Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/iB2kpvv4pXL5ivEAPTa-sgkgfyc.roa
File: iB2kpvv4pXL5ivEAPTa-sgkgfyc.roa (raw, json)
Hash identifier: +Rsbp12LjZHGMzW9k6h/80sGt9LWcS3fIwNl5TJ8xls=
Subject key identifier: 88:1D:A4:A6:FB:F8:A5:72:F9:8A:F1:00:3D:36:BE:B2:09:20:7F:27
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 0188FD4857B8BCC81D8C83FD68571F0A8994
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/iB2kpvv4pXL5ivEAPTa-sgkgfyc.roa
Signing time: Tue 27 Jun 2023 14:35:56 +0000
ROA not before: Tue 27 Jun 2023 14:35:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 82.115.8.0/22 maxlen: 24
46.249.104.0/22 maxlen: 22
46.249.108.0/22 maxlen: 24
185.129.108.0/23 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:fd:48:57:b8:bc:c8:1d:8c:83:fd:68:57:1f:0a:89:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Jun 27 14:35:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=881da4a6fbf8a572f98af1003d36beb209207f27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:0d:2d:1a:23:d4:79:95:21:03:e2:33:e3:59:
67:b5:c8:14:cf:1f:ef:19:82:42:77:84:b6:3f:2a:
23:3d:f4:4b:e7:ad:a3:86:bb:63:ca:58:9c:cc:8c:
e0:85:01:ca:83:37:17:79:ba:f8:a9:22:26:90:00:
53:ab:2a:ac:5f:a6:45:8e:27:bb:49:73:40:2a:c1:
43:25:8d:2a:77:d7:2a:5c:87:c6:f2:44:03:3a:e6:
4e:93:17:ca:5c:15:ce:56:e2:83:f1:56:45:7f:44:
6a:a0:ac:1b:44:47:55:e3:37:af:ef:5b:c4:a5:0b:
51:b4:b8:99:b1:27:52:d5:6b:5f:43:bc:c8:45:b7:
ce:40:8c:2d:ac:c5:c5:27:f3:ac:44:ac:90:aa:a5:
12:b9:94:58:3a:21:fc:d9:6c:f1:f3:6d:19:cb:e6:
9c:14:de:76:9b:f0:2e:05:26:2d:05:cf:b8:90:b2:
a3:88:c6:1b:37:f3:b3:db:0e:f6:da:e5:bf:bd:9e:
6b:07:cc:d8:a7:e6:ef:ae:b9:3b:02:93:49:42:94:
42:97:71:09:fb:79:ff:07:00:71:a7:5b:73:74:d3:
65:49:51:fd:de:79:ac:36:72:3f:93:a3:82:2a:87:
67:50:cd:0a:7a:50:36:9c:3f:1f:27:27:9f:5a:57:
a3:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:1D:A4:A6:FB:F8:A5:72:F9:8A:F1:00:3D:36:BE:B2:09:20:7F:27
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/iB2kpvv4pXL5ivEAPTa-sgkgfyc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.249.104.0/21
82.115.8.0/22
185.129.108.0/23
Signature Algorithm: sha256WithRSAEncryption
4d:e1:50:0f:63:24:59:fc:73:36:89:54:06:f0:c5:56:55:48:
a6:90:33:ab:78:8d:87:8f:a9:de:9d:21:72:0d:b6:2d:ad:d0:
bf:7d:18:7b:25:b7:01:2d:da:97:91:4b:7a:b3:c8:55:8d:8b:
94:3c:26:e5:6b:ce:76:85:d6:4d:c2:82:33:c9:a6:46:07:06:
2a:e8:dd:d7:b5:2c:69:35:31:cb:7c:21:9d:a6:e4:81:8b:40:
ea:e4:89:a4:94:ef:a5:48:9d:8e:7a:79:4c:b6:60:3b:de:c6:
b1:e8:7d:af:2d:2b:97:94:9c:1b:c6:03:3c:ca:88:12:35:10:
29:e7:42:9e:f5:bf:cc:05:30:c8:f5:a4:9b:d8:75:d6:b5:bd:
1f:c3:1d:ca:e7:ed:f5:c8:7c:6d:22:79:42:67:0e:04:c9:38:
ce:5f:6f:dd:86:35:f3:f3:1b:dd:81:cb:47:a6:1d:ce:7e:b3:
fe:c7:44:50:30:ac:95:e4:5e:f2:77:ca:7b:34:66:a5:2c:c6:
e9:1e:71:c1:05:eb:c9:6c:1f:4b:c3:ed:f4:04:41:1c:ac:97:
8f:ad:c8:a8:8b:25:5b:50:9c:0b:6d:30:56:67:49:2c:c8:ea:
b1:2c:ea:48:e9:6b:4f:8e:d6:94:6a:5f:7d:c3:53:10:fe:1a:
31:47:3c:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:25 2023 by rpki-client on console.sobornost.net