Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/SGZ8SpZKjAxFXLXbQKFzvqdLSpQ.roa
File: SGZ8SpZKjAxFXLXbQKFzvqdLSpQ.roa (raw, json)
Hash identifier: JFqo2+Iu2JXFDSwuExWReoXyJ9HGeCkVY3nQZjAq73A=
Subject key identifier: 48:66:7C:4A:96:4A:8C:0C:45:5C:B5:DB:40:A1:73:BE:A7:4B:4A:94
Certificate issuer: /CN=3ba5b1c09aa31f6713c61b32e558109e47966d42
Certificate serial: 0185708C92BEE18F96B45E9CE9560B103CA9
Authority key identifier: 3B:A5:B1:C0:9A:A3:1F:67:13:C6:1B:32:E5:58:10:9E:47:96:6D:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O6WxwJqjH2cTxhsy5VgQnkeWbUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/SGZ8SpZKjAxFXLXbQKFzvqdLSpQ.roa
Signing time: Mon 02 Jan 2023 03:35:38 +0000
ROA not before: Mon 02 Jan 2023 03:35:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 26114
IP address blocks: 62.115.244.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:8c:92:be:e1:8f:96:b4:5e:9c:e9:56:0b:10:3c:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ba5b1c09aa31f6713c61b32e558109e47966d42
Validity
Not Before: Jan 2 03:35:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=48667c4a964a8c0c455cb5db40a173bea74b4a94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:5c:2c:f0:c1:7a:c1:b1:1f:9f:9c:1f:7b:58:
78:0a:fd:1a:45:3b:3c:13:09:59:1c:e8:e0:c4:03:
38:f0:a3:99:14:dd:49:1e:95:b5:fe:4d:6f:94:96:
a5:07:ba:38:04:aa:bb:8a:bf:7c:1d:90:64:62:0d:
5b:66:70:46:66:b6:ea:f4:0c:e6:5a:11:14:ee:de:
fa:1c:b3:bf:76:7d:97:85:1e:e7:01:40:37:e5:f1:
f2:39:5a:bf:65:a3:33:a7:ae:56:12:06:5b:fa:46:
e0:0c:90:44:5d:15:9b:6f:53:45:1d:4c:80:0a:3e:
9c:d0:91:e6:98:72:00:67:29:f1:9e:b5:1b:4b:34:
e2:f6:31:45:1b:fc:a4:7f:0e:94:6f:7f:a8:71:c4:
27:56:07:8f:f7:b6:76:d1:00:82:f0:1e:2b:12:bd:
f1:af:3b:5e:af:e8:5b:5f:8a:01:e1:af:8a:7d:91:
7a:8a:3c:77:fc:e3:18:a3:f7:83:ff:6c:a2:3d:d8:
2b:20:52:44:9f:d6:8e:3e:21:12:48:fd:03:c6:89:
b3:0b:fe:fe:88:45:84:81:cb:41:c9:5b:1d:30:71:
3a:be:91:d5:1b:e2:b0:63:6b:3e:d8:6e:6f:5a:de:
de:a5:5c:ab:cf:73:77:8e:93:4f:da:d6:bb:dd:20:
3c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:66:7C:4A:96:4A:8C:0C:45:5C:B5:DB:40:A1:73:BE:A7:4B:4A:94
X509v3 Authority Key Identifier:
keyid:3B:A5:B1:C0:9A:A3:1F:67:13:C6:1B:32:E5:58:10:9E:47:96:6D:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O6WxwJqjH2cTxhsy5VgQnkeWbUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/SGZ8SpZKjAxFXLXbQKFzvqdLSpQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.115.244.0/24
Signature Algorithm: sha256WithRSAEncryption
43:0a:cf:52:e0:da:c0:48:5f:57:8e:6b:e5:6d:6e:7d:1d:70:
