Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/p0WnRdOtn7PbO7ioHSK7fHw-Pt4.roa
File: p0WnRdOtn7PbO7ioHSK7fHw-Pt4.roa (raw, json)
Hash identifier: TA6sSGfQP0XB/T8ukKy9UHel5X605nwXd8oRtc+pnxg=
Subject key identifier: A7:45:A7:45:D3:AD:9F:B3:DB:3B:B8:A8:1D:22:BB:7C:7C:3E:3E:DE
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 01890E7B70B096BDE408944FB82BB88D22A0
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/p0WnRdOtn7PbO7ioHSK7fHw-Pt4.roa
Signing time: Fri 30 Jun 2023 22:45:18 +0000
ROA not before: Fri 30 Jun 2023 22:45:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 46.249.104.0/22 maxlen: 22
46.249.108.0/22 maxlen: 24
185.129.108.0/23 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:0e:7b:70:b0:96:bd:e4:08:94:4f:b8:2b:b8:8d:22:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Jun 30 22:45:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a745a745d3ad9fb3db3bb8a81d22bb7c7c3e3ede
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:4c:d3:68:80:d9:60:38:b9:68:32:4e:fc:f9:
36:9b:84:40:a6:4d:c1:e8:83:c4:d5:a9:30:73:bc:
8c:3e:33:26:a4:8d:9f:92:73:ce:31:95:e8:dd:48:
df:c7:03:ea:07:b2:6d:bf:2e:22:95:ed:7c:70:3f:
94:31:49:f8:17:b6:0f:d6:7e:1a:c8:67:c4:96:11:
f8:ef:9e:ff:dc:dc:18:9f:9b:55:57:81:db:78:45:
13:ba:e7:5a:bc:3c:33:11:07:e6:99:2b:3f:14:af:
09:36:56:5f:fb:13:1e:48:f9:18:64:47:ae:b4:29:
77:21:0f:ef:12:f0:1d:1a:23:53:4a:84:14:46:4e:
28:96:d8:f0:aa:0e:96:b7:88:5e:04:ba:80:6a:3b:
b3:c6:89:0d:8b:21:cd:76:a4:79:6f:c9:89:67:cc:
64:13:22:8c:14:05:de:b2:08:fd:db:c9:06:c5:bd:
9f:e3:62:dc:2f:c2:87:54:c0:cc:40:78:ee:05:19:
64:19:03:82:8a:c3:d9:5c:9c:a7:bb:90:79:0d:bf:
05:bc:0e:ba:1b:51:fa:41:de:2c:be:13:da:b5:16:
4d:da:e2:5d:3b:f4:8a:87:3a:4e:8f:0c:2e:34:7e:
33:a9:17:15:19:f8:ca:a2:93:62:2f:7f:f3:d2:ba:
4d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:45:A7:45:D3:AD:9F:B3:DB:3B:B8:A8:1D:22:BB:7C:7C:3E:3E:DE
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/p0WnRdOtn7PbO7ioHSK7fHw-Pt4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.249.104.0/21
185.129.108.0/23
Signature Algorithm: sha256WithRSAEncryption
c9:77:d3:e1:3e:91:9b:b8:e8:f2:64:1b:6c:4c:ae:7a:8b:b1:
42:88:f1:2d:1e:5e:f3:43:ed:12:7e:f9:e4:91:83:de:7f:17:
a2:2d:9a:c9:ed:b6:7e:ec:f2:c5:3e:45:7e:d5:65:78:58:7d:
a2:63:b8:85:85:f9:4d:0d:04:16:41:71:24:62:c0:c0:87:74:
d9:63:13:4d:ff:b1:39:8d:1d:a9:e0:6a:35:a8:f0:fe:ae:15:
0b:83:f6:56:82:13:a8:5b:43:57:f0:97:cb:a8:ac:82:4b:f1:
85:fd:bb:b8:33:99:43:d7:93:70:9f:66:16:28:3c:f9:33:51:
1c:aa:57:49:30:75:82:77:1a:c7:e7:b1:65:31:b6:26:9c:be:
87:aa:63:e9:2d:88:a1:3b:cb:e9:4f:d3:f2:46:d6:79:4d:8d:
1d:f7:5e:6c:82:94:7c:a3:00:94:c4:b4:9c:a1:72:74:d3:10:
67:45:74:a5:2b:b0:e5:d0:ff:a5:f0:d6:93:ba:70:5d:ba:a0:
7f:ae:38:ce:4e:ed:cf:fc:73:3f:ce:36:75:7f:f9:f2:da:6e:
16:f5:26:3e:8f:61:82:1d:5f:a8:c8:27:fc:07:5c:fd:d8:f7:
6c:8e:5c:d4:08:e6:bd:8f:c2:9d:df:0a:44:57:c6:9b:f0:4d:
f1:92:55:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:25 2023 by rpki-client on console.sobornost.net