Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/a4a577-1925-4df3-920d-fa2088cc5014/1/MYx6YG-fqCYge1F16nnhrfnzHMo.roa
File: MYx6YG-fqCYge1F16nnhrfnzHMo.roa (raw, json)
Hash identifier: 92/6dcYLE3z/cYQIiDfCUBfOC3JzDhzcaX4ttEGU/OI=
Subject key identifier: 31:8C:7A:60:6F:9F:A8:26:20:7B:51:75:EA:79:E1:AD:F9:F3:1C:CA
Certificate issuer: /CN=43668474e7bb3dbdb26adc01838ce7062d70c498
Certificate serial: 018CC80148E5D36ACA632363F70A0DA200C0
Authority key identifier: 43:66:84:74:E7:BB:3D:BD:B2:6A:DC:01:83:8C:E7:06:2D:70:C4:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q2aEdOe7Pb2yatwBg4znBi1wxJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/a4a577-1925-4df3-920d-fa2088cc5014/1/MYx6YG-fqCYge1F16nnhrfnzHMo.roa
Signing time: Tue 02 Jan 2024 02:29:36 +0000
ROA not before: Tue 02 Jan 2024 02:29:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207502
IP address blocks: 147.78.162.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:48:e5:d3:6a:ca:63:23:63:f7:0a:0d:a2:00:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43668474e7bb3dbdb26adc01838ce7062d70c498
Validity
Not Before: Jan 2 02:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=318c7a606f9fa826207b5175ea79e1adf9f31cca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:59:4f:d4:10:2c:25:5b:05:ef:75:2d:e2:90:
39:e6:99:8c:04:23:6b:57:93:1d:eb:ea:50:71:78:
41:2f:f4:8e:1a:fa:5b:4f:99:e2:f2:6c:6a:f2:fb:
9c:81:9c:ea:50:b6:b6:a5:3a:61:ae:d7:ae:56:ee:
03:9a:49:21:b5:4e:bc:7f:4b:c9:bf:08:29:1b:13:
14:2e:23:91:32:a9:9e:f2:4d:e3:a8:48:2f:89:01:
0b:ca:19:35:5a:97:6f:0c:b4:3a:52:d6:6e:b6:f8:
9a:49:c5:29:91:80:93:0c:9a:80:5b:a7:74:c4:a3:
f6:19:18:48:1e:1c:03:1d:64:9d:04:3d:17:04:6e:
eb:0d:d8:9b:38:fa:d0:30:69:6b:72:3a:8f:72:13:
9a:4e:97:f3:b2:b7:dd:d8:9c:1e:32:80:ea:10:bc:
a9:bd:33:a9:79:b1:ae:9f:ac:3e:0d:01:bf:e2:51:
e0:a1:0e:24:cd:e2:93:02:7a:92:d9:af:c4:a2:d0:
2c:23:45:1b:12:1f:22:7a:c6:06:56:6b:af:47:17:
7b:27:23:a8:66:cd:0b:57:aa:5c:70:95:10:30:5b:
12:07:8f:94:ad:e2:d8:23:12:27:eb:49:0d:fe:ce:
fa:3b:ff:3b:1d:30:4a:d8:10:9f:11:35:2b:85:4e:
97:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:8C:7A:60:6F:9F:A8:26:20:7B:51:75:EA:79:E1:AD:F9:F3:1C:CA
X509v3 Authority Key Identifier:
keyid:43:66:84:74:E7:BB:3D:BD:B2:6A:DC:01:83:8C:E7:06:2D:70:C4:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q2aEdOe7Pb2yatwBg4znBi1wxJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/a4a577-1925-4df3-920d-fa2088cc5014/1/MYx6YG-fqCYge1F16nnhrfnzHMo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/a4a577-1925-4df3-920d-fa2088cc5014/1/Q2aEdOe7Pb2yatwBg4znBi1wxJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.78.162.0/24
