4:7b:13:e9:05:a6:05:30:19:9c:4e:3a:
22:cc:df:80:08:b8:4f:0c:fd:a6:1f:e6:88:e4:21:57:de:b8:
ff:b6:7a:c1:d9:75:99:18:a3:4a:60:11:5b:d2:c7:76:1d:de:
6e:2b:42:22:db:36:9d:70:f1:61:f1:63:6a:3d:ec:fc:d9:f7:
81:ba:45:62:99:2c:33:43:b3:c2:bd:21:22:55:5b:a4:65:ef:
44:09:e8:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:44 2023 by rpki-client on console.sobornost.net