Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/O_zQRzN6dDURriCNENHqZrjGneI.roa
File: O_zQRzN6dDURriCNENHqZrjGneI.roa (raw, json)
Hash identifier: nQl8CWaCwKTn3Tq4UXpoyGIsumm16O3M93QkU99WZFU=
Subject key identifier: 3B:FC:D0:47:33:7A:74:35:11:AE:20:8D:10:D1:EA:66:B8:C6:9D:E2
Certificate issuer: /CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
Certificate serial: 018263F16F845B2E8031012C836EFD3BFA01
Authority key identifier: 2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/O_zQRzN6dDURriCNENHqZrjGneI.roa
Signing time: Wed 03 Aug 2022 13:42:23 +0000
ROA not before: Wed 03 Aug 2022 13:42:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 0
IP address blocks: 193.57.27.0/24 maxlen: 24
193.57.33.0/24 maxlen: 24
193.57.35.0/24 maxlen: 24
193.57.57.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:63:f1:6f:84:5b:2e:80:31:01:2c:83:6e:fd:3b:fa:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
Validity
Not Before: Aug 3 13:42:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3bfcd047337a743511ae208d10d1ea66b8c69de2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f8:1d:5e:cb:6a:51:3a:4a:70:96:25:43:da:
f2:2d:b9:7f:32:c9:b2:6a:26:36:9a:09:ca:d5:fd:
1c:a5:44:aa:a7:05:68:31:2a:f1:e6:1d:21:10:62:
1d:16:57:da:7b:19:db:7f:25:03:d0:7b:2b:84:55:
64:b0:79:a3:7f:9b:ac:f9:ac:18:bd:86:44:45:b2:
74:fd:20:ec:e6:ea:df:10:e8:92:43:ca:8c:b7:08:
df:40:65:e2:d5:04:cf:49:02:51:6a:ec:c5:bd:bf:
13:12:0a:c3:75:75:17:a4:5d:64:64:34:ff:dd:37:
4f:6c:b8:b7:82:a4:46:2b:9f:42:65:18:f0:3d:b0:
ae:d2:48:05:5b:8c:e6:b6:fd:8e:e3:f2:d1:e2:8d:
ed:b5:7d:f6:f4:3c:eb:16:fa:6a:4a:f5:05:6d:f7:
41:8b:a4:8c:9e:13:83:99:89:61:5e:26:a7:a2:32:
9d:c9:94:6c:ea:2d:39:9b:ec:f8:48:3b:20:83:69:
f0:e6:a8:92:68:72:83:a5:06:81:3f:7b:3c:80:44:
48:a2:20:da:e1:46:bc:39:da:79:31:1a:65:9b:37:
59:a7:8a:6b:a1:0f:88:98:a0:25:e0:ed:55:54:30:
54:d5:06:b4:66:43:e2:f8:3f:d0:ec:1d:fc:28:b3:
b5:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:FC:D0:47:33:7A:74:35:11:AE:20:8D:10:D1:EA:66:B8:C6:9D:E2
X509v3 Authority Key Identifier:
keyid:2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/O_zQRzN6dDURriCNENHqZrjGneI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/KxRai98ryhUPJe1Uone49lPv2z4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.57.27.0/24
193.57.33.0/24
193.57.35.0/24
193.57.57.0/24
Signature Algorithm: sha256WithRSAEncryption
90:3c:7e:f7:15:a2:1f:f1:05:e0:6a:79:e0:20:fc:d1:64:bb:
e8:ef:8a:6c:27:2d:93:0c:57:1e:5c:13:a7:5f:e9:dc:c2:0f:
ec:52:f7:dc:76:d9:cb:6d:6a:90:f1:4a:ff:5a:25:11:0c:ae:
da:b0:33:3a:2d:1e:bc:f2:d5:18:2e:ec:e1:61:ce:7a:38:46:
e0:ca:95:eb:9c:df:4d:71:e7:c1:54:61:c9:16:e8:a4:32:78:
f0:4a:83:f2:d0:4b:ec:07:a3:e7:e7:cf:5f:f9:90:48:a2:9f:
bb:e2:15:5d:a2:6c:b4:b8:c0:07:e9:f9:6c:a5:e9:1d:1b:1d:
50:ff:6d:4a:0d:61:28:ef:dd:34:93:4a:a9:1a:4a:75:5a:f2:
95:16:a0:94:53:2f:15:45:5b:29:af:0a:10:ed:80:b5:46:43:
95:4b:52:4b:ef:6d:05:bd:b3:65:39:c6:6b:22:c9:ec:93:22:
dc:cf:51:87:ad:b0:aa:c8:3e:19:bf:10:e3:7b:de:af:8c:03:
75:03:6b:30:28:d6:e6:35:67:21:8e:fe:48:4e:70:46:55:c7:
62:f8:46:86:ee:4e:95:67:8e:b7:7a:7c:81:e8:85:fa:1b:eb:
a2:8a:02:04:96:e5:fb:fc:bc:43:50:ef:24:7f:88:80:80:dd:
5f:1e:2c:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:33 2023 by rpki-client on console.sobornost.net