Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/CkR0xdSv2Hf0knDTOYVtabgIOCI.roa
File: CkR0xdSv2Hf0knDTOYVtabgIOCI.roa (raw, json)
Hash identifier: WewbQ0ese+FXU876CQvGjKKBcwkFTQMRvqSqAHW5dP0=
Subject key identifier: 0A:44:74:C5:D4:AF:D8:77:F4:92:70:D3:39:85:6D:69:B8:08:38:22
Certificate issuer: /CN=32c78eeef7acb451fc37575feb9114dfccc1cdfb
Certificate serial: 01856CF882D9B19122D8B452E89F3A13A5CA
Authority key identifier: 32:C7:8E:EE:F7:AC:B4:51:FC:37:57:5F:EB:91:14:DF:CC:C1:CD:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MseO7vestFH8N1df65EU38zBzfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/CkR0xdSv2Hf0knDTOYVtabgIOCI.roa
Signing time: Sun 01 Jan 2023 10:55:03 +0000
ROA not before: Sun 01 Jan 2023 10:55:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209235
IP address blocks: 2.56.84.0/24 maxlen: 24
2.56.85.0/24 maxlen: 24
45.141.242.0/24 maxlen: 24
45.141.255.0/24 maxlen: 24
193.38.224.0/24 maxlen: 24
2a09:c0c0::/29 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:f8:82:d9:b1:91:22:d8:b4:52:e8:9f:3a:13:a5:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32c78eeef7acb451fc37575feb9114dfccc1cdfb
Validity
Not Before: Jan 1 10:55:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0a4474c5d4afd877f49270d339856d69b8083822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:bd:15:4a:ff:3c:69:d2:c5:5c:84:d0:c1:66:
71:f4:6e:1f:80:6b:d1:8c:be:f1:d8:de:c9:6f:92:
be:a5:31:d1:e7:a6:ad:10:f7:62:f1:02:b8:ee:8a:
4b:7c:da:25:ff:67:94:bf:d2:45:14:47:fc:1c:7b:
11:65:9e:39:3a:64:27:ff:9c:1a:f9:5d:d4:5e:b3:
16:72:99:68:cf:22:37:9b:00:c1:2d:30:d2:6a:68:
8b:e2:50:74:2d:1e:d0:1c:ec:08:62:30:91:78:c3:
d9:03:3c:e7:f6:14:93:92:07:ce:76:62:69:12:63:
de:65:19:ea:9c:f6:c6:52:7b:2a:34:98:e4:50:d6:
12:a8:95:8a:44:fa:20:43:f2:8b:04:92:8d:4f:43:
6c:ff:18:e5:2e:5f:78:87:97:44:af:66:b0:92:0e:
5f:5d:7e:06:ab:35:b7:42:c5:db:31:93:84:59:96:
72:62:8c:98:9a:a5:6c:77:f4:61:48:b0:8a:a7:e8:
aa:41:8a:5b:fd:f6:d3:19:3d:32:5d:a7:e2:98:f9:
d1:e2:25:78:64:c7:b1:31:df:0c:8c:35:f1:0b:52:
7e:e7:c3:3a:af:67:14:a5:9b:d2:62:55:30:31:18:
73:f9:31:04:52:8e:70:eb:65:63:55:cf:52:1a:09:
88:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:44:74:C5:D4:AF:D8:77:F4:92:70:D3:39:85:6D:69:B8:08:38:22
X509v3 Authority Key Identifier:
keyid:32:C7:8E:EE:F7:AC:B4:51:FC:37:57:5F:EB:91:14:DF:CC:C1:CD:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MseO7vestFH8N1df65EU38zBzfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/CkR0xdSv2Hf0knDTOYVtabgIOCI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/MseO7vestFH8N1df65EU38zBzfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.84.0/23
45.141.242.0/24
45.141.255.0/24
193.38.224.0/24
IPv6:
2a09:c0c0::/29
Signature Algorithm: sha256WithRSAEncryption
8b:f7:92:e2:6b:a8:d1:27:c3:3c:35:dd:07:25:d4:3b:b5:ab:
3e:f0:a4:74:b5:63:93:30:0b:73:3b:91:be:c9:c0:60:de:87:
68:97:9a:c9:1e:61:61:81:3a:5e:ac:51:5c:dd:10:76:d5:02:
18:ea:72:ef:bf:31:e4:bf:2d:e7:49:c3:82:d2:5e:05:4c:63:
b3:ea:f0:51:78:67:c4:96:29:3b:65:47:01:43:fb:33:a3:a1:
e1:79:9a:8f:57:cd:7c:62:53:92:8a:6a:d1:98:67:d8:30:1c:
4d:74:93:2a:db:b4:bd:55:fe:79:73:df:9f:46:40:c7:f2:bf:
f1:23:c4:a3:86:4c:b7:be:2e:7a:d4:f5:6f:1e:6e:b2:bc:32:
1e:99:22:2a:fd:f9:72:7a:20:88:93:2e:f5:74:ec:e6:4e:e3:
13:c1:26:96:f9:85:01:ab:dd:a7:3d:07:62:1d:9b:a1:63:49:
c3:b7:88:91:53:fa:b0:be:38:14:d9:3b:48:5c:4c:f5:72:ca:
c3:3e:e1:e1:83:d3:8f:ce:7e:b2:af:90:e0:75:cb:f0:ff:32:
2f:c8:16:8e:76:6f:d7:98:55:ad:80:1a:8c:66:b0:d9:d5:5a:
25:eb:5f:25:81:93:42:a7:f8:06:14:e2:3c:4b:37:27:ff:34:
5f:ec:05:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:05 2023 by rpki-client on console.sobornost.net