Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/9c0a7e-9963-4c0d-94ac-446d0a7e9404/1/1PrrWNfAOF60AqOz3qAYAKaA304.roa
File: 1PrrWNfAOF60AqOz3qAYAKaA304.roa (raw, json)
Hash identifier: J5C5iWg0f1lP+MxaJuZ4a5PQD2yT7utfytns4KTxZ94=
Subject key identifier: D4:FA:EB:58:D7:C0:38:5E:B4:02:A3:B3:DE:A0:18:00:A6:80:DF:4E
Certificate issuer: /CN=73dfeea9c7de246e6d7d1a507406285b226f9286
Certificate serial: 03BDAE78
Authority key identifier: 73:DF:EE:A9:C7:DE:24:6E:6D:7D:1A:50:74:06:28:5B:22:6F:92:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c9_uqcfeJG5tfRpQdAYoWyJvkoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/9c0a7e-9963-4c0d-94ac-446d0a7e9404/1/1PrrWNfAOF60AqOz3qAYAKaA304.roa
Signing time: Sat 01 Jan 2022 03:01:27 +0000
ROA not before: Sat 01 Jan 2022 03:01:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61101
IP address blocks: 185.41.20.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62762616 (0x3bdae78)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73dfeea9c7de246e6d7d1a507406285b226f9286
Validity
Not Before: Jan 1 03:01:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d4faeb58d7c0385eb402a3b3dea01800a680df4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f8:9e:33:ce:1f:b7:c4:d8:01:a2:dc:f1:35:
9e:98:d0:cc:ab:f6:44:78:04:86:f1:ba:82:ce:9a:
71:b5:9b:e8:f5:4d:51:b9:ec:e8:9c:87:85:ef:b1:
df:b2:2e:74:c9:91:96:2f:a0:96:8b:ac:84:fe:fe:
b2:19:78:ea:21:72:b9:e9:b9:01:b9:03:df:54:fe:
8b:09:36:c8:be:1b:3f:ad:aa:d0:94:ef:d4:db:f0:
0d:39:6a:15:94:61:bb:a0:ac:a3:23:c8:79:ac:52:
ab:13:79:dd:9d:5f:76:93:4d:11:d8:8c:70:dc:9a:
bb:74:7a:4b:72:77:b4:1b:77:15:87:d7:8f:99:d3:
8c:db:38:58:11:20:fa:e3:22:1a:c2:6b:22:10:01:
67:3f:d7:d7:32:10:ef:97:8c:70:20:67:26:0e:1b:
e9:bb:b1:11:db:e2:2e:73:56:55:d8:b6:7d:53:a9:
83:54:f3:a1:fa:11:20:4a:ce:a4:41:5a:fb:e6:7a:
6c:c5:32:09:75:fa:e2:0a:3d:48:4a:59:6a:14:f1:
54:2c:76:72:20:81:ac:46:a3:b9:7a:3d:21:50:7c:
0c:99:64:37:2e:bc:9b:ec:3c:26:cd:64:05:e5:d0:
26:27:5f:85:5b:c9:e1:b8:d6:c9:0e:77:73:3f:31:
5a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:FA:EB:58:D7:C0:38:5E:B4:02:A3:B3:DE:A0:18:00:A6:80:DF:4E
X509v3 Authority Key Identifier:
keyid:73:DF:EE:A9:C7:DE:24:6E:6D:7D:1A:50:74:06:28:5B:22:6F:92:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9_uqcfeJG5tfRpQdAYoWyJvkoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/9c0a7e-9963-4c0d-94ac-446d0a7e9404/1/1PrrWNfAOF60AqOz3qAYAKaA304.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/9c0a7e-9963-4c0d-94ac-446d0a7e9404/1/c9_uqcfeJG5tfRpQdAYoWyJvkoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.41.20.0/24
Signature Algorithm: sha256WithRSAEncryption
10:3b:b0:c4:5b:c5:88:c9:ac:30:63:56:f1:cb:b9:c6:3e:09:
d7:e5:7b:9d:db:e6:d0:c7:33:a5:6e:1d:39:27:89:09:1a:11:
d8:1f:f3:cd:a0:8f:bd:53:61:ff:d8:29:ab:a6:d3:ae:19:9f:
7a:30:e0:6c:b4:90:41:21:68:8b:02:f9:dc:57:99:22:25:76:
62:6a:c4:af:86:bb:f3:39:e1:86:7e:73:1f:14:5a:be:1d:bc:
8f:31:b2:1d:72:db:8e:87:34:a4:06:09:30:78:cd:d6:40:27:
bb:22:59:37:04:39:0a:a7:0c:87:92:0d:d5:e3:14:d0:57:e8:
7b:b3:fd:23:69:d1:5a:41:d1:0c:57:ba:2e:37:22:e9:6a:b2:
9b:e8:bc:2c:d8:10:36:b9:c2:9a:e4:92:c9:af:7c:0c:fe:51:
2f:66:74:22:9a:0a:f7:62:05:b7:74:2e:f1:65:fb:c7:d7:8c:
35:1c:16:18:77:9e:f3:59:ba:52:07:63:6d:06:5c:fa:0d:14:
e8:bf:e8:f0:5f:d6:79:30:74:d6:c7:80:06:04:b9:80:89:a6:
19:cc:9b:1c:bf:60:a2:d6:18:d2:da:89:e4:69:84:4f:99:c1:
0d:91:fb:e1:c2:25:c2:00:73:af:da:a3:62:7d:b0:a9:b9:e6:
85:1e:e6:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:39 2023 by rpki-client on console.sobornost.net