Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/W0mBArwLYAF23584vR3lSI5CXV8.roa
File: W0mBArwLYAF23584vR3lSI5CXV8.roa (raw, json)
Hash identifier: NkN4oqtRYit5jMLUO27t+3KBFtIDUaxTCJSqKIjcPAw=
Subject key identifier: 5B:49:81:02:BC:0B:60:01:76:DF:9F:38:BD:1D:E5:48:8E:42:5D:5F
Certificate issuer: /CN=7539b7a123417aa719325946aa89e0f30ab0ca09
Certificate serial: 381D26E5
Authority key identifier: 75:39:B7:A1:23:41:7A:A7:19:32:59:46:AA:89:E0:F3:0A:B0:CA:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dTm3oSNBeqcZMllGqong8wqwygk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/W0mBArwLYAF23584vR3lSI5CXV8.roa
Signing time: Sat 01 Jan 2022 01:52:58 +0000
ROA not before: Sat 01 Jan 2022 01:52:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15589
IP address blocks: 81.92.32.0/20 maxlen: 24
213.136.128.0/18 maxlen: 24
217.15.208.0/20 maxlen: 24
212.90.0.0/19 maxlen: 24
213.183.128.0/19 maxlen: 24
194.153.192.0/20 maxlen: 24
83.211.0.0/16 maxlen: 24
212.110.0.0/19 maxlen: 24
194.153.208.0/22 maxlen: 24
62.94.0.0/16 maxlen: 24
194.153.212.0/23 maxlen: 24
213.198.128.0/18 maxlen: 24
2001:750::/29 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 941434597 (0x381d26e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7539b7a123417aa719325946aa89e0f30ab0ca09
Validity
Not Before: Jan 1 01:52:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5b498102bc0b600176df9f38bd1de5488e425d5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:4c:a8:54:67:95:ff:97:8c:b6:06:23:61:14:
d2:38:de:b5:4f:ab:4b:46:48:62:7e:6e:7d:47:b8:
d0:02:d6:5e:1f:66:e0:ea:f4:c5:07:ca:e0:e4:fe:
ec:2d:8b:8f:bc:7d:12:67:a7:b1:cb:68:50:cd:cf:
3c:fb:76:f3:4c:60:5e:bd:1d:21:56:df:2c:39:d7:
5c:03:e2:75:6a:2b:46:b5:a9:b1:a8:3d:2b:f4:c1:
f4:19:3a:9b:ac:62:c3:3d:7c:73:d8:f1:a0:d6:7d:
1a:a6:35:4a:1a:38:bd:8d:75:68:d2:81:f4:72:f3:
89:a8:2c:1b:af:7e:13:8f:1c:e8:2a:1c:03:61:e7:
24:ba:79:3f:6d:1b:a2:65:42:94:2b:39:72:a4:82:
6c:12:38:ca:ff:d5:31:39:22:94:a6:4c:1a:55:56:
0c:f7:d4:dd:a2:80:5e:c1:5d:fa:3f:b6:25:73:ea:
83:96:2a:b2:fc:ba:09:7c:5d:52:af:1e:fe:6e:94:
7a:95:07:40:fd:25:70:4c:98:2e:01:75:0b:35:5e:
1f:b8:17:0a:2e:8f:14:c0:61:a9:ae:b5:15:2a:7f:
3d:2c:2d:0a:52:3d:16:fb:3f:66:ff:84:bd:57:8c:
4e:9c:1f:90:9e:f4:5b:71:eb:d8:28:cc:f3:34:52:
4c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:49:81:02:BC:0B:60:01:76:DF:9F:38:BD:1D:E5:48:8E:42:5D:5F
X509v3 Authority Key Identifier:
keyid:75:39:B7:A1:23:41:7A:A7:19:32:59:46:AA:89:E0:F3:0A:B0:CA:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dTm3oSNBeqcZMllGqong8wqwygk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/W0mBArwLYAF23584vR3lSI5CXV8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/dTm3oSNBeqcZMllGqong8wqwygk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.94.0.0/16
81.92.32.0/20
83.211.0.0/16
194.153.192.0-194.153.213.255
212.90.0.0/19
212.110.0.0/19
213.136.128.0/18
213.183.128.0/19
213.198.128.0/18
217.15.208.0/20
IPv6:
2001:750::/29
Signature Algorithm: sha256WithRSAEncryption
ce:0d:a4:1c:17:c7:1a:21:71:60:83:2e:85:58:8c:0b:bf:d1:
dc:4f:77:ab:88:7d:91:32:b1:48:ce:75:3c:f9:e7:4a:7e:bc:
cd:9a:f5:b7:a0:9e:56:c3:57:b9:53:0a:5d:70:c2:c2:18:02:
01:70:10:0b:27:ec:13:ec:94:5d:d2:d1:8c:0c:a8:64:2c:e1:
5f:6d:af:e2:04:e1:af:31:c1:6e:c5:39:98:cc:88:a0:45:8b:
09:a1:cb:34:27:71:41:d9:2f:d4:42:d5:fa:e1:2c:ec:61:0c:
22:2b:7e:eb:6e:28:74:41:6d:19:6e:7f:7c:a8:d8:b6:5b:60:
ef:ff:52:83:a6:33:bb:c3:38:5d:3c:53:d8:ab:7f:84:8d:63:
54:b7:a9:30:da:ac:cc:81:4a:97:bf:b9:7c:db:46:72:e9:b2:
fd:0f:7f:87:5d:37:94:81:47:17:0a:79:0c:8d:7c:16:3e:20:
1a:7c:45:5f:70:bb:1a:de:dc:ac:fa:56:a8:10:e5:5a:f8:2d:
6e:f4:76:db:36:d1:27:85:6b:d4:10:79:0b:40:e9:99:f3:54:
7a:bd:40:5a:25:41:73:4e:a4:d7:e9:21:ba:22:a5:2e:aa:d2:
88:d4:10:cd:67:5e:86:ef:62:67:ee:81:19:24:c7:21:62:66:
92:32:e1:39
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:37 2023 by rpki-client on console.sobornost.net