Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/e45ad6-e5ae-4819-9f24-f577aa46de83/1/FetGECE8maJXjBuMYXaC-ugjUys.roa
File: FetGECE8maJXjBuMYXaC-ugjUys.roa (raw, json)
Hash identifier: xlJwKI/KrOrP5D96wdFk4iJe4sdgNwLGSe31pvv1f8s=
Subject key identifier: 15:EB:46:10:21:3C:99:A2:57:8C:1B:8C:61:76:82:FA:E8:23:53:2B
Certificate issuer: /CN=813e051cb831d1989607bb76c0bc5693ff947b53
Certificate serial: 01856F9DD41835A04C500D1E19643D8A6C55
Authority key identifier: 81:3E:05:1C:B8:31:D1:98:96:07:BB:76:C0:BC:56:93:FF:94:7B:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gT4FHLgx0ZiWB7t2wLxWk_-Ue1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/e45ad6-e5ae-4819-9f24-f577aa46de83/1/FetGECE8maJXjBuMYXaC-ugjUys.roa
Signing time: Sun 01 Jan 2023 23:14:52 +0000
ROA not before: Sun 01 Jan 2023 23:14:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206065
IP address blocks: 185.232.152.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:9d:d4:18:35:a0:4c:50:0d:1e:19:64:3d:8a:6c:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=813e051cb831d1989607bb76c0bc5693ff947b53
Validity
Not Before: Jan 1 23:14:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=15eb4610213c99a2578c1b8c617682fae823532b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:4b:a1:fd:50:97:6d:5c:0f:f0:a6:d7:44:e3:
9b:42:04:ff:60:92:c9:e8:7e:6d:43:42:26:22:5b:
63:95:22:78:d3:a6:bd:6c:f8:9a:1d:42:8d:8d:45:
f6:85:19:a2:7d:74:b6:b4:69:9b:51:88:48:60:73:
d6:3d:64:e2:fa:35:ae:c2:ba:3a:19:72:b8:48:5b:
ce:cd:ae:b4:bb:8b:03:87:33:ad:a4:45:17:b5:59:
b9:ba:1b:70:3d:90:b7:15:bc:3c:07:60:b8:d5:2f:
cc:f5:b0:9a:99:48:6e:4b:d3:2f:9c:bc:a2:16:bf:
c4:ca:10:ab:56:04:f9:6b:df:c0:d3:f7:ec:2c:ea:
f7:2f:cd:be:22:9f:86:74:9d:0a:49:16:32:96:3c:
8a:8f:a7:0a:1f:62:46:2e:14:3b:65:0c:3c:47:b8:
09:7f:a5:aa:ce:cc:cc:b8:f3:81:1b:40:0b:87:14:
68:81:0c:49:d1:e3:eb:6c:fd:3a:77:d3:98:a1:be:
a6:b4:6d:46:dc:06:b0:1e:4e:71:54:0a:37:13:77:
8a:97:de:9a:8a:ef:ea:60:b0:40:5a:bf:96:b1:07:
f1:93:6f:d9:83:59:04:fd:b5:51:f3:43:5d:2f:74:
de:b7:6d:75:18:d1:51:e2:8f:c4:61:8c:ff:30:1d:
56:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:EB:46:10:21:3C:99:A2:57:8C:1B:8C:61:76:82:FA:E8:23:53:2B
X509v3 Authority Key Identifier:
keyid:81:3E:05:1C:B8:31:D1:98:96:07:BB:76:C0:BC:56:93:FF:94:7B:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gT4FHLgx0ZiWB7t2wLxWk_-Ue1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/e45ad6-e5ae-4819-9f24-f577aa46de83/1/FetGECE8maJXjBuMYXaC-ugjUys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/e45ad6-e5ae-4819-9f24-f577aa46de83/1/gT4FHLgx0ZiWB7t2wLxWk_-Ue1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.232.152.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:a1:59:39:9c:8b:21:09:4c:42:de:ca:fc:9d:e3:fd:91:52:
69:bf:5f:33:45:a3:03:20:fd:96:a7:fc:7f:cf:5e:b0:af:70:
b0:a6:a0:d9:57:7a:85:ee:5c:75:8a:15:1b:5a:9b:11:b7:6b:
94:01:9b:4d:08:7a:47:98:01:08:40:ab:d5:c8:a8:c9:9f:f0:
91:0f:6b:b6:b3:9b:9e:a8:01:c3:3a:2f:90:97:09:ad:6d:60:
03:ec:e5:1d:b6:36:61:ed:1f:ce:e6:03:d5:1c:c8:17:00:24:
e3:6e:97:c2:19:36:98:86:b3:5a:05:1c:89:6a:1d:fd:c2:23:
e0:9d:ea:02:30:48:0e:5e:05:bf:25:81:7c:01:06:69:ee:5c:
66:e3:81:a3:89:9c:b9:87:b7:fb:4d:e5:29:ea:19:c5:aa:58:
50:76:09:14:65:1d:7a:19:27:f1:fe:97:32:bb:0f:3a:f1:f1:
02:06:0b:2d:9c:f4:2a:8e:d1:42:41:0c:43:45:5e:19:16:1b:
25:ca:62:ce:ec:b0:42:d1:b6:cd:bd:1c:c6:fd:18:35:72:c8:
de:51:6a:a1:19:0f:3e:d5:54:c9:f5:47:6a:cd:8c:20:b7:16:
ca:d1:1b:88:6c:0b:36:80:22:47:86:8d:93:02:94:8d:92:f7:
88:58:91:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:09 2023 by rpki-client on console.sobornost.net