Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/ebfce6-2857-404b-9b74-b324e025b929/1/7GvYo-mRu3T0zrMRFTUhnyNbrPk.roa
File: 7GvYo-mRu3T0zrMRFTUhnyNbrPk.roa (raw, json)
Hash identifier: mcuiushrAZYjC8pxBiLXfpvYkh95sI4vlEMYU0heYDk=
Subject key identifier: EC:6B:D8:A3:E9:91:BB:74:F4:CE:B3:11:15:35:21:9F:23:5B:AC:F9
Certificate issuer: /CN=f9629775283733a45c454b8d7be5a66df0db1a17
Certificate serial: A95F87
Authority key identifier: F9:62:97:75:28:37:33:A4:5C:45:4B:8D:7B:E5:A6:6D:F0:DB:1A:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-WKXdSg3M6RcRUuNe-WmbfDbGhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/ebfce6-2857-404b-9b74-b324e025b929/1/7GvYo-mRu3T0zrMRFTUhnyNbrPk.roa
Signing time: Sat 01 Jan 2022 01:55:13 +0000
ROA not before: Sat 01 Jan 2022 01:55:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48418
IP address blocks: 185.254.32.0/24 maxlen: 24
185.254.33.0/24 maxlen: 24
185.254.34.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11100039 (0xa95f87)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9629775283733a45c454b8d7be5a66df0db1a17
Validity
Not Before: Jan 1 01:55:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ec6bd8a3e991bb74f4ceb3111535219f235bacf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:99:4b:e5:60:c5:74:2b:73:ac:97:0d:92:22:
e3:fd:f1:c4:da:36:21:8f:a3:5b:47:62:6a:72:44:
56:37:e1:5e:39:30:13:df:3c:1d:a3:c9:86:2b:f4:
fb:15:26:97:01:bc:08:a2:88:2a:44:ce:06:ed:6b:
1d:86:ca:ae:1f:c2:dc:eb:9f:fd:86:b8:4f:69:7a:
76:68:3c:54:2e:38:87:d6:8a:91:66:30:04:2a:08:
64:04:00:66:32:c3:03:ec:f4:ae:c8:9d:aa:0f:33:
fa:aa:ca:7f:11:80:56:85:7d:2e:52:6b:57:ce:5e:
92:86:0a:07:78:f7:1a:37:7f:70:ef:7d:87:00:62:
8f:a5:96:83:08:97:ee:02:47:37:03:24:25:51:8b:
09:c0:86:48:d6:07:d4:9e:68:db:9a:39:41:9c:f8:
4e:11:ee:de:bd:72:be:6c:88:21:68:52:b1:d5:ab:
dd:5a:df:91:0f:70:7e:f2:fe:2b:48:7e:66:80:01:
96:8e:b8:02:ed:30:3d:6f:a0:7d:9c:a8:7f:e3:13:
ea:18:4d:bc:11:0c:13:85:e4:45:ea:88:4c:de:fd:
0d:3e:f2:1f:b5:02:b4:f6:66:e5:7a:7d:37:90:b8:
2a:4c:ef:3b:a2:74:7a:72:b8:9a:96:98:49:ca:a4:
48:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:6B:D8:A3:E9:91:BB:74:F4:CE:B3:11:15:35:21:9F:23:5B:AC:F9
X509v3 Authority Key Identifier:
keyid:F9:62:97:75:28:37:33:A4:5C:45:4B:8D:7B:E5:A6:6D:F0:DB:1A:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-WKXdSg3M6RcRUuNe-WmbfDbGhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ebfce6-2857-404b-9b74-b324e025b929/1/7GvYo-mRu3T0zrMRFTUhnyNbrPk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ebfce6-2857-404b-9b74-b324e025b929/1/1-WKXdSg3M6RcRUuNe-WmbfDbGhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.254.32.0-185.254.34.255
Signature Algorithm: sha256WithRSAEncryption
3b:a9:17:0e:25:b1:4c:27:11:69:2d:bf:5b:a9:5c:f4:f5:39:
65:24:06:7b:24:2f:e9:1b:b3:fa:bc:43:9e:02:54:64:a2:e6:
07:ce:60:0d:56:7e:bc:a6:3f:ef:7e:2b:27:a4:7e:4a:0d:06:
b2:99:5b:30:09:74:c1:65:bd:2d:f5:2f:a0:ab:9e:05:36:25:
f9:55:cf:02:60:fc:84:a8:5e:25:b5:3f:a6:0d:07:03:18:89:
59:01:61:90:7f:77:31:8a:dd:47:fd:16:62:d0:3d:f0:cc:9d:
46:97:d5:b7:96:88:ba:31:90:cd:55:f1:a2:31:0f:4d:9c:72:
26:63:ca:59:ca:ae:39:bc:4b:25:6c:53:a2:0c:88:b5:50:08:
4a:98:2b:7a:b8:a4:ef:d1:f9:8c:5f:2e:e9:64:ec:79:39:f0:
87:fc:49:8c:62:1a:ee:0b:f2:5a:3e:9f:31:99:35:51:c8:f3:
71:cb:0f:29:b0:0c:5d:48:06:ab:bb:bf:16:e8:46:ff:b6:1e:
d6:de:98:83:56:da:a7:43:63:14:24:3e:24:8c:c6:35:b3:35:
a6:16:cf:4b:d2:19:78:65:a8:2e:23:7d:49:dd:2a:0d:2a:9a:
a5:2e:96:9f:38:63:09:4d:2b:a4:63:2f:d7:f7:bf:3f:e7:c8:
3f:ae:f5:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:30 2023 by rpki-client on console.sobornost.net