Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/QuAwWcwOQyACBaaddieuJkBh8Go.roa
File: QuAwWcwOQyACBaaddieuJkBh8Go.roa (raw, json)
Hash identifier: uxMBqGl8IF00V7rCgMHPDIS5iUq0ZenlS4jHR88W3sE=
Subject key identifier: 42:E0:30:59:CC:0E:43:20:02:05:A6:9D:76:27:AE:26:40:61:F0:6A
Certificate issuer: /CN=32c78eeef7acb451fc37575feb9114dfccc1cdfb
Certificate serial: 01856CF8824180781B03AD92C757C976E974
Authority key identifier: 32:C7:8E:EE:F7:AC:B4:51:FC:37:57:5F:EB:91:14:DF:CC:C1:CD:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MseO7vestFH8N1df65EU38zBzfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/QuAwWcwOQyACBaaddieuJkBh8Go.roa
Signing time: Sun 01 Jan 2023 10:55:03 +0000
ROA not before: Sun 01 Jan 2023 10:55:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207974
IP address blocks: 193.38.225.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:f8:82:41:80:78:1b:03:ad:92:c7:57:c9:76:e9:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32c78eeef7acb451fc37575feb9114dfccc1cdfb
Validity
Not Before: Jan 1 10:55:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=42e03059cc0e43200205a69d7627ae264061f06a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:86:54:a0:3f:36:b3:5a:51:f5:29:b6:ad:50:
87:18:a4:88:fc:06:ec:0d:25:79:5a:6e:84:d9:5c:
6c:6b:2d:64:e7:8a:e0:9f:ea:64:d2:b8:54:ac:27:
6f:ae:7f:de:54:b0:fb:3c:6c:fc:7a:39:10:d0:41:
40:ed:9f:3b:54:59:07:58:b9:84:16:c3:9f:70:56:
16:54:dd:ff:79:9f:28:7b:8f:16:0b:27:03:42:ff:
31:96:c4:6b:8f:91:22:8e:a8:03:2c:98:15:d2:e8:
b1:a6:6c:46:52:6a:0b:0d:c9:93:7b:1d:16:7c:9b:
d7:ea:ce:fa:be:dd:42:04:18:b7:62:25:65:c3:f2:
ab:93:c7:fe:e8:2e:03:ee:af:30:03:42:e8:e4:78:
53:71:cd:8f:d9:6c:cc:7b:d5:56:a0:98:96:ff:45:
8a:f7:a2:a1:2e:01:98:33:50:8b:6f:6d:b3:10:be:
6b:76:7b:e1:35:6f:97:0b:91:08:4d:6b:cc:c2:e3:
ec:d5:59:ad:00:f8:ea:72:d1:70:7d:55:3c:14:01:
56:26:ff:29:48:a4:63:32:d2:1f:05:08:10:8e:60:
f3:f8:56:5b:69:ff:49:e4:a6:42:d7:43:ef:59:bf:
60:72:94:1c:de:0d:6c:99:43:9e:86:ba:c4:b5:6b:
6c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:E0:30:59:CC:0E:43:20:02:05:A6:9D:76:27:AE:26:40:61:F0:6A
X509v3 Authority Key Identifier:
keyid:32:C7:8E:EE:F7:AC:B4:51:FC:37:57:5F:EB:91:14:DF:CC:C1:CD:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MseO7vestFH8N1df65EU38zBzfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/QuAwWcwOQyACBaaddieuJkBh8Go.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/MseO7vestFH8N1df65EU38zBzfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.38.225.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:1b:c6:c2:95:b7:e8:79:6e:61:a9:e3:5b:9f:e4:30:d3:74:
93:f1:83:28:66:d8:da:e2:15:ac:38:2c:ab:43:0c:2e:1e:0e:
aa:9f:55:1f:2e:30:f2:5c:02:34:77:99:69:ce:aa:cc:2f:3f:
1a:5d:5f:27:15:5b:12:1f:ba:cc:4b:88:49:6f:a9:01:2c:64:
64:ea:52:68:c1:d3:49:7b:40:4f:b3:ec:85:4c:df:17:e0:14:
6e:ee:48:60:91:0f:72:95:89:92:c6:57:a0:99:e6:d4:e5:de:
66:ac:29:84:63:86:bd:04:0c:e3:88:17:84:9e:59:61:4b:a3:
e0:c1:cd:a5:af:3b:ac:c5:29:68:f7:90:7f:d2:38:58:bf:37:
0a:3b:07:ae:ab:ae:9f:49:f2:db:d3:1b:a0:40:33:95:96:aa:
1d:04:2d:9d:7b:11:cc:17:56:06:f2:4a:90:fe:0c:00:70:85:
9f:72:35:8e:9f:a7:68:5d:8a:c2:13:6c:5c:2c:9a:36:e9:d1:
24:18:22:77:f1:74:08:be:06:85:0a:a7:76:89:77:45:fe:02:
b9:10:81:5a:ea:f6:aa:5d:df:f9:c9:eb:5b:c7:73:c5:28:86:
51:f2:32:ad:4c:45:84:f2:29:15:c7:16:2c:23:ff:4a:21:4b:
7c:92:6c:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:05 2023 by rpki-client on console.sobornost.net