Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/29e960-eff5-44f2-bc40-ade60728ec37/1/gIWl0O7NMax1AhBYEz7lQ1WoaMM.roa
File: gIWl0O7NMax1AhBYEz7lQ1WoaMM.roa (raw, json)
Hash identifier: 5NoiMyM1chQaFG9bX/ZXp2MyQJx8Q/sbXEzWWkHqg/I=
Subject key identifier: 80:85:A5:D0:EE:CD:31:AC:75:02:10:58:13:3E:E5:43:55:A8:68:C3
Certificate issuer: /CN=6c7228dbb17f64e62de1dc4698815a35bb47202d
Certificate serial: 01856B6E9E179645589DE2FB9B1F0D5B3EB9
Authority key identifier: 6C:72:28:DB:B1:7F:64:E6:2D:E1:DC:46:98:81:5A:35:BB:47:20:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bHIo27F_ZOYt4dxGmIFaNbtHIC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/29e960-eff5-44f2-bc40-ade60728ec37/1/gIWl0O7NMax1AhBYEz7lQ1WoaMM.roa
Signing time: Sun 01 Jan 2023 03:44:49 +0000
ROA not before: Sun 01 Jan 2023 03:44:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204335
IP address blocks: 185.253.61.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:6e:9e:17:96:45:58:9d:e2:fb:9b:1f:0d:5b:3e:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c7228dbb17f64e62de1dc4698815a35bb47202d
Validity
Not Before: Jan 1 03:44:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8085a5d0eecd31ac75021058133ee54355a868c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:61:38:10:6d:6b:bb:f3:18:77:54:ac:59:3a:
4d:e2:5c:84:68:ed:57:54:5b:87:a4:78:c5:3a:0f:
3e:29:bb:2a:3c:fd:fd:7f:b2:e7:38:76:14:ba:ea:
d1:f1:71:63:3c:bd:93:24:58:0e:fc:4b:e6:24:8f:
55:8d:04:f9:13:99:6a:53:3d:4a:17:4c:12:7f:32:
56:6e:2f:c2:13:01:59:8d:1b:b0:04:e2:e9:af:7e:
ec:bd:5d:69:68:d3:4a:77:df:3f:ff:66:15:46:66:
f8:b1:24:25:85:88:f1:9d:ae:ff:38:9d:1d:ee:1c:
21:6d:90:ed:cf:64:42:83:a9:40:f5:f1:7f:03:ad:
a7:5e:8d:49:39:b0:65:e0:8b:ac:b8:fa:3f:35:32:
76:7e:ae:4e:c4:56:f1:05:29:8e:4d:30:b9:1e:34:
dc:97:96:7f:ad:8f:34:91:62:7c:b8:c4:97:43:21:
23:55:7b:a9:97:41:a0:9c:d0:41:0f:f2:02:da:77:
ff:ab:2b:e9:d1:b6:e1:0c:99:72:3a:df:c7:7c:59:
41:89:89:fc:cc:d3:5c:22:60:73:4f:bd:a1:4a:f0:
59:67:4b:12:a7:7c:92:46:b7:26:1d:a3:da:02:be:
32:cf:a5:c3:65:d5:63:ff:fe:72:61:5e:f9:49:24:
1c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:85:A5:D0:EE:CD:31:AC:75:02:10:58:13:3E:E5:43:55:A8:68:C3
X509v3 Authority Key Identifier:
keyid:6C:72:28:DB:B1:7F:64:E6:2D:E1:DC:46:98:81:5A:35:BB:47:20:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bHIo27F_ZOYt4dxGmIFaNbtHIC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/29e960-eff5-44f2-bc40-ade60728ec37/1/gIWl0O7NMax1AhBYEz7lQ1WoaMM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/29e960-eff5-44f2-bc40-ade60728ec37/1/bHIo27F_ZOYt4dxGmIFaNbtHIC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.253.61.0/24
Signature Algorithm: sha256WithRSAEncryption
33:89:d3:73:f8:da:7a:d7:8d:d0:6f:f8:90:37:25:21:bb:fe:
bb:86:fa:35:29:62:59:fa:b0:26:d2:fc:a9:bd:a7:c5:aa:68:
66:84:9a:d6:49:ad:57:4f:ac:1b:00:71:43:ab:d7:2b:56:cf:
33:2d:8f:7c:72:6c:13:24:05:09:f3:58:3d:2d:9b:d9:82:0e:
96:71:57:f3:fc:e7:9d:0c:18:cf:8a:84:c5:1b:8c:07:a7:98:
ad:32:44:10:10:cb:75:a4:59:54:df:61:86:b1:f4:d3:e2:b8:
66:ab:44:b9:88:00:c5:5d:ad:57:5d:0a:56:0c:e4:7f:12:a7:
b8:56:4e:0e:04:fe:1e:e6:94:52:be:fe:12:ff:d0:ef:d7:84:
8d:8a:9c:2a:08:92:ef:d4:0d:4a:a4:08:8e:e2:9d:02:f7:b0:
be:cb:32:e3:f8:a0:44:58:4d:25:82:ec:96:1d:15:18:2b:7c:
33:4a:72:9b:26:59:25:2c:bd:a0:d1:74:f5:3f:41:dc:fd:60:
03:22:1d:84:38:58:34:59:79:84:10:f2:55:0c:16:af:97:92:
e5:0d:c9:01:2d:7f:51:9d:41:e9:b5:4d:b2:ed:51:76:79:df:
15:ac:38:17:8b:5d:7e:f1:71:73:a9:43:2f:93:b7:b9:f0:fd:
dc:26:94:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:18 2023 by rpki-client on console.sobornost.net