Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/eFSrZs5LbtnEst_vPonOdfYYVQQ.roa
File: eFSrZs5LbtnEst_vPonOdfYYVQQ.roa (raw, json)
Hash identifier: P8rsRlIxZl/qc69NEiMAc4lnBKbvh7ca1AY66gmV8H8=
Subject key identifier: 78:54:AB:66:CE:4B:6E:D9:C4:B2:DF:EF:3E:89:CE:75:F6:18:55:04
Certificate issuer: /CN=32c78eeef7acb451fc37575feb9114dfccc1cdfb
Certificate serial: 018CC26CF6246F9A19194B38F14C2B83DC38
Authority key identifier: 32:C7:8E:EE:F7:AC:B4:51:FC:37:57:5F:EB:91:14:DF:CC:C1:CD:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MseO7vestFH8N1df65EU38zBzfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/eFSrZs5LbtnEst_vPonOdfYYVQQ.roa
Signing time: Mon 01 Jan 2024 00:29:29 +0000
ROA not before: Mon 01 Jan 2024 00:29:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62236
IP address blocks: 45.141.243.0/24 maxlen: 24
45.141.254.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6c:f6:24:6f:9a:19:19:4b:38:f1:4c:2b:83:dc:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32c78eeef7acb451fc37575feb9114dfccc1cdfb
Validity
Not Before: Jan 1 00:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7854ab66ce4b6ed9c4b2dfef3e89ce75f6185504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:6a:45:98:96:aa:32:d2:3b:04:0c:37:3f:d0:
f0:40:0c:19:dd:bc:e0:9d:57:1c:0f:bd:56:05:ab:
cc:19:59:50:1c:21:2f:fe:9b:d0:69:fb:f4:86:92:
7d:f1:ed:75:7a:7d:0e:6f:60:12:f7:25:d2:fa:d5:
f8:f3:f5:a2:8f:4e:c0:a2:92:70:7c:23:3a:d9:36:
96:3f:49:96:14:e1:75:9b:57:cb:50:67:25:fa:fc:
ba:87:3c:9f:05:1c:92:0f:c9:54:b8:e7:07:c0:cc:
27:4e:9f:f4:71:d9:52:b4:04:e8:f3:0c:e2:51:69:
00:2e:1a:c7:3d:ce:10:4b:a9:66:25:6b:e7:f1:df:
d5:38:a3:3a:86:dc:bc:c0:44:2e:41:54:c9:eb:57:
f4:8b:ab:ae:03:a3:ee:0f:55:60:01:df:47:79:a6:
15:d8:cb:3c:b4:a0:64:5c:0d:48:9c:93:4b:54:d1:
e8:ad:e0:18:57:1f:38:fa:0d:f6:e8:ed:99:b4:af:
2e:79:ef:50:34:0e:f0:6b:58:6b:3f:53:61:7f:da:
50:03:19:76:4d:72:8f:33:d6:3e:f5:36:ff:9a:93:
12:ff:fb:dc:ba:00:21:0a:52:e4:33:cf:dd:67:ff:
86:5f:15:7b:16:2f:d3:ef:8b:5a:20:21:37:d3:cb:
9a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:54:AB:66:CE:4B:6E:D9:C4:B2:DF:EF:3E:89:CE:75:F6:18:55:04
X509v3 Authority Key Identifier:
keyid:32:C7:8E:EE:F7:AC:B4:51:FC:37:57:5F:EB:91:14:DF:CC:C1:CD:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MseO7vestFH8N1df65EU38zBzfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/eFSrZs5LbtnEst_vPonOdfYYVQQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/MseO7vestFH8N1df65EU38zBzfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.243.0/24
45.141.254.0/24
Signature Algorithm: sha256WithRSAEncryption
