Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/ZQhJ4FT2GwSWEOqTlXNSCO3rGcI.roa
File: ZQhJ4FT2GwSWEOqTlXNSCO3rGcI.roa (raw, json)
Hash identifier: bW3CvEOxAkoh2mpca/ZzxXyWhl8p1nt5iZ+QoOWKpOU=
Subject key identifier: 65:08:49:E0:54:F6:1B:04:96:10:EA:93:95:73:52:08:ED:EB:19:C2
Certificate issuer: /CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Certificate serial: 018964791F122AB7395CF6EC6FAE6C8F9096
Authority key identifier: CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/ZQhJ4FT2GwSWEOqTlXNSCO3rGcI.roa
Signing time: Mon 17 Jul 2023 15:30:06 +0000
ROA not before: Mon 17 Jul 2023 15:30:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48031
IP address blocks: 81.22.45.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:64:79:1f:12:2a:b7:39:5c:f6:ec:6f:ae:6c:8f:90:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Validity
Not Before: Jul 17 15:30:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=650849e054f61b049610ea9395735208edeb19c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:cf:09:a6:9e:29:a2:f4:6f:52:0a:81:fe:c7:
59:ee:f9:7a:79:35:db:e4:3b:38:4f:9d:71:47:29:
b2:d1:34:a0:46:94:43:a9:0c:b1:8e:48:51:67:74:
90:6c:50:86:e2:9c:98:71:61:6c:76:e9:12:cf:ef:
60:71:15:2c:e3:71:34:29:1e:f5:9e:08:6e:34:85:
6e:07:01:74:4c:5a:5d:0c:6f:e2:69:f0:b1:9e:e7:
0e:db:4e:d4:10:be:bf:57:29:fc:c2:ac:bd:9e:4e:
16:46:9b:90:ec:2d:b4:f0:1f:e3:ff:49:c2:34:64:
79:04:83:c8:26:94:8f:2a:6f:97:de:2c:67:a5:91:
5f:16:23:7b:ca:83:75:57:3b:a9:14:24:02:9f:5e:
dc:81:5a:43:e7:1f:91:56:f5:39:8b:e5:88:5b:19:
a7:92:04:ec:49:c8:d1:3e:02:d3:b1:0f:40:9f:a3:
ab:ea:3d:6f:e7:af:30:28:b1:e9:ad:e8:f8:a3:98:
c8:09:75:98:d3:d6:ce:bc:1d:8b:f6:4f:5b:bd:e2:
a5:26:2b:24:cc:2a:25:27:26:e2:92:75:84:c9:eb:
7f:ec:b9:0d:3a:b8:0d:de:7c:53:2f:a3:e4:bf:1e:
6d:6a:1e:9f:2e:70:48:53:48:bc:bf:bf:cd:d6:0b:
ed:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:08:49:E0:54:F6:1B:04:96:10:EA:93:95:73:52:08:ED:EB:19:C2
X509v3 Authority Key Identifier:
keyid:CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/ZQhJ4FT2GwSWEOqTlXNSCO3rGcI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.45.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:c8:2d:c0:65:6b:cd:7b:76:f8:b7:98:95:9d:6c:31:04:db:
3f:cf:a5:f0:b4:a4:04:44:82:5f:34:3e:dd:0b:5a:8a:0b:1e:
00:33:ea:c2:5f:d2:c9:03:fe:10:30:94:23:3a:4c:28:0b:c8:
78:30:4b:e2:17:7f:e9:ec:89:21:54:da:60:16:6f:50:cc:3c:
2e:29:f4:72:18:70:99:43:8d:09:e4:26:b9:de:a4:d9:82:ac:
01:1a:7e:24:bc:84:c2:55:67:d1:7a:46:bf:50:f1:e2:00:f6:
f6:c8:be:ca:64:32:c0:ee:3c:d8:fa:21:41:95:01:bc:2b:bc:
7a:e5:b6:31:a0:7e:c0:00:ad:53:12:66:13:07:60:fa:dc:2b:
95:46:f8:ad:bc:5d:12:78:fb:66:15:ed:a1:f6:c1:3a:b2:df:
1a:14:28:5b:4e:17:6d:a6:f5:6f:90:9b:f2:57:f8:2d:8a:ba:
f5:f7:9f:7c:53:e6:8b:dc:d6:18:e1:b7:44:d3:ed:1f:f3:99:
48:3b:10:90:4c:c6:5b:e3:03:9f:75:6d:52:c4:cd:6f:30:9b:
fc:85:8e:01:8b:0c:12:a8:3d:3b:18:cb:3c:a5:08:79:f1:19:
41:7e:32:33:02:e4:9b:f6:1a:fa:11:4f:d1:0e:d7:44:37:73:
61:f2:15:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:08 2023 by rpki-client on console.sobornost.net