Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/9c0a7e-9963-4c0d-94ac-446d0a7e9404/1/Rl4JoInyc2xj9ScEDlWfh8puisM.roa
File: Rl4JoInyc2xj9ScEDlWfh8puisM.roa (raw, json)
Hash identifier: WUzIjeUs+1sGKiXikRlLiwxkSCKbhuAibScjgEr/vGQ=
Subject key identifier: 46:5E:09:A0:89:F2:73:6C:63:F5:27:04:0E:55:9F:87:CA:6E:8A:C3
Certificate issuer: /CN=73dfeea9c7de246e6d7d1a507406285b226f9286
Certificate serial: 01856D8AF00CEAB6411BDD24BC9663D22134
Authority key identifier: 73:DF:EE:A9:C7:DE:24:6E:6D:7D:1A:50:74:06:28:5B:22:6F:92:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c9_uqcfeJG5tfRpQdAYoWyJvkoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/9c0a7e-9963-4c0d-94ac-446d0a7e9404/1/Rl4JoInyc2xj9ScEDlWfh8puisM.roa
Signing time: Sun 01 Jan 2023 13:34:59 +0000
ROA not before: Sun 01 Jan 2023 13:34:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42088
IP address blocks: 185.212.249.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:8a:f0:0c:ea:b6:41:1b:dd:24:bc:96:63:d2:21:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73dfeea9c7de246e6d7d1a507406285b226f9286
Validity
Not Before: Jan 1 13:34:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=465e09a089f2736c63f527040e559f87ca6e8ac3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d2:fd:9e:37:05:1f:d5:03:6c:eb:ac:6f:8a:
4d:a0:77:86:c5:63:e5:3e:e3:75:94:68:e2:3f:e8:
e7:d9:ba:06:a3:35:dd:18:e1:a9:df:7b:a2:b0:b7:
bc:3a:48:80:d3:a3:c6:1e:4e:55:53:1e:fb:3f:42:
f9:1d:32:56:6e:c0:8f:c7:4b:85:d7:24:d3:64:31:
d8:b6:72:f7:77:50:aa:2a:11:2d:96:63:53:49:1e:
7c:83:a0:8f:34:ff:25:ac:34:f8:56:04:3f:a0:e3:
8f:0b:8c:13:ab:0b:12:4f:81:05:8d:9d:a9:c0:4d:
f4:60:46:b8:bc:4c:f8:bf:4c:29:21:a4:db:14:62:
ce:5d:10:6c:10:e3:b6:7b:60:9d:62:f7:f5:cb:1a:
0a:c8:30:71:61:af:7a:c7:d7:f7:79:dc:96:45:79:
27:95:86:4f:2b:7e:0a:af:3f:86:a9:a0:da:93:d3:
96:2c:08:15:8e:e6:1f:47:40:86:b5:9e:f9:42:9e:
85:20:0a:2d:dc:1a:25:a5:54:ec:a6:14:10:3f:e0:
70:63:10:9e:bd:3f:ea:56:a9:cc:c7:a2:14:60:01:
9b:6b:eb:24:65:cd:8f:88:48:d9:be:9f:d8:b4:4d:
ad:6f:3a:e6:d5:bf:c2:af:81:c0:76:01:83:ed:19:
d0:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:5E:09:A0:89:F2:73:6C:63:F5:27:04:0E:55:9F:87:CA:6E:8A:C3
X509v3 Authority Key Identifier:
keyid:73:DF:EE:A9:C7:DE:24:6E:6D:7D:1A:50:74:06:28:5B:22:6F:92:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9_uqcfeJG5tfRpQdAYoWyJvkoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/9c0a7e-9963-4c0d-94ac-446d0a7e9404/1/Rl4JoInyc2xj9ScEDlWfh8puisM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/9c0a7e-9963-4c0d-94ac-446d0a7e9404/1/c9_uqcfeJG5tfRpQdAYoWyJvkoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.212.249.0/24
Signature Algorithm: sha256WithRSAEncryption
11:31:db:19:df:46:0a:6c:36:7a:b8:fb:91:c1:4e:0c:b9:eb:
1c:e9:b0:39:57:dc:46:a0:bb:95:37:85:28:88:14:8a:78:8a:
8e:0d:c0:a7:f6:fd:2c:bc:2d:76:93:5a:07:81:8c:c8:83:42:
a8:08:ee:06:90:64:dd:54:a5:2e:97:5f:65:a7:4b:71:3e:73:
71:01:3b:3b:03:b4:b7:8e:e4:22:1d:85:98:15:4b:3d:5c:e3:
bc:4e:3d:0b:bd:88:53:23:0d:c0:dc:48:1a:0d:6a:2f:f9:ad:
50:52:f3:cf:f5:67:29:f8:80:24:ff:dd:5c:df:3c:d7:e9:9f:
42:41:58:e2:02:74:f7:92:bb:f2:e1:fe:a9:96:b8:92:86:be:
67:62:ab:df:d7:f0:60:d7:b7:16:3a:b7:1d:43:eb:f3:af:21:
da:00:90:aa:25:6a:b5:49:13:00:45:f9:8a:fa:18:b7:de:40:
07:72:e1:71:2a:a2:1d:34:c5:f5:2f:b1:04:80:b1:fc:9f:ea:
1f:3c:ac:d8:e6:8c:67:60:0c:0f:36:de:ce:de:9b:9b:48:40:
91:e6:60:f3:73:f9:a5:26:b1:dc:7f:e3:60:30:74:85:b9:9c:
b6:f0:9c:9d:8b:cb:67:36:ff:e9:fd:81:c7:1e:c4:5d:c6:75:
b0:36:8c:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:39 2023 by rpki-client on console.sobornost.net