Signature Algorithm: sha256WithRSAEncryption
02:43:93:05:be:36:3b:d5:94:0d:39:2b:e1:d6:7d:4d:8e:d8:
fc:0d:0f:3f:57:e6:1a:f6:df:42:7e:4c:41:e1:51:41:1c:fe:
d2:d7:23:60:24:c2:72:01:62:00:4f:31:c8:89:c6:dc:32:57:
d1:1e:d8:ac:69:72:15:68:1b:16:cf:23:93:86:3e:bf:20:4b:
e0:71:4a:c8:ff:50:91:9c:6c:41:ee:12:52:5f:91:50:f1:59:
88:c1:76:45:11:c1:6e:d4:1b:5c:59:60:17:b1:89:3e:c1:db:
d9:5b:b4:ba:5f:73:04:48:88:be:68:56:c2:59:76:5c:19:29:
14:bf:07:de:29:6e:c9:7a:a5:6a:b7:59:b4:14:c4:a1:61:8c:
8b:85:3f:31:f2:ae:5d:6c:1f:6e:7b:40:b6:c5:3a:23:91:7e:
e6:40:04:56:21:a2:3e:ce:6a:a2:a8:9e:c1:4c:a9:cd:35:20:
5d:e9:22:52:64:c0:73:c0:08:98:8a:1d:91:26:96:1c:3f:2c:
b9:ca:38:cb:39:7c:1b:46:1b:a4:d8:90:4b:79:3d:57:82:e4:
fc:2c:45:58:80:d6:e9:1f:e5:66:85:39:4c:e8:3e:f6:92:93:
6e:f0:eb:4e:6f:6e:60:d6:f0:e2:c4:73:68:91:42:6a:b9:62:
20:4f:24:de
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIAUjl02rKYyNj9woNogDAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzNjY4NDc0ZTdiYjNkYmRiMjZhZGMwMTgzOGNlNzA2MmQ3
MGM0OTgwHhcNMjQwMTAyMDIyOTM2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMThjN2E2MDZmOWZhODI2MjA3YjUxNzVlYTc5ZTFhZGY5ZjMxY2NhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFlP1BAsJVsF73Ut4pA55pmMBCNr
V5Md6+pQcXhBL/SOGvpbT5ni8mxq8vucgZzqULa2pTphrteuVu4DmkkhtU68f0vJ
vwgpGxMULiORMqme8k3jqEgviQELyhk1WpdvDLQ6UtZutviaScUpkYCTDJqAW6d0
xKP2GRhIHhwDHWSdBD0XBG7rDdibOPrQMGlrcjqPchOaTpfzsrfd2JweMoDqELyp
vTOpebGun6w+DQG/4lHgoQ4kzeKTAnqS2a/EotAsI0UbEh8iesYGVmuvRxd7JyOo
Zs0LV6pccJUQMFsSB4+UreLYIxIn60kN/s76O/87HTBK2BCfETUrhU6XPwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDGMemBvn6gmIHtRdep54a358xzKMB8GA1UdIwQY
MBaAFENmhHTnuz29smrcAYOM5wYtcMSYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTJhRWRPZTdQYjJ5YXR3Qmc0em5CaTF3eEpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9hNGE1NzctMTkyNS00ZGYzLTkyMGQt
ZmEyMDg4Y2M1MDE0LzEvTVl4NllHLWZxQ1lnZTFGMTZubmhyZm56SE1vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC9hNGE1NzctMTkyNS00ZGYzLTkyMGQtZmEyMDg4Y2M1MDE0
LzEvUTJhRWRPZTdQYjJ5YXR3Qmc0em5CaTF3eEpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk06iMA0G
CSqGSIb3DQEBCwUAA4IBAQACQ5MFvjY71ZQNOSvh1n1Njtj8DQ8/V+Ya9t9CfkxB
4VFBHP7S1yNgJMJyAWIATzHIicbcMlfRHtisaXIVaBsWzyOThj6/IEvgcUrI/1CR
nGxB7hJSX5FQ8VmIwXZFEcFu1BtcWWAXsYk+wdvZW7S6X3MESIi+aFbCWXZcGSkU
vwfeKW7JeqVqt1m0FMShYYyLhT8x8q5dbB9ue0C2xTojkX7mQARWIaI+zmqiqJ7B
TKnNNSBd6SJSZMBzwAiYih2RJpYcPyy5yjjLOXwbRhuk2JBLeT1XguT8LEVYgNbp
H+VmhTlM6D72kpNu8OtOb25g1vDixHNokUJquWIgTyTe
-----END CERTIFICATE-----
Generated at Tue Feb 27 00:59:41 2024 by rpki-client on console.sobornost.net