92:fc:45:a3:e4:e2:83:77:18:ae:03:38:ed:2f:28:09:01:ce:
02:0b:46:87:5b:90:32:bb:76:97:8d:cb:24:51:00:63:8a:00:
78:08:68:d1:68:06:3e:dc:73:6b:66:f1:a2:cf:a3:a4:9c:62:
c2:f0:50:5b:ba:78:d6:94:5e:2b:3f:7d:18:48:6d:17:f5:80:
12:f3:af:72:fd:68:65:f5:b9:4a:c8:d4:a3:d0:1a:dd:e1:80:
26:4a:d0:15:36:47:12:02:8b:4c:84:0d:27:e6:7b:98:45:16:
97:cd:48:ae:58:2d:26:11:ad:a9:d8:c2:9f:7f:9b:ad:47:97:
e0:b2:37:3c:08:de:fe:44:23:2c:7c:fe:9a:2e:e8:5b:73:9d:
ff:b2:6c:65:bf:3c:16:21:8a:e9:2f:5b:ad:c2:01:fc:05:ed:
48:3c:29:32:1f:56:77:b3:62:cf:8c:8c:85:61:49:44:93:90:
41:9d:82:f2:6a:34:fd:08:80:03:b1:0e:2b:d9:7a:0a:46:8c:
fc:2d:85:0a:6e:66:aa:67:b7:1f:69:68:22:cc:3a:fe:f3:de:
fb:f2:32:da:2c:3b:34:57:e2:e4:d0:30:ed:94:8e:7c:71:fb:
5b:e9:c1:01:b5:a0:47:96:ce:ef:46:30:2d:4d:9f:67:27:66:
71:dd:60:7f
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzCbPYkb5oZGUs48Uwrg9w4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyYzc4ZWVlZjdhY2I0NTFmYzM3NTc1ZmViOTExNGRmY2Nj
MWNkZmIwHhcNMjQwMTAxMDAyOTI5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ODU0YWI2NmNlNGI2ZWQ5YzRiMmRmZWYzZTg5Y2U3NWY2MTg1NTA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk2pFmJaqMtI7BAw3P9DwQAwZ3bzg
nVccD71WBavMGVlQHCEv/pvQafv0hpJ98e11en0Ob2AS9yXS+tX48/Wij07AopJw
fCM62TaWP0mWFOF1m1fLUGcl+vy6hzyfBRySD8lUuOcHwMwnTp/0cdlStATo8wzi
UWkALhrHPc4QS6lmJWvn8d/VOKM6hty8wEQuQVTJ61f0i6uuA6PuD1VgAd9HeaYV
2Ms8tKBkXA1InJNLVNHoreAYVx84+g326O2ZtK8uee9QNA7wa1hrP1Nhf9pQAxl2
TXKPM9Y+9Tb/mpMS//vcugAhClLkM8/dZ/+GXxV7Fi/T74taICE308uadQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFHhUq2bOS27ZxLLf7z6JznX2GFUEMB8GA1UdIwQY
MBaAFDLHju73rLRR/DdXX+uRFN/Mwc37MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXNlTzd2ZXN0Rkg4TjFkZjY1RVUzOHpCemZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8yMjViY2ItNmQzZC00YzBlLTgyNGYt
MmYxYzhlNDA4YjY0LzEvZUZTclpzNUxidG5Fc3RfdlBvbk9kZllZVlFRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC8yMjViY2ItNmQzZC00YzBlLTgyNGYtMmYxYzhlNDA4YjY0
LzEvTXNlTzd2ZXN0Rkg4TjFkZjY1RVUzOHpCemZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALY3zAwQA
LY3+MA0GCSqGSIb3DQEBCwUAA4IBAQCS/EWj5OKDdxiuAzjtLygJAc4CC0aHW5Ay
u3aXjcskUQBjigB4CGjRaAY+3HNrZvGiz6OknGLC8FBbunjWlF4rP30YSG0X9YAS
869y/Whl9blKyNSj0Brd4YAmStAVNkcSAotMhA0n5nuYRRaXzUiuWC0mEa2p2MKf
f5utR5fgsjc8CN7+RCMsfP6aLuhbc53/smxlvzwWIYrpL1utwgH8Be1IPCkyH1Z3
s2LPjIyFYUlEk5BBnYLyajT9CIADsQ4r2XoKRoz8LYUKbmaqZ7cfaWgizDr+8977
8jLaLDs0V+Lk0DDtlI58cftb6cEBtaBHls7vRjAtTZ9nJ2Zx3WB/
-----END CERTIFICATE-----
Generated at Tue Feb 27 01:00:40 2024 by rpki-client on console.sobornost.net