Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/iYJUApR2VqpErpLut5S4ymTq7zo.roa
File: iYJUApR2VqpErpLut5S4ymTq7zo.roa (raw, json)
Hash identifier: EQ3vMW4dVeQ3Qz9kAYSFeW52HlIMUz0HeMfcs5F3en4=
Subject key identifier: 89:82:54:02:94:76:56:AA:44:AE:92:EE:B7:94:B8:CA:64:EA:EF:3A
Certificate issuer: /CN=3ba5b1c09aa31f6713c61b32e558109e47966d42
Certificate serial: 34997541
Authority key identifier: 3B:A5:B1:C0:9A:A3:1F:67:13:C6:1B:32:E5:58:10:9E:47:96:6D:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O6WxwJqjH2cTxhsy5VgQnkeWbUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/iYJUApR2VqpErpLut5S4ymTq7zo.roa
Signing time: Sat 01 Jan 2022 08:58:04 +0000
ROA not before: Sat 01 Jan 2022 08:58:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 26114
IP address blocks: 62.115.244.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 882472257 (0x34997541)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ba5b1c09aa31f6713c61b32e558109e47966d42
Validity
Not Before: Jan 1 08:58:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=89825402947656aa44ae92eeb794b8ca64eaef3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:b9:42:df:ea:07:d3:70:42:ba:96:b3:7e:ed:
57:eb:aa:44:b2:19:99:4c:13:5f:fa:d6:17:52:d4:
07:88:c4:41:27:73:70:fe:27:6f:49:31:5b:f3:97:
3b:a9:be:7d:b6:2a:3d:af:e3:9f:ea:9c:3c:c2:ab:
0a:b7:b8:a0:5c:49:b7:55:56:87:9c:56:bc:91:5a:
c3:92:b0:da:59:a4:75:b2:0d:bd:f7:40:a4:1e:84:
8a:6a:f8:dc:64:dd:d6:82:b1:d0:ce:26:ca:5e:db:
49:51:c0:4f:2f:44:45:a1:c0:5e:ee:62:89:92:34:
49:fe:1b:83:4d:d4:fa:73:6e:ef:f2:a4:69:59:79:
04:0c:c6:66:13:c1:ac:0f:02:7d:2d:e2:41:2a:04:
e1:c4:b4:cd:7c:b3:2e:31:1a:ad:64:16:d2:b3:fd:
45:68:aa:93:1a:2e:a5:1f:f6:b3:89:46:f1:c1:2e:
63:7c:80:b6:f2:b5:c7:05:ba:c8:a0:93:67:00:8a:
bd:1d:4a:69:af:84:d8:51:bc:9f:ae:f8:66:c6:4e:
8e:ca:ed:9f:24:46:80:0b:04:7c:7f:da:19:62:8f:
61:bf:53:c1:02:2a:2d:64:a2:b6:5b:6f:8c:8e:4e:
ba:7b:69:36:17:3e:a3:c6:76:4c:c3:59:5d:d9:ab:
c3:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:82:54:02:94:76:56:AA:44:AE:92:EE:B7:94:B8:CA:64:EA:EF:3A
X509v3 Authority Key Identifier:
keyid:3B:A5:B1:C0:9A:A3:1F:67:13:C6:1B:32:E5:58:10:9E:47:96:6D:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O6WxwJqjH2cTxhsy5VgQnkeWbUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/iYJUApR2VqpErpLut5S4ymTq7zo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.115.244.0/24
Signature Algorithm: sha256WithRSAEncryption
58:ce:ee:28:c8:b9:62:89:8a:12:3a:a7:36:7e:84:b3:2e:3f:
c8:9f:c3:1f:3d:b1:1b:1c:6b:cd:89:7b:8e:40:67:6f:e8:06:
36:0e:ba:11:de:71:22:50:08:c1:83:9a:4b:60:09:b1:fa:b1:
96:1d:f8:1b:3f:08:15:b1:7b:72:24:ee:fe:3d:22:16:08:69:
92:d8:f5:ae:b4:e9:c5:36:bf:99:a8:b2:c0:82:1f:0a:bd:ff:
2d:cb:5c:5d:28:a9:21:b3:dc:ff:6d:0c:c8:a2:dd:bb:8f:72:
bd:d7:f2:0e:91:95:03:86:e3:37:d0:17:1b:cd:1d:59:3a:86:
ee:67:37:b1:95:ae:47:22:d3:62:d5:d8:a4:be:50:db:02:6a:
56:05:0c:ab:11:33:78:07:9b:12:db:4c:b5:0d:ce:94:a8:e3:
d2:28:a7:ee:9a:8b:b7:b0:db:f9:3a:4c:9c:43:7d:2f:69:1a:
bb:a1:08:47:fd:a0:ea:5d:ba:19:6f:f1:08:95:3d:f2:c5:95:
cc:b3:17:cf:33:76:5d:0f:73:7b:1a:b0:38:97:65:28:18:eb:
a2:06:a9:b2:e6:6a:f7:3e:b6:ef:10:c1:92:cf:8f:24:d6:b1:
64:5f:6f:28:25:c2:ac:da:47:74:08:bb:5c:1f:2a:53:b6:4d:
ba:58:ca:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:04 2023 by rpki-client on console.sobornost.net