Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/Ag8H62WiVVjetYcgF_0jToIf5WI.roa
File: Ag8H62WiVVjetYcgF_0jToIf5WI.roa (raw, json)
Hash identifier: 5e0LD/s7xl/TBBS7rq6j1+XCpHi+L2t6s4CE9x0U3+I=
Subject key identifier: 02:0F:07:EB:65:A2:55:58:DE:B5:87:20:17:FD:23:4E:82:1F:E5:62
Certificate issuer: /CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
Certificate serial: E4D4C7
Authority key identifier: 2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/Ag8H62WiVVjetYcgF_0jToIf5WI.roa
Signing time: Fri 27 May 2022 06:07:13 +0000
ROA not before: Fri 27 May 2022 06:07:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 0
IP address blocks: 193.57.27.0/24 maxlen: 24
45.155.67.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14996679 (0xe4d4c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
Validity
Not Before: May 27 06:07:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=020f07eb65a25558deb5872017fd234e821fe562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ab:1c:de:04:fc:a3:91:bb:77:11:84:fd:34:
39:b1:21:6f:0b:87:c2:12:b9:31:ae:a2:42:6e:18:
3a:69:1a:38:29:9a:de:ac:26:9a:38:fd:f9:0e:09:
31:0b:1c:24:f4:62:b7:b8:d1:61:18:97:6d:2d:36:
f8:e6:62:38:db:8c:c8:ca:a1:75:ee:d7:2c:a8:0f:
5d:6a:ab:63:01:23:da:54:49:5f:12:9d:8a:28:b6:
73:e2:7b:1e:30:25:8b:0a:d6:c3:21:44:a7:a9:f9:
40:02:65:a5:25:cb:09:03:9a:c9:f5:b9:10:9d:ff:
52:1b:bf:03:0f:ae:ac:ee:56:5f:e8:ab:56:37:09:
94:84:4b:22:c3:45:63:84:23:b7:76:f8:ac:c2:b0:
5b:34:b6:93:59:82:2f:b4:0d:87:87:89:ba:85:d9:
eb:8e:5b:8f:1b:d3:b7:b0:05:7d:c4:b1:d7:84:cc:
fb:a8:d3:25:2f:29:82:35:1d:9a:79:68:f7:4c:a2:
09:05:2b:40:f3:dd:49:f7:41:ef:ea:f5:75:d1:1d:
4c:12:53:f7:08:96:89:d5:fb:0b:83:90:0c:59:b8:
52:06:45:ac:82:c9:5a:28:75:41:94:74:e6:77:5a:
11:56:0c:ef:0b:fd:85:b7:97:84:6a:28:c2:fb:c2:
ff:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:0F:07:EB:65:A2:55:58:DE:B5:87:20:17:FD:23:4E:82:1F:E5:62
X509v3 Authority Key Identifier:
keyid:2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/Ag8H62WiVVjetYcgF_0jToIf5WI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/KxRai98ryhUPJe1Uone49lPv2z4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.67.0/24
193.57.27.0/24
Signature Algorithm: sha256WithRSAEncryption
06:04:6d:5c:b6:5e:a9:05:65:ca:c4:cc:a8:44:2d:e3:6f:57:
18:04:b3:3f:8b:6b:15:b4:a3:10:57:bf:f7:a1:bc:7a:b8:af:
4b:57:6f:6e:1c:d1:dc:82:93:1c:29:02:47:c6:ea:2b:8c:b4:
8d:d2:e0:d3:a2:62:5b:d9:6a:cb:e2:34:51:59:98:9f:6e:18:
ea:d3:91:ee:ab:81:93:36:20:34:30:c1:62:11:59:ad:61:bc:
4c:58:04:c5:86:9e:cd:18:95:59:ca:50:1c:6a:b1:d6:35:47:
95:79:d9:c8:ef:1c:52:ff:9a:90:f9:74:2d:66:f0:4a:2d:5c:
f8:7d:03:ae:d8:56:71:b9:ca:2a:a2:b3:51:1c:75:a6:0f:38:
69:02:8e:0c:34:9e:37:ba:57:63:5e:79:ab:df:48:40:80:3c:
47:12:fa:01:85:58:20:a0:9a:0b:67:80:c3:9f:ea:b6:34:7c:
d4:75:71:3a:de:97:98:08:61:13:47:02:dc:92:20:fe:6d:7c:
da:09:15:b0:ed:08:3d:43:07:d0:9d:57:6f:4e:f4:e2:4a:2c:
01:9e:81:78:8e:61:87:36:b2:24:00:00:9e:70:3f:eb:8f:7e:
27:77:0d:3d:5d:dc:c1:8f:af:cb:ca:2b:d8:37:0e:26:a0:7c:
76:b7:fc:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:33 2023 by rpki-client on console.sobornost.net