Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/zuq9GhTxHJbSzNkGSh7YP1YFaHQ.roa
File: zuq9GhTxHJbSzNkGSh7YP1YFaHQ.roa (raw, json)
Hash identifier: t3kIJcqcvqTnE/ngP4Gl8zoF4wEPo8h9LF9tJdZiBNs=
Subject key identifier: CE:EA:BD:1A:14:F1:1C:96:D2:CC:D9:06:4A:1E:D8:3F:56:05:68:74
Certificate issuer: /CN=465eba5c1a80f86a4589278edd9304b3f5169f83
Certificate serial: 018708FDB5D92E5E0759B1EF049EB278950D
Authority key identifier: 46:5E:BA:5C:1A:80:F8:6A:45:89:27:8E:DD:93:04:B3:F5:16:9F:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/zuq9GhTxHJbSzNkGSh7YP1YFaHQ.roa
Signing time: Wed 22 Mar 2023 11:04:17 +0000
ROA not before: Wed 22 Mar 2023 11:04:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 26636
IP address blocks: 193.39.170.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:08:fd:b5:d9:2e:5e:07:59:b1:ef:04:9e:b2:78:95:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=465eba5c1a80f86a4589278edd9304b3f5169f83
Validity
Not Before: Mar 22 11:04:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ceeabd1a14f11c96d2ccd9064a1ed83f56056874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:76:64:e2:0e:a9:12:e9:c7:08:77:32:1a:35:
d7:c1:3a:72:1f:8a:d8:c2:6a:b8:27:55:83:8b:71:
9f:c6:fb:25:7d:1c:49:7c:29:7d:17:35:af:83:ec:
41:c7:9a:af:18:85:8f:c3:03:bd:ca:79:cf:18:4a:
1b:aa:7f:4a:c1:6a:cd:9e:45:fb:c7:af:96:f7:88:
2d:9b:08:b8:03:b1:7f:ff:18:e1:93:bf:0c:08:de:
79:43:80:bf:30:81:12:a2:b3:38:11:3f:4c:11:66:
d2:e5:b8:4f:67:22:2f:55:d0:61:1c:c0:5e:a6:34:
b4:a2:06:49:a3:75:cc:17:55:bc:cc:77:e9:6f:16:
49:cb:09:f7:a2:3c:7d:98:12:2f:70:b1:ed:a6:2e:
0b:7b:22:d9:f7:40:48:d7:b9:66:2f:b3:90:6c:40:
e2:21:d6:e5:84:46:c9:74:43:58:6b:71:4e:8c:ec:
71:c4:c6:3c:6e:5e:d0:7b:d4:1b:9f:7c:ac:4f:b4:
70:6f:37:b4:8b:f7:7f:3c:e3:82:4f:f4:82:63:7f:
cb:bb:53:f2:bd:f8:3d:4d:5c:f9:18:55:ff:c3:ac:
50:f9:4e:33:df:9d:07:d5:e0:89:c1:93:dd:ad:8b:
c7:e1:eb:0d:87:0a:6c:2c:1b:46:1b:3b:f6:cb:fa:
a2:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:EA:BD:1A:14:F1:1C:96:D2:CC:D9:06:4A:1E:D8:3F:56:05:68:74
X509v3 Authority Key Identifier:
keyid:46:5E:BA:5C:1A:80:F8:6A:45:89:27:8E:DD:93:04:B3:F5:16:9F:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/zuq9GhTxHJbSzNkGSh7YP1YFaHQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.39.170.0/24
Signature Algorithm: sha256WithRSAEncryption
86:b5:c4:5b:e7:c7:af:89:a7:5e:30:c0:b8:ae:e6:3e:95:1e:
28:43:a4:4d:ed:9e:35:57:b5:b3:71:21:d4:a0:6b:5e:af:7f:
79:e7:db:1f:91:14:39:e1:1e:d6:90:9e:ec:26:36:c8:14:04:
45:9b:cd:21:4c:c5:9f:35:97:94:9a:f6:c9:b8:dc:ef:8f:b0:
71:cf:54:17:95:61:51:56:24:7e:9c:c7:73:01:1b:4f:42:04:
30:13:4b:06:8f:4b:64:34:00:6c:79:6e:fd:fb:4b:2f:7e:d7:
03:94:69:4c:35:9f:ff:91:90:1b:31:c8:bd:31:af:6e:db:1e:
cc:94:3b:c4:3f:a4:5b:5b:7e:f5:40:7f:70:ad:0b:b8:f3:74:
e1:31:a4:0d:4f:27:db:73:7f:b1:47:dd:ee:37:b1:ed:e5:bf:
aa:df:0a:1c:08:bc:06:11:0d:61:81:b4:b6:a0:d3:c2:88:66:
ec:4e:7f:fb:a6:c4:bd:44:cd:24:1c:90:04:b5:ea:30:4e:f9:
15:82:38:0e:21:48:6c:fc:0b:13:8c:06:31:ad:32:24:ee:2d:
81:70:85:60:7f:73:b9:98:1e:5d:db:16:23:04:f2:5e:8d:7c:
ed:9d:9a:a6:07:08:99:00:43:76:c5:ea:ed:a5:91:74:ef:5c:
4b:19:17:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:39 2023 by rpki-client on console.sobornost.net