Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/3e6167-a4b1-465f-ae21-b31c61248a7c/1/nlb1bjE-79GalGsJQfs60uFWjwI.roa
File: nlb1bjE-79GalGsJQfs60uFWjwI.roa (raw, json)
Hash identifier: b7DLCoUxHFTLswS82DxQb9TH2hfyjwYKA5jzFi+V5RE=
Subject key identifier: 9E:56:F5:6E:31:3E:EF:D1:9A:94:6B:09:41:FB:3A:D2:E1:56:8F:02
Certificate issuer: /CN=48e5095da3579ca910a421d64e0c879c8fd36952
Certificate serial: 0187C204B728BFA374F0CD1A5511C784FB62
Authority key identifier: 48:E5:09:5D:A3:57:9C:A9:10:A4:21:D6:4E:0C:87:9C:8F:D3:69:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SOUJXaNXnKkQpCHWTgyHnI_TaVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/3e6167-a4b1-465f-ae21-b31c61248a7c/1/nlb1bjE-79GalGsJQfs60uFWjwI.roa
Signing time: Thu 27 Apr 2023 09:21:41 +0000
ROA not before: Thu 27 Apr 2023 09:21:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208711
IP address blocks: 45.80.84.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:c2:04:b7:28:bf:a3:74:f0:cd:1a:55:11:c7:84:fb:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48e5095da3579ca910a421d64e0c879c8fd36952
Validity
Not Before: Apr 27 09:21:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9e56f56e313eefd19a946b0941fb3ad2e1568f02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:af:96:a3:df:44:cf:0f:8e:4a:dc:4d:6d:1d:
4c:71:6e:8c:43:4e:0f:d1:6e:91:29:2d:80:81:5f:
95:a6:85:e5:61:54:73:d8:a0:02:86:a0:e0:a3:f6:
fb:5a:9b:d8:19:79:69:4d:98:b1:83:20:b9:72:bc:
d9:68:4f:7b:1d:78:e5:79:80:07:7e:23:1b:26:0f:
14:96:6b:0a:9e:71:bf:35:b6:51:ee:12:e0:d1:86:
cb:76:10:23:c8:b4:cc:b0:7e:3d:ee:c3:fd:9f:de:
01:41:11:d5:71:52:1d:77:eb:1e:e2:b9:31:2d:4f:
d1:bd:4b:a1:af:c8:17:47:1c:5f:ae:08:d0:db:84:
b3:df:69:98:3b:c8:65:98:d7:83:01:84:13:8c:7c:
0c:e7:99:1f:53:f1:b6:b2:42:6b:f7:c8:d7:19:ab:
25:0d:25:1f:f2:2a:f3:eb:22:c4:db:cf:4d:66:d4:
7f:18:04:dc:13:c5:bb:b9:b0:1c:9c:bd:04:09:a5:
f5:0b:92:5a:9f:3f:17:4a:e8:8b:28:ce:fb:e5:be:
51:7d:3c:ed:d6:b1:d3:58:8c:ad:77:4e:f2:dc:58:
b6:0c:cb:8c:9b:5e:9d:38:8a:f1:de:ee:76:6d:d1:
62:c3:ff:6e:4a:d8:b4:a8:8b:15:ec:20:e1:2e:8d:
39:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:56:F5:6E:31:3E:EF:D1:9A:94:6B:09:41:FB:3A:D2:E1:56:8F:02
X509v3 Authority Key Identifier:
keyid:48:E5:09:5D:A3:57:9C:A9:10:A4:21:D6:4E:0C:87:9C:8F:D3:69:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SOUJXaNXnKkQpCHWTgyHnI_TaVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3e6167-a4b1-465f-ae21-b31c61248a7c/1/nlb1bjE-79GalGsJQfs60uFWjwI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3e6167-a4b1-465f-ae21-b31c61248a7c/1/SOUJXaNXnKkQpCHWTgyHnI_TaVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.84.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:fb:c4:91:d9:77:b6:52:26:1a:31:91:5f:08:20:f8:02:22:
a2:af:29:62:4b:55:b8:b7:ba:4b:7b:f4:ff:82:bc:02:0f:cd:
78:68:51:6e:a8:81:7d:fc:21:68:09:d5:a1:69:96:63:53:23:
3f:08:b7:35:4e:e8:12:a9:83:d2:46:6b:51:bc:dc:37:db:b6:
bc:b7:39:ca:88:3c:5b:d2:01:b0:cd:d1:8b:b6:17:aa:a6:2a:
52:aa:43:64:d2:b6:e9:37:22:e2:14:76:c5:8d:c7:9b:77:59:
ef:2c:e9:ad:1f:f9:fc:f8:d0:08:33:ba:bb:b8:52:3e:01:f8:
9b:20:5d:65:51:5b:a5:bd:96:24:f3:63:2e:28:bb:98:3a:9c:
64:b1:52:f7:26:aa:2d:90:a9:27:00:9d:ae:05:b9:74:81:0d:
69:2b:d4:31:2f:04:87:b1:14:ee:8f:16:6b:c5:78:f0:2e:8f:
65:b0:a0:f7:f8:c4:c5:66:03:21:f7:fe:f7:b9:19:ed:2d:e4:
96:d3:74:89:03:09:2e:ec:b6:1d:df:8f:73:6a:bc:72:b2:6a:
95:d1:2d:69:81:47:f2:cd:ea:82:2d:2a:41:82:08:b8:5b:62:
85:29:8b:29:ef:9d:04:b5:56:85:f4:39:30:34:a7:cc:ca:25:
d6:46:d9:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:30 2023 by rpki-client on console.sobornost.net