Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/eVaegc6Ml6QSuqFiEwcb4LeoXYE.roa
File: eVaegc6Ml6QSuqFiEwcb4LeoXYE.roa (raw, json)
Hash identifier: RdWaXqJGCs1qD08YBPIcwKjyNvCvwMumRnRt6M745q8=
Subject key identifier: 79:56:9E:81:CE:8C:97:A4:12:BA:A1:62:13:07:1B:E0:B7:A8:5D:81
Certificate issuer: /CN=6cb0dec13df205a66ec5227925b8f56bdb09f499
Certificate serial: 047B3777
Authority key identifier: 6C:B0:DE:C1:3D:F2:05:A6:6E:C5:22:79:25:B8:F5:6B:DB:09:F4:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/eVaegc6Ml6QSuqFiEwcb4LeoXYE.roa
Signing time: Wed 12 Jan 2022 13:57:37 +0000
ROA not before: Wed 12 Jan 2022 13:57:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49571
IP address blocks: 188.72.11.0/24 maxlen: 24
188.72.8.0/24 maxlen: 24
188.72.9.0/24 maxlen: 24
188.72.15.0/24 maxlen: 24
188.72.16.0/24 maxlen: 24
188.72.12.0/24 maxlen: 24
188.72.17.0/24 maxlen: 24
188.72.21.0/24 maxlen: 24
188.72.22.0/24 maxlen: 24
188.72.23.0/24 maxlen: 24
188.72.18.0/24 maxlen: 24
188.72.20.0/24 maxlen: 24
188.72.29.0/24 maxlen: 24
188.72.30.0/24 maxlen: 24
188.72.31.0/24 maxlen: 24
185.72.254.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75183991 (0x47b3777)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cb0dec13df205a66ec5227925b8f56bdb09f499
Validity
Not Before: Jan 12 13:57:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=79569e81ce8c97a412baa16213071be0b7a85d81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:63:02:c6:53:4e:b7:e7:14:e0:64:9d:f4:9e:
ef:58:de:3e:4e:68:0f:cd:7b:ae:dd:d5:96:8e:f9:
65:ff:f3:5d:5c:79:f9:ce:d6:ad:f3:90:cc:e2:12:
90:ab:46:45:13:8d:ed:be:30:34:e7:70:e4:0d:8b:
69:8a:de:c8:e6:49:01:8c:0e:7b:ea:db:cd:50:e8:
7b:3d:7f:a7:8d:fa:5f:91:37:9d:57:28:59:0a:87:
bf:a8:c0:8f:73:44:af:63:ce:27:4c:e7:69:29:da:
c4:01:78:da:d8:b0:5c:76:5d:4a:fb:5b:ec:61:3b:
4a:94:8c:b2:19:ff:5d:b2:74:f1:be:dd:c6:33:37:
5b:87:f4:ce:c5:5b:f2:5d:9a:38:1b:d8:02:49:c2:
a6:68:fb:9c:3e:bb:c5:6d:ed:ad:19:b2:c7:03:a2:
1f:2f:2c:07:53:b2:ea:47:2c:51:90:14:05:10:e9:
4f:10:24:e1:c1:f7:e2:fc:52:dd:a6:40:3b:fb:b0:
1b:4f:f0:a7:ab:9a:97:12:f6:80:a9:c2:ba:d9:d5:
bd:30:65:e0:39:3b:fc:0e:24:fb:60:e3:10:a1:2e:
d3:60:b0:84:3a:d8:a1:63:89:63:5e:dc:29:55:43:
5e:44:97:a0:56:d6:6b:3a:46:71:99:af:99:58:97:
bb:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:56:9E:81:CE:8C:97:A4:12:BA:A1:62:13:07:1B:E0:B7:A8:5D:81
X509v3 Authority Key Identifier:
keyid:6C:B0:DE:C1:3D:F2:05:A6:6E:C5:22:79:25:B8:F5:6B:DB:09:F4:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/eVaegc6Ml6QSuqFiEwcb4LeoXYE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.72.254.0/24
188.72.8.0/23
188.72.11.0-188.72.12.255
188.72.15.0-188.72.18.255
188.72.20.0/22
188.72.29.0-188.72.31.255
Signature Algorithm: sha256WithRSAEncryption
b5:93:04:81:54:7e:90:1e:d1:63:12:18:9f:6d:f9:07:77:8d:
02:5c:0a:0f:6d:35:7e:06:80:f0:b5:94:22:33:25:de:48:cc:
97:3e:e8:ed:26:c2:6d:8a:f2:d4:23:a6:3d:a2:70:e4:fd:74:
2e:9e:23:38:45:cd:86:6c:a9:cb:49:59:2d:0f:4e:59:30:d6:
17:98:0f:1b:90:ad:37:10:30:8c:46:5b:bd:15:0c:db:a0:61:
e6:e6:b8:6a:5d:e3:9c:f9:be:39:3e:43:d9:a0:e6:95:a7:75:
77:0b:b6:4c:e7:90:da:04:e7:4d:cb:b9:e1:21:44:28:b9:e5:
4e:ab:ff:2e:c2:15:ab:38:2d:34:62:66:54:85:6c:3c:b0:51:
18:fd:ac:ce:69:11:3c:96:cd:fc:27:5c:de:ed:b5:ca:f0:81:
f6:e2:fe:81:fb:7e:72:34:65:e9:aa:b1:70:2e:f1:43:b0:fb:
69:9c:79:d7:e5:fe:53:33:3c:34:ef:68:49:ed:3e:0f:ad:f4:
0a:5b:9d:2d:64:58:70:6b:bb:ba:03:ff:20:f5:13:8f:a6:82:
81:6d:48:38:cb:12:6d:7e:63:3a:81:5d:1f:21:29:e7:97:72:
80:6b:ff:e2:9e:2f:66:97:3b:75:ba:82:67:61:f7:97:3d:47:
1e:d0:d4:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:28 2023 by rpki-client on console.sobornost.net