32:93:ba:a8:8a:10:83:b7:40:5c:92:5b:65:5c:0e:c4:33:9c:
ba:9b:21:fd:6a:ec:c5:6d:9a:32:07:e3:9e:bd:e7:fa:cb:92:
d8:bc:62:0c:a0:1f:0c:20:70:23:c7:73:b8:5b:8e:c2:65:10:
b2:fa:ae:09:b8:15:16:db:ad:82:7e:30:5b:b6:2a:15:cc:36:
8c:7c:bd:da:59:0b:24:04:40:37:7e:05:35:de:4b:79:85:e9:
02:62:3b:07:21:56:8b:79:ba:9a:dc:7f:0c:a1:ab:00:5a:ed:
fb:0f:88:a2:a8:7c:18:ba:da:12:c7:b3:0e:39:98:ee:2a:d1:
28:d9:97:ba:a5:85:ca:fe:f6:57:38:ab:de:05:54:3c:b0:b9:
81:a4:60:d8:d1:9a:b0:b1:46:e4:0c:98:e9:85:2b:b9:47:fe:
9f:bd:60:bd:94:90:57:08:a8:c3:9c:a0:b7:73:d4:1f:df:01:
c2:5a:19:82:bb:46:6f:ab:6f:ca:f1:4c:c2:95:ca:2a:f5:c8:
bf:be:48:5a:79:49:8a:16:50:be:c8:35:5d:b8:d4:80:06:72:
79:6c:ce:53:81:ec:a5:8f:e6:30:ce:25:ef:a7:07:5e:62:4a:
0a:25:18:d9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwjJK+4Y+WtF6c6VYLEDypMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiYTViMWMwOWFhMzFmNjcxM2M2MWIzMmU1NTgxMDllNDc5
NjZkNDIwHhcNMjMwMTAyMDMzNTM4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ODY2N2M0YTk2NGE4YzBjNDU1Y2I1ZGI0MGExNzNiZWE3NGI0YTk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiVws8MF6wbEfn5wfe1h4Cv0aRTs8
EwlZHOjgxAM48KOZFN1JHpW1/k1vlJalB7o4BKq7ir98HZBkYg1bZnBGZrbq9Azm
WhEU7t76HLO/dn2XhR7nAUA35fHyOVq/ZaMzp65WEgZb+kbgDJBEXRWbb1NFHUyA
Cj6c0JHmmHIAZynxnrUbSzTi9jFFG/ykfw6Ub3+occQnVgeP97Z20QCC8B4rEr3x
rzter+hbX4oB4a+KfZF6ijx3/OMYo/eD/2yiPdgrIFJEn9aOPiESSP0DxomzC/7+
iEWEgctByVsdMHE6vpHVG+KwY2s+2G5vWt7epVyrz3N3jpNP2ta73SA8eQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEhmfEqWSowMRVy120Chc76nS0qUMB8GA1UdIwQY
MBaAFDulscCaox9nE8YbMuVYEJ5Hlm1CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzZXeHdKcWpIMmNUeGhzeTVWZ1Fua2VXYlVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8xM2JkNzctZDI5Ny00Njg5LWJlZTQt
NDY2ZTljYWI3ODY0LzEvU0daOFNwWktqQXhGWExYYlFLRnp2cWRMU3BRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC8xM2JkNzctZDI5Ny00Njg5LWJlZTQtNDY2ZTljYWI3ODY0
LzEvTzZXeHdKcWpIMmNUeGhzeTVWZ1Fua2VXYlVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPnP0MA0G
CSqGSIb3DQEBCwUAA4IBAQBDCs9S4NrASF9XjmvlbW59HXAyk7qoihCDt0Bckltl
XA7EM5y6myH9auzFbZoyB+Oevef6y5LYvGIMoB8MIHAjx3O4W47CZRCy+q4JuBUW
262CfjBbtioVzDaMfL3aWQskBEA3fgU13kt5hekCYjsHIVaLebqa3H8MoasAWu37
D4iiqHwYutoSx7MOOZjuKtEo2Ze6pYXK/vZXOKveBVQ8sLmBpGDY0ZqwsUbkDJjp
hSu5R/6fvWC9lJBXCKjDnKC3c9Qf3wHCWhmCu0Zvq2/K8UzClcoq9ci/vkhaeUmK
FlC+yDVduNSABnJ5bM5Tgeylj+YwziXvpwdeYkoKJRjZ
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:04 2023 by rpki-client on console.sobornost.net