Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/9c0a7e-9963-4c0d-94ac-446d0a7e9404/1/Tm4xdf9uerxC3BbwmjaiQdMn1FE.roa
File: Tm4xdf9uerxC3BbwmjaiQdMn1FE.roa (raw, json)
Hash identifier: LaTPnQzAWxIn+hyuYJPVDZt9IVyEQgcfsgo9KmGIcAM=
Subject key identifier: 4E:6E:31:75:FF:6E:7A:BC:42:DC:16:F0:9A:36:A2:41:D3:27:D4:51
Certificate issuer: /CN=73dfeea9c7de246e6d7d1a507406285b226f9286
Certificate serial: 03BEACA8
Authority key identifier: 73:DF:EE:A9:C7:DE:24:6E:6D:7D:1A:50:74:06:28:5B:22:6F:92:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c9_uqcfeJG5tfRpQdAYoWyJvkoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/9c0a7e-9963-4c0d-94ac-446d0a7e9404/1/Tm4xdf9uerxC3BbwmjaiQdMn1FE.roa
Signing time: Sat 01 Jan 2022 03:01:27 +0000
ROA not before: Sat 01 Jan 2022 03:01:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200787
IP address blocks: 193.57.47.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62827688 (0x3beaca8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73dfeea9c7de246e6d7d1a507406285b226f9286
Validity
Not Before: Jan 1 03:01:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4e6e3175ff6e7abc42dc16f09a36a241d327d451
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b1:2e:16:98:00:4d:df:ee:ca:c2:b8:02:0c:
a8:1b:b6:08:76:e1:34:74:08:c9:17:ce:3c:e4:c7:
40:b9:a4:ee:75:1f:8f:2a:49:c8:8a:02:bf:ee:ea:
45:fb:ee:e6:4e:e7:3a:04:cf:bb:0e:57:3c:98:33:
b4:a6:ff:a7:83:c9:1c:ec:6c:99:80:1f:59:71:0c:
35:49:31:99:c7:30:d1:43:ee:10:f5:e8:9a:6b:40:
be:ca:1b:cd:b5:c3:89:a3:bf:ec:e0:0b:f3:fb:bc:
93:55:d0:04:4c:56:91:84:aa:f5:5d:4a:5d:aa:3d:
98:3b:ae:cc:25:5d:2a:73:2b:59:f4:df:52:8e:7c:
30:fc:38:85:65:03:74:13:e1:12:20:87:2c:93:9d:
a6:e6:e4:a5:0a:71:71:e0:3d:e0:73:52:23:6c:aa:
3f:97:bb:c8:c7:a7:03:d3:4b:f8:8c:92:51:be:75:
94:16:f5:82:db:14:b3:1c:37:09:ce:1f:63:f9:15:
37:d9:95:98:e9:e9:8c:e5:02:92:ec:46:94:fa:bb:
00:d5:ed:a9:23:c5:55:8a:70:c7:39:ef:1a:d1:08:
62:a4:20:e5:2a:17:0b:56:a1:c2:38:40:04:e1:37:
23:f9:48:ab:74:70:99:d2:bc:00:be:dc:0c:58:c7:
f6:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:6E:31:75:FF:6E:7A:BC:42:DC:16:F0:9A:36:A2:41:D3:27:D4:51
X509v3 Authority Key Identifier:
keyid:73:DF:EE:A9:C7:DE:24:6E:6D:7D:1A:50:74:06:28:5B:22:6F:92:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9_uqcfeJG5tfRpQdAYoWyJvkoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/9c0a7e-9963-4c0d-94ac-446d0a7e9404/1/Tm4xdf9uerxC3BbwmjaiQdMn1FE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/9c0a7e-9963-4c0d-94ac-446d0a7e9404/1/c9_uqcfeJG5tfRpQdAYoWyJvkoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.57.47.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:79:2e:70:f7:c5:cf:22:90:80:2e:6a:6a:7a:22:85:e9:4a:
e4:8c:0a:ff:ff:64:8d:2f:ad:97:13:8d:f4:86:46:f9:0b:af:
4f:b9:f7:77:ce:c9:24:7d:83:2a:a0:40:4e:aa:cb:60:e1:54:
ec:03:f7:6f:3f:1d:4a:2f:ff:d5:25:b4:57:c4:87:2e:8f:ab:
49:19:70:97:8e:65:d4:59:90:2c:3d:f5:76:6e:82:97:69:e9:
b6:81:0b:c5:00:10:a4:7e:95:5d:44:6c:04:2f:5f:ac:78:d2:
e7:7b:8a:ed:1f:d7:52:89:55:ab:f4:d1:2f:88:fb:be:bc:48:
8c:bc:33:ba:48:0e:90:71:07:69:df:ea:ff:b3:9c:81:01:b8:
78:01:13:f5:b9:09:fb:5c:3e:fa:df:01:cd:44:e4:03:8e:f9:
59:18:97:55:eb:8e:d6:16:ca:ac:03:30:2b:ec:f6:35:f2:84:
bb:2a:1f:0f:ce:e7:34:0c:56:f9:9b:fe:97:69:4f:a7:7c:64:
2b:3c:f9:10:74:54:65:03:99:f9:bd:b1:05:1d:52:9f:0e:65:
c5:69:31:42:8f:bc:c3:bf:2a:7c:ae:6a:94:23:74:3e:3b:f3:
80:c3:15:a2:67:e8:ef:f7:2c:d3:2a:f6:85:87:2a:2d:a4:2c:
db:bf:87:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:39 2023 by rpki-client on console.sobornost.net