Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/1wZjSrr-hF6k5uVkX1zSQKLw7OE.roa
File: 1wZjSrr-hF6k5uVkX1zSQKLw7OE.roa (raw, json)
Hash identifier: R+D2tl1mbfjHmIeKI9GHk+Co46WS/lsqHa/z7crxY6Q=
Subject key identifier: D7:06:63:4A:BA:FE:84:5E:A4:E6:E5:64:5F:5C:D2:40:A2:F0:EC:E1
Certificate issuer: /CN=b404cc0e038eb0e697ec6e7ae49d0286146e0c1a
Certificate serial: 018E5505C40B5858B11D647874F6A75F404E
Authority key identifier: B4:04:CC:0E:03:8E:B0:E6:97:EC:6E:7A:E4:9D:02:86:14:6E:0C:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tATMDgOOsOaX7G565J0ChhRuDBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/1wZjSrr-hF6k5uVkX1zSQKLw7OE.roa
Signing time: Tue 19 Mar 2024 04:43:44 +0000
ROA not before: Tue 19 Mar 2024 04:43:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 45.3.32.0/19 maxlen: 19
45.78.80.0/20 maxlen: 20
65.111.0.0/19 maxlen: 19
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:55:05:c4:0b:58:58:b1:1d:64:78:74:f6:a7:5f:40:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b404cc0e038eb0e697ec6e7ae49d0286146e0c1a
Validity
Not Before: Mar 19 04:43:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d706634abafe845ea4e6e5645f5cd240a2f0ece1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:24:82:e4:b7:f3:35:7b:77:20:4c:96:26:81:
ac:c2:2c:db:07:c0:bf:23:13:3e:d3:c1:9c:8a:4d:
05:9f:5d:0c:df:29:5b:17:8f:4f:d8:72:6c:b4:a1:
5e:dd:82:ea:5e:5d:e4:24:4c:e3:08:b7:f4:02:1e:
fa:a1:15:63:c7:48:44:62:a3:a3:36:67:98:a3:3e:
8c:e6:24:2c:ae:91:c9:55:27:bf:1b:17:a2:98:ab:
c5:58:77:1e:55:aa:b6:6c:e4:83:c1:0d:21:a7:cc:
c4:39:87:69:a6:66:b8:e4:11:e5:a6:72:3d:05:f1:
dc:4f:69:34:93:d6:2a:f6:d9:07:24:e8:9c:76:36:
6a:8e:ed:66:e7:f3:8d:b6:c8:85:5e:01:43:5e:bc:
97:ea:4a:1a:6a:a8:10:ed:82:d4:ff:d9:47:21:d3:
04:0b:d1:9e:d1:25:1f:cd:69:20:96:00:6d:01:65:
6e:c6:52:3e:76:e2:4b:8b:24:84:76:a3:f3:f1:95:
e7:7e:34:09:bc:49:6e:7a:fa:6f:f0:5a:7a:9e:a1:
4e:56:6f:8c:b7:94:5e:40:27:17:eb:06:a6:8c:54:
4e:3e:f8:1e:68:96:11:27:2e:37:e3:29:cc:64:ca:
55:2e:ef:9f:d6:b4:88:87:4f:af:df:ea:b7:49:5b:
54:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:06:63:4A:BA:FE:84:5E:A4:E6:E5:64:5F:5C:D2:40:A2:F0:EC:E1
X509v3 Authority Key Identifier:
keyid:B4:04:CC:0E:03:8E:B0:E6:97:EC:6E:7A:E4:9D:02:86:14:6E:0C:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tATMDgOOsOaX7G565J0ChhRuDBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/1wZjSrr-hF6k5uVkX1zSQKLw7OE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/tATMDgOOsOaX7G565J0ChhRuDBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.3.32.0/19
45.78.80.0/20
65.111.0.0/19
Signature Algorithm: sha256WithRSAEncryption
96:cc:1e:00:44:72:70:7b:e8:00:47:75:8b:2f:07:db:21:18:
15:e1:3f:a4:c5:9d:da:c3:e8:ac:30:ed:ef:56:f4:e4:57:d5:
d0:db:93:18:6c:70:79:3f:97:ce:9e:34:17:94:22:9c:e8:e1:
06:e7:d6:94:47:5e:74:74:d2:85:cf:0c:7d:03:f9:9a:70:c5:
0c:5f:c7:33:64:9e:6c:04:10:79:83:a7:61:59:8e:0b:68:91:
7e:d6:5d:d6:af:ea:fb:f8:a4:89:08:10:35:f7:8a:d5:28:91:
7b:31:a5:47:89:e4:5b:8c:35:33:e9:f5:24:9b:bc:93:64:d8:
e0:79:e1:db:92:60:2b:27:f3:61:cf:51:c6:3b:13:e4:a2:ea:
e0:e1:31:91:7f:09:ed:86:8a:76:31:80:4f:50:bd:96:7a:a5:
08:ff:cf:a2:57:bc:04:20:f7:8e:b0:f9:fe:b1:67:ed:42:08:
be:0e:d3:d6:87:33:3a:80:7d:83:9b:ef:38:25:ef:2d:e2:0d:
27:77:52:4c:9f:de:0d:98:b7:f2:3a:ae:18:cd:54:f4:32:26:
c1:a6:9b:dd:35:49:3e:dd:97:ee:15:d2:50:8d:bf:4d:46:5e:
5c:e3:51:d3:b9:29:d8:2f:a4:3d:7a:a3:2d:d9:ce:3c:b9:06:
71:24:77:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 17 14:46:08 2024 by rpki-client on console.sobornost.net