Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/9c0a7e-9963-4c0d-94ac-446d0a7e9404/1/dGgn1QKPGBU-ZYpsaW9RimNdNaI.roa
File: dGgn1QKPGBU-ZYpsaW9RimNdNaI.roa (raw, json)
Hash identifier: 7R0NZM8L0Jc5d4OgQb2XLVg4HhLswWaqjjQtf+YgN2g=
Subject key identifier: 74:68:27:D5:02:8F:18:15:3E:65:8A:6C:69:6F:51:8A:63:5D:35:A2
Certificate issuer: /CN=73dfeea9c7de246e6d7d1a507406285b226f9286
Certificate serial: 0184C8916133F94DD61C0F8571D2484C2AE3
Authority key identifier: 73:DF:EE:A9:C7:DE:24:6E:6D:7D:1A:50:74:06:28:5B:22:6F:92:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c9_uqcfeJG5tfRpQdAYoWyJvkoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/9c0a7e-9963-4c0d-94ac-446d0a7e9404/1/dGgn1QKPGBU-ZYpsaW9RimNdNaI.roa
Signing time: Wed 30 Nov 2022 12:44:41 +0000
ROA not before: Wed 30 Nov 2022 12:44:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49223
IP address blocks: 193.57.44.0/23 maxlen: 24
185.239.27.0/24 maxlen: 24
185.239.26.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:c8:91:61:33:f9:4d:d6:1c:0f:85:71:d2:48:4c:2a:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73dfeea9c7de246e6d7d1a507406285b226f9286
Validity
Not Before: Nov 30 12:44:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=746827d5028f18153e658a6c696f518a635d35a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:95:01:69:da:e4:a8:b5:fa:a9:d5:db:67:24:
ef:cf:08:42:29:e0:49:67:bb:fe:e6:52:8b:1c:68:
f3:09:be:a7:3e:f1:5a:c6:6a:5d:d7:30:ae:71:1c:
2c:86:5f:ba:ae:f0:de:ab:eb:8b:fd:c1:0f:bb:1b:
77:8a:13:f3:84:e7:9d:76:ac:10:d6:72:46:04:be:
f3:c2:79:fa:e5:d8:17:89:61:63:73:88:3e:88:78:
14:9e:bd:f0:10:46:94:2b:f2:67:1f:6a:14:54:59:
01:27:30:ca:df:b2:00:c3:fc:46:1a:cc:1a:a4:a3:
79:b6:0c:0f:5c:7e:d8:14:a4:91:41:98:ef:3c:99:
c3:0b:ac:e2:82:c0:cd:c0:c1:92:7b:39:08:50:9f:
4d:76:ec:dd:4b:d4:3e:d1:93:18:05:b5:b9:e6:d9:
11:1d:cd:58:0b:8e:e1:0d:ed:b5:c9:eb:1b:4b:c2:
2a:0d:cc:a4:42:9e:12:f0:3e:5d:a0:f4:af:bf:c2:
5a:cd:16:a4:c6:99:0d:09:eb:d8:4c:9e:45:f5:87:
78:96:a0:f7:52:8e:51:8d:2a:fd:38:73:56:f5:62:
c7:ba:25:fa:f2:63:63:97:96:b0:64:e8:3b:9e:d4:
ba:1a:fd:8b:1e:77:33:13:68:d4:f8:e1:7a:28:fd:
80:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:68:27:D5:02:8F:18:15:3E:65:8A:6C:69:6F:51:8A:63:5D:35:A2
X509v3 Authority Key Identifier:
keyid:73:DF:EE:A9:C7:DE:24:6E:6D:7D:1A:50:74:06:28:5B:22:6F:92:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9_uqcfeJG5tfRpQdAYoWyJvkoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/9c0a7e-9963-4c0d-94ac-446d0a7e9404/1/dGgn1QKPGBU-ZYpsaW9RimNdNaI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/9c0a7e-9963-4c0d-94ac-446d0a7e9404/1/c9_uqcfeJG5tfRpQdAYoWyJvkoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.239.26.0/23
193.57.44.0/23
Signature Algorithm: sha256WithRSAEncryption
15:f4:b8:ac:3c:a3:21:33:a2:a4:ba:5d:fd:be:94:a2:23:39:
75:b2:61:1c:d5:2e:d4:70:dc:69:27:89:cf:08:ac:04:85:68:
6c:23:e2:8e:22:1c:52:d3:32:55:1e:ac:17:28:9e:66:51:cb:
44:da:c4:c5:18:b3:6b:aa:97:82:c2:8b:ab:52:b5:0c:10:13:
59:f7:74:58:6e:4d:8b:c3:56:01:8e:31:c0:db:60:c6:b8:6c:
b9:71:d6:3e:5f:ed:61:38:3a:0f:0a:a7:71:53:4b:1b:68:5c:
70:15:70:cb:b2:b2:0e:62:b4:a4:22:95:0f:4c:47:b8:8a:44:
85:a0:6e:ca:70:ca:46:60:45:53:0d:38:4f:fd:20:28:4a:7b:
4b:b4:11:76:ec:e3:5d:97:c4:7d:70:bc:1a:5e:b7:62:54:9b:
88:1f:d0:63:33:00:9d:d1:19:3d:22:71:61:33:6f:bd:be:2e:
9d:69:55:2f:01:bd:ce:ec:e7:9d:70:81:55:f4:e5:08:28:4c:
59:da:6e:fb:5f:28:8b:02:30:ef:db:eb:0d:5f:b5:2e:d5:1e:
ee:5f:ae:8e:74:01:ab:4b:b4:bc:cc:24:c6:7d:61:ca:7d:06:
f9:5e:6c:a1:b8:28:64:a7:bd:7b:e2:d6:85:02:73:8c:cb:09:
ee:ba:00:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:39 2023 by rpki-client on console.sobornost.net