Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/1SWa_2OUuDxdOh0nyO1mdmMSegE.roa
File: 1SWa_2OUuDxdOh0nyO1mdmMSegE.roa (raw, json)
Hash identifier: NbwhAvOUYS0Tgk6+U+I/DTcX215Jy7vCK8bMZkUtnSA=
Subject key identifier: D5:25:9A:FF:63:94:B8:3C:5D:3A:1D:27:C8:ED:66:76:63:12:7A:01
Certificate issuer: /CN=942588b91da9cca81b49e603a988e2b1eabddc98
Certificate serial: 01856E8B0BA0A488A711A3170A9A9AE1D248
Authority key identifier: 94:25:88:B9:1D:A9:CC:A8:1B:49:E6:03:A9:88:E2:B1:EA:BD:DC:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lCWIuR2pzKgbSeYDqYjiseq93Jg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/1SWa_2OUuDxdOh0nyO1mdmMSegE.roa
Signing time: Sun 01 Jan 2023 18:14:44 +0000
ROA not before: Sun 01 Jan 2023 18:14:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34661
IP address blocks: 45.149.24.0/22 maxlen: 22
89.251.16.0/22 maxlen: 23
89.28.206.0/23 maxlen: 23
89.28.200.0/21 maxlen: 23
89.251.28.0/22 maxlen: 23
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:8b:0b:a0:a4:88:a7:11:a3:17:0a:9a:9a:e1:d2:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=942588b91da9cca81b49e603a988e2b1eabddc98
Validity
Not Before: Jan 1 18:14:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d5259aff6394b83c5d3a1d27c8ed667663127a01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:bd:32:7c:44:57:6e:8f:3b:91:70:7d:1f:55:
15:1c:b7:6f:e4:88:54:0d:49:b0:98:a3:1e:51:ad:
d9:e9:bd:f8:af:ea:0e:2e:de:16:64:dd:81:86:df:
c7:f5:5f:07:4b:67:a7:ae:95:6f:f1:f4:78:19:45:
d8:06:42:34:90:2e:a0:eb:ca:d4:47:e5:45:6a:fc:
ce:55:88:ad:fc:68:ea:a7:bb:f4:65:1a:fa:49:23:
70:19:b1:bf:3e:7a:a3:06:82:ed:30:5a:6d:07:aa:
b5:4f:74:95:df:86:0c:d1:f2:97:2a:e0:c8:90:07:
99:8c:90:6f:37:49:f8:51:d3:92:e8:93:5d:b4:2b:
62:16:4a:78:71:22:61:be:6a:ad:44:8c:13:2c:61:
5c:a6:99:86:8b:08:2e:c2:ec:b4:bf:f9:41:a4:93:
2e:2d:e7:e0:d8:9d:ab:f2:a4:6d:12:54:26:b2:88:
dc:1c:68:3b:dd:93:3e:26:21:c4:bc:31:a3:0d:2f:
9c:f9:17:77:a0:5f:25:3a:e2:8e:68:ed:b0:54:cc:
56:3b:28:a4:01:4a:d5:f3:71:a9:3d:3b:d7:21:57:
a1:ca:71:91:03:fa:0f:4b:c4:4f:69:d1:9b:5f:48:
fc:e0:d7:91:1d:e6:d1:aa:4c:16:44:47:6d:a4:21:
12:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:25:9A:FF:63:94:B8:3C:5D:3A:1D:27:C8:ED:66:76:63:12:7A:01
X509v3 Authority Key Identifier:
keyid:94:25:88:B9:1D:A9:CC:A8:1B:49:E6:03:A9:88:E2:B1:EA:BD:DC:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lCWIuR2pzKgbSeYDqYjiseq93Jg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/1SWa_2OUuDxdOh0nyO1mdmMSegE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/lCWIuR2pzKgbSeYDqYjiseq93Jg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.24.0/22
89.28.200.0/21
89.251.16.0/22
89.251.28.0/22
Signature Algorithm: sha256WithRSAEncryption
85:83:e4:67:2a:0c:3d:50:a7:53:5b:69:42:a7:74:9a:d3:5b:
4d:12:d4:d3:29:cb:79:b6:78:e2:4d:7b:e0:45:3f:31:1d:29:
63:b7:34:59:29:26:26:de:14:5d:a9:a1:f3:8e:01:fb:88:e4:
a8:0a:e2:97:71:1c:90:09:12:2a:a0:45:de:b7:90:10:01:cf:
af:e6:91:9c:2a:67:3a:dd:46:45:4e:84:53:8b:98:39:7b:80:
ec:20:2f:36:70:23:84:8a:c3:a3:e7:b4:53:01:aa:53:eb:58:
a1:19:49:b2:15:27:6d:a4:30:2a:b0:0d:41:4e:8a:67:3d:24:
98:f9:e5:a6:7a:d8:f3:83:4c:df:98:56:52:59:3a:a0:68:eb:
c0:5e:44:e5:06:b1:b0:cb:19:8f:4f:9a:7d:bc:1b:30:79:f3:
e5:d5:70:f6:ac:16:c3:2c:9c:3c:0f:fd:b6:6e:6c:56:5a:fb:
45:4d:61:a3:74:85:5c:a0:4b:e8:62:79:ab:41:da:65:54:7a:
d8:a8:df:6c:30:10:e5:ba:74:fe:60:e1:6f:a4:c0:e9:32:a3:
90:2c:8b:91:77:1a:2b:40:53:ea:d9:27:a5:11:48:31:af:81:
f1:93:38:6f:d2:ad:d1:ff:8b:7f:22:3c:67:c0:ba:b7:56:3b:
99:9c:d2:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:29 2023 by rpki-client on console.sobornost.net