Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/Nqp0mdYuZkERTrmvix4WGeU64hg.roa
File: Nqp0mdYuZkERTrmvix4WGeU64hg.roa (raw, json)
Hash identifier: uxFwIRdMp5Csm01lyO4QbURFoWO12uz4sWm4I7C2iow=
Subject key identifier: 36:AA:74:99:D6:2E:66:41:11:4E:B9:AF:8B:1E:16:19:E5:3A:E2:18
Certificate issuer: /CN=b404cc0e038eb0e697ec6e7ae49d0286146e0c1a
Certificate serial: 018EEB24207E1BDF082F547B12F4F2C52CF4
Authority key identifier: B4:04:CC:0E:03:8E:B0:E6:97:EC:6E:7A:E4:9D:02:86:14:6E:0C:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tATMDgOOsOaX7G565J0ChhRuDBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/Nqp0mdYuZkERTrmvix4WGeU64hg.roa
Signing time: Wed 17 Apr 2024 08:19:57 +0000
ROA not before: Wed 17 Apr 2024 08:19:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 45.3.32.0/19 maxlen: 19
45.78.80.0/20 maxlen: 20
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:eb:24:20:7e:1b:df:08:2f:54:7b:12:f4:f2:c5:2c:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b404cc0e038eb0e697ec6e7ae49d0286146e0c1a
Validity
Not Before: Apr 17 08:19:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=36aa7499d62e6641114eb9af8b1e1619e53ae218
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:bc:14:c1:c1:b3:a6:4e:b6:e3:a9:8a:6c:36:
71:75:a0:ef:e2:dd:e9:f3:b5:be:60:7a:3c:a3:ba:
d2:92:aa:72:1a:aa:99:65:ff:a0:3d:01:3a:c7:16:
da:ca:a5:4e:d8:23:2a:d1:15:34:62:69:a3:5c:a6:
ca:0d:46:73:e3:98:e4:b5:5f:70:c7:30:57:6e:cc:
df:2c:f6:60:21:43:29:63:04:35:0a:3e:4c:7a:19:
e8:ff:a0:ee:3a:1d:f0:64:b9:23:5f:ef:67:44:35:
aa:ce:0e:eb:76:8e:65:0a:db:1e:5a:6e:12:12:02:
ba:56:83:c7:33:81:49:ed:82:bd:f7:b9:49:ac:f3:
db:02:99:cb:ab:a6:a6:13:fe:9a:e7:18:71:b7:cc:
0a:e5:71:4f:61:04:fd:a9:4c:9d:e7:72:39:49:d6:
87:bd:b6:7f:5f:99:93:47:0f:98:f2:ed:9d:6b:cf:
21:f2:7b:f6:2e:3a:87:87:55:5e:b5:81:01:7a:07:
fc:35:41:e7:be:e1:81:56:a2:34:1f:dd:d2:19:16:
1f:b3:73:50:5d:8d:2b:1d:c2:a3:3f:74:81:fc:01:
28:3c:dd:47:96:c1:bf:73:70:74:82:b4:0b:3d:3c:
2d:8d:b0:5d:86:1f:24:14:bc:bc:eb:17:37:57:ab:
f7:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:AA:74:99:D6:2E:66:41:11:4E:B9:AF:8B:1E:16:19:E5:3A:E2:18
X509v3 Authority Key Identifier:
keyid:B4:04:CC:0E:03:8E:B0:E6:97:EC:6E:7A:E4:9D:02:86:14:6E:0C:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tATMDgOOsOaX7G565J0ChhRuDBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/Nqp0mdYuZkERTrmvix4WGeU64hg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/tATMDgOOsOaX7G565J0ChhRuDBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.3.32.0/19
45.78.80.0/20
Signature Algorithm: sha256WithRSAEncryption
41:80:8f:51:ef:93:98:36:34:6a:49:8d:ac:17:aa:75:c6:e3:
61:56:27:0c:3c:ee:00:24:79:e7:ea:f0:98:45:91:e7:81:68:
36:b8:ce:f2:96:29:76:0b:79:49:3e:5f:8e:ce:f9:0c:36:1a:
8d:d2:4c:4d:6d:49:17:29:3a:94:d8:c3:15:65:7d:0f:5d:39:
1d:f1:72:a9:02:6b:96:5a:aa:76:72:fc:70:6b:ad:e2:17:3b:
f9:01:d5:7a:37:66:57:c1:c9:f9:d1:25:f1:bf:a0:0b:f4:a0:
35:b7:6d:f8:ed:a9:f8:39:31:fd:dc:42:25:35:64:41:5b:fd:
48:aa:16:b9:cb:c9:5c:0d:01:ae:35:19:5c:93:a8:b4:f1:4e:
19:9a:60:00:e8:8a:74:01:43:d1:28:cb:8f:c6:0b:3c:31:81:
f5:37:87:5a:97:bb:e2:21:53:e4:80:23:64:a5:04:04:3c:29:
16:f1:6e:fe:c4:e8:0f:d7:b8:05:ba:c9:ea:3e:c3:a6:a0:65:
b9:e2:d9:d4:91:4b:e2:d9:e8:94:de:f7:c9:4b:53:9d:c9:8a:
d4:35:f7:0c:57:e6:56:16:d8:38:95:9b:17:03:a6:98:17:68:
29:81:32:7f:41:72:fb:0c:94:3a:5c:69:54:04:5c:7b:41:42:
92:5a:ac:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 17 18:49:41 2024 by rpki-client on console.sobornost.net