Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/yrEvYtP6FNSJKxjUOF7Fg14YN3s.roa
File: yrEvYtP6FNSJKxjUOF7Fg14YN3s.roa (raw, json)
Hash identifier: bM+6a5RolCONMV+0AhAkBN/VwUkDAeXASgbbleqgixQ=
Subject key identifier: CA:B1:2F:62:D3:FA:14:D4:89:2B:18:D4:38:5E:C5:83:5E:18:37:7B
Certificate issuer: /CN=32c78eeef7acb451fc37575feb9114dfccc1cdfb
Certificate serial: 01850933937B79E43D891D3CCB2B88D03F52
Authority key identifier: 32:C7:8E:EE:F7:AC:B4:51:FC:37:57:5F:EB:91:14:DF:CC:C1:CD:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MseO7vestFH8N1df65EU38zBzfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/yrEvYtP6FNSJKxjUOF7Fg14YN3s.roa
Signing time: Tue 13 Dec 2022 01:57:33 +0000
ROA not before: Tue 13 Dec 2022 01:57:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62236
IP address blocks: 2.56.86.0/23 maxlen: 23
45.141.243.0/24 maxlen: 24
45.141.254.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:09:33:93:7b:79:e4:3d:89:1d:3c:cb:2b:88:d0:3f:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32c78eeef7acb451fc37575feb9114dfccc1cdfb
Validity
Not Before: Dec 13 01:57:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cab12f62d3fa14d4892b18d4385ec5835e18377b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:23:b8:2b:b9:0e:b5:d4:67:b5:fe:e3:75:97:
44:db:43:a5:d7:d6:2d:f2:fc:dd:45:c6:57:fc:9b:
f0:a6:7a:e2:19:58:78:8d:c9:ad:80:34:68:6e:a6:
86:db:8e:97:c3:b4:44:84:db:d1:91:1b:47:32:80:
1e:a8:d6:96:2d:20:1f:da:68:26:36:05:31:92:ff:
b9:a7:1a:e6:a6:85:70:5f:98:ef:27:ab:8e:0c:c4:
61:84:e6:07:c1:e5:7a:34:e9:82:ac:92:0f:29:c5:
a8:16:28:2e:8e:3d:f0:a6:1c:a9:63:bf:5f:af:1f:
2c:53:e3:4f:44:51:da:3f:56:6b:68:c7:1a:b8:f6:
d2:5b:a5:bc:8a:1c:6d:20:90:1a:c4:c1:88:ea:72:
79:ca:4e:a7:15:25:48:97:1e:cf:3b:ad:87:88:50:
f5:08:2f:98:f1:e3:99:59:ab:43:48:0c:23:e0:e1:
08:40:c3:1d:4f:46:bd:14:95:fe:f7:80:84:cc:c4:
0c:52:17:f4:89:95:0d:cc:de:57:e3:04:73:59:d3:
b5:29:b4:4e:25:5a:1b:af:be:1b:bf:b0:fe:4e:5b:
69:ce:ab:43:d0:b2:e7:e6:b9:04:3d:48:18:3f:d6:
2a:af:1b:a4:4c:8f:7b:bd:f7:80:4e:00:d6:5d:74:
cb:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:B1:2F:62:D3:FA:14:D4:89:2B:18:D4:38:5E:C5:83:5E:18:37:7B
X509v3 Authority Key Identifier:
keyid:32:C7:8E:EE:F7:AC:B4:51:FC:37:57:5F:EB:91:14:DF:CC:C1:CD:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MseO7vestFH8N1df65EU38zBzfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/yrEvYtP6FNSJKxjUOF7Fg14YN3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/MseO7vestFH8N1df65EU38zBzfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.86.0/23
45.141.243.0/24
45.141.254.0/24
Signature Algorithm: sha256WithRSAEncryption
44:81:ff:eb:31:cf:ff:59:84:ef:82:81:a8:a2:71:81:3f:1d:
a6:72:23:59:c5:23:6c:7f:0e:be:4e:92:bf:f8:96:79:6c:68:
4f:1b:69:a4:78:74:a6:aa:a0:69:94:85:29:c2:3c:6d:95:ad:
e6:41:61:78:08:5e:18:c4:53:9d:50:36:83:e4:3e:84:82:f0:
e7:46:a3:1b:70:de:78:b6:02:fd:f3:d4:ff:52:43:68:33:21:
68:7f:c0:47:6d:ae:44:9c:02:07:93:e1:74:29:b2:2a:94:d7:
11:cb:cc:e2:bf:89:b9:b3:23:7d:cd:f8:e4:26:28:33:f7:dc:
9a:0d:fe:6a:27:61:0c:25:06:15:4c:36:8e:97:49:9c:20:98:
34:b7:bb:45:44:d2:af:56:bf:3f:a2:42:cd:21:c8:68:5f:08:
b5:49:05:68:3f:a1:ec:92:a2:ed:8b:a5:25:31:d7:fa:79:e1:
b1:78:7a:bf:5d:cd:df:64:c9:b7:18:b9:70:52:a6:bd:9c:24:
2e:57:f2:b9:73:c3:6c:78:29:fc:e1:72:cb:00:0b:32:b7:07:
c8:1a:a6:11:b5:ac:03:d6:f7:2f:f1:80:4b:68:ef:56:e7:e0:
fa:14:40:89:2c:69:ba:40:52:4a:a0:85:c6:27:90:5d:c2:a6:
59:42:7c:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:05 2023 by rpki-client on console.sobornost.net