Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/6a5e8c-d831-41e3-84e5-f42176cd0445/1/ijwiiQGJ2-5vLTBcrSb1tj-L_dE.roa
File: ijwiiQGJ2-5vLTBcrSb1tj-L_dE.roa (raw, json)
Hash identifier: FKXsqEgkhDmRAVxjBIhiQexKASfUWnFHHJgA2LnpMTQ=
Subject key identifier: 8A:3C:22:89:01:89:DB:EE:6F:2D:30:5C:AD:26:F5:B6:3F:8B:FD:D1
Certificate issuer: /CN=e378a94b9964ea5e9f8b05938702ba58316b500f
Certificate serial: 0588EA31
Authority key identifier: E3:78:A9:4B:99:64:EA:5E:9F:8B:05:93:87:02:BA:58:31:6B:50:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/43ipS5lk6l6fiwWThwK6WDFrUA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/6a5e8c-d831-41e3-84e5-f42176cd0445/1/ijwiiQGJ2-5vLTBcrSb1tj-L_dE.roa
Signing time: Sat 01 Jan 2022 13:06:06 +0000
ROA not before: Sat 01 Jan 2022 13:06:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60631
IP address blocks: 45.147.77.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92858929 (0x588ea31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e378a94b9964ea5e9f8b05938702ba58316b500f
Validity
Not Before: Jan 1 13:06:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8a3c22890189dbee6f2d305cad26f5b63f8bfdd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:05:da:a7:4b:59:b6:07:00:1f:69:10:90:c7:
f1:f9:2f:c6:73:15:4c:a5:c3:ce:a0:cf:af:f5:20:
78:45:f5:63:f6:03:7c:bd:03:be:06:f3:20:ec:7d:
5c:ff:01:d0:a2:f1:fc:dc:47:c7:5f:98:d1:d8:b6:
6e:c3:e2:d6:e2:94:1a:84:1e:4d:a7:ae:99:38:8e:
3e:12:59:48:88:d7:b6:f3:44:c1:b0:9c:8c:68:bb:
a5:5a:13:7d:dc:09:82:40:f4:e9:e2:5b:62:82:d3:
18:a3:25:16:52:35:5a:50:0f:1b:7b:db:46:d1:43:
86:49:f5:76:14:43:99:ad:fa:5e:e6:a0:23:6a:a4:
32:6b:77:70:42:59:9d:b1:f5:1e:e5:19:e4:38:d4:
0f:a8:55:21:5a:79:b3:a2:72:5f:3d:1a:b7:02:da:
50:7d:3f:f7:2e:e3:8e:20:a0:b7:4f:46:12:69:a5:
07:ef:6f:d3:d9:a9:13:44:60:bf:0d:b6:2a:4a:7f:
c2:16:f1:34:f9:ac:bb:8e:f7:ad:02:13:60:66:39:
03:75:05:7e:0c:5c:26:f5:67:ea:4a:09:ee:8d:3f:
6a:df:b3:fc:bc:ce:6a:2c:66:ba:49:76:ba:a8:2d:
76:16:7f:38:6e:ba:a0:75:c6:67:48:e2:05:8b:e8:
a4:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:3C:22:89:01:89:DB:EE:6F:2D:30:5C:AD:26:F5:B6:3F:8B:FD:D1
X509v3 Authority Key Identifier:
keyid:E3:78:A9:4B:99:64:EA:5E:9F:8B:05:93:87:02:BA:58:31:6B:50:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43ipS5lk6l6fiwWThwK6WDFrUA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/6a5e8c-d831-41e3-84e5-f42176cd0445/1/ijwiiQGJ2-5vLTBcrSb1tj-L_dE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/6a5e8c-d831-41e3-84e5-f42176cd0445/1/43ipS5lk6l6fiwWThwK6WDFrUA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.147.77.0/24
Signature Algorithm: sha256WithRSAEncryption
45:8b:fc:96:30:79:22:6b:07:2c:6f:4c:c1:fd:5b:76:0e:a6:
03:76:b6:aa:6d:cc:7a:4b:f6:77:f2:29:79:a1:ba:c5:d2:f4:
3a:c9:c1:3f:88:cf:64:40:9f:7e:7b:18:a7:ca:c1:12:39:5d:
54:8c:d4:59:95:c2:6c:65:d6:d6:8c:80:28:b0:88:d8:a4:48:
e1:ee:18:cd:8e:a8:ba:e6:42:ea:d7:b1:41:ac:36:42:7e:4c:
bc:50:c8:47:0d:7d:42:f4:e3:bb:1d:32:a2:bb:73:de:8c:92:
b2:87:dc:63:df:b7:f0:9a:f9:4d:78:e2:4f:7d:60:17:e4:c2:
0f:ac:8b:8e:bf:4c:76:9c:f7:74:fa:cb:9d:d1:f7:41:87:74:
fb:56:92:7e:92:f4:8b:c1:7a:fd:28:ba:67:a0:84:8c:99:d7:
01:da:9f:2a:af:1f:7f:84:0b:0c:95:a6:34:7a:f0:81:b3:db:
a3:de:42:cf:16:83:92:3c:15:c2:12:06:11:21:49:22:40:85:
45:71:1f:4b:c9:3a:98:0b:39:33:13:52:51:03:28:e1:96:dd:
d2:bc:c4:8a:21:00:47:c2:41:3d:ec:5d:34:f2:69:54:fd:65:
03:5b:b4:16:a5:89:35:66:78:cf:38:ce:c6:1e:64:8b:07:25:
2b:e3:75:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:42 2023 by rpki-client on console.sobornost.net