Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/67jA4Uib1MtQMF9H34Y0TeegWDY.roa
File: 67jA4Uib1MtQMF9H34Y0TeegWDY.roa (raw, json)
Hash identifier: Q5dvn3VbioF8lPMeb8PYvlljOTLQAFsn4R0kPAu5EB8=
Subject key identifier: EB:B8:C0:E1:48:9B:D4:CB:50:30:5F:47:DF:86:34:4D:E7:A0:58:36
Certificate issuer: /CN=32c78eeef7acb451fc37575feb9114dfccc1cdfb
Certificate serial: 01856CF87FBF8493A7747C150253ADBEF749
Authority key identifier: 32:C7:8E:EE:F7:AC:B4:51:FC:37:57:5F:EB:91:14:DF:CC:C1:CD:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MseO7vestFH8N1df65EU38zBzfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/67jA4Uib1MtQMF9H34Y0TeegWDY.roa
Signing time: Sun 01 Jan 2023 10:55:02 +0000
ROA not before: Sun 01 Jan 2023 10:55:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62236
IP address blocks: 2.56.86.0/23 maxlen: 23
45.141.243.0/24 maxlen: 24
45.141.254.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:f8:7f:bf:84:93:a7:74:7c:15:02:53:ad:be:f7:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32c78eeef7acb451fc37575feb9114dfccc1cdfb
Validity
Not Before: Jan 1 10:55:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ebb8c0e1489bd4cb50305f47df86344de7a05836
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:55:cd:17:d0:4e:af:69:d5:fb:ba:72:5f:4a:
e1:58:9e:17:b2:34:fc:32:01:09:be:af:7a:0b:63:
6d:11:69:0c:78:66:6e:11:7b:05:23:4a:6b:fb:03:
35:2c:cf:82:9d:6a:b0:f2:14:47:d9:de:73:bb:07:
90:b5:f3:66:79:e5:bb:97:2c:a6:eb:eb:1e:68:f5:
a2:1a:08:b3:f1:0a:03:ae:51:04:12:43:4b:4f:a9:
fd:18:9a:af:c1:3a:a7:22:dc:55:36:34:0f:fa:ee:
da:3e:10:d2:23:9c:6b:ed:56:b7:ef:f1:06:d7:55:
17:13:3f:fe:8d:fe:cc:12:be:29:8e:26:24:cf:d0:
73:db:d3:20:9e:cb:10:47:ac:07:f5:1e:3a:b3:31:
e9:95:4a:7c:ff:96:19:62:4a:d6:8e:ed:83:1c:c3:
33:97:8e:b0:4d:73:2a:c5:f5:77:77:cd:5d:86:34:
48:ff:07:ba:bd:4c:48:9d:b5:53:6b:67:f8:2e:eb:
7a:00:4b:66:5f:85:fc:8c:9c:e7:be:65:10:28:81:
0a:89:2d:ac:fc:17:88:ae:2a:f2:53:39:5e:6f:66:
dd:50:6c:3a:e8:49:b0:8a:7a:3c:cc:e6:81:c7:28:
dc:75:e8:19:25:6a:7a:f4:4d:1c:3e:33:e6:66:f7:
19:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:B8:C0:E1:48:9B:D4:CB:50:30:5F:47:DF:86:34:4D:E7:A0:58:36
X509v3 Authority Key Identifier:
keyid:32:C7:8E:EE:F7:AC:B4:51:FC:37:57:5F:EB:91:14:DF:CC:C1:CD:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MseO7vestFH8N1df65EU38zBzfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/67jA4Uib1MtQMF9H34Y0TeegWDY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/MseO7vestFH8N1df65EU38zBzfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.86.0/23
45.141.243.0/24
45.141.254.0/24
Signature Algorithm: sha256WithRSAEncryption
15:4a:c0:71:f8:a7:bb:a7:bf:31:eb:89:32:ed:85:0d:57:b2:
4f:16:16:73:08:5a:cf:f8:a9:f0:ed:08:96:c1:58:63:fd:90:
d9:81:f2:1a:7c:8b:21:7b:a0:14:54:cf:d9:5d:39:8f:a7:f5:
89:a9:53:94:d9:93:ac:5a:c7:fa:47:6f:21:50:c7:0d:2c:d5:
f6:f6:47:7c:db:7f:83:8b:0b:7d:7c:04:71:db:c6:5e:93:c8:
6f:3e:29:c1:aa:5b:80:6d:6a:85:be:60:a3:7a:cd:81:37:99:
c5:bc:0d:cb:c4:1b:a8:22:a0:4c:cd:48:d0:7b:c5:52:35:68:
b5:bc:15:51:92:fa:da:55:3b:03:e8:19:36:c7:1a:ef:bd:7d:
43:d7:a9:ac:5b:79:8c:31:3a:6f:2b:0e:80:72:15:5d:6a:20:
db:3d:a6:4a:e4:90:2c:aa:2a:33:08:49:34:62:d9:9d:f8:9e:
7f:d7:37:29:93:25:6f:89:40:96:b7:57:a6:6e:a6:9e:36:74:
b0:f3:b0:f3:ad:3e:1f:9e:1b:ad:77:55:42:5b:a7:56:a8:50:
8d:65:84:55:1f:a0:39:81:11:1c:a7:76:c8:0f:f2:44:e3:ce:
db:4d:32:2d:17:82:f3:8c:3b:d7:41:7f:af:4a:6b:61:ed:67:
2b:78:da:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:05 2023 by rpki-client on console.sobornost.net