Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/rUf4VbhV6z8GgyqAVnsZGOQqxSg.roa
File: rUf4VbhV6z8GgyqAVnsZGOQqxSg.roa (raw, json)
Hash identifier: oO9eu9e4eS8WeDrgkQbuA4ApD50sf7ajKyYtV/2tFc4=
Subject key identifier: AD:47:F8:55:B8:55:EB:3F:06:83:2A:80:56:7B:19:18:E4:2A:C5:28
Certificate issuer: /CN=80bd00829536d47745f47da9d1a8a72f6dd462d4
Certificate serial: 01857002707F58C0A5FC3921F511FDBB6B0B
Authority key identifier: 80:BD:00:82:95:36:D4:77:45:F4:7D:A9:D1:A8:A7:2F:6D:D4:62:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gL0AgpU21HdF9H2p0ainL23UYtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/rUf4VbhV6z8GgyqAVnsZGOQqxSg.roa
Signing time: Mon 02 Jan 2023 01:04:46 +0000
ROA not before: Mon 02 Jan 2023 01:04:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62179
IP address blocks: 185.110.135.0/24 maxlen: 24
78.31.184.0/24 maxlen: 24
78.31.185.0/24 maxlen: 24
78.31.186.0/24 maxlen: 24
78.31.184.0/21 maxlen: 21
78.31.191.0/24 maxlen: 24
78.31.188.0/24 maxlen: 24
78.31.189.0/24 maxlen: 24
78.31.190.0/24 maxlen: 24
78.31.187.0/24 maxlen: 24
88.135.16.0/24 maxlen: 24
88.135.17.0/24 maxlen: 24
88.135.21.0/24 maxlen: 24
88.135.22.0/24 maxlen: 24
88.135.23.0/24 maxlen: 24
88.135.24.0/24 maxlen: 24
88.135.18.0/24 maxlen: 24
88.135.19.0/24 maxlen: 24
88.135.20.0/24 maxlen: 24
88.135.31.0/24 maxlen: 24
88.135.28.0/24 maxlen: 24
88.135.29.0/24 maxlen: 24
88.135.30.0/24 maxlen: 24
88.135.25.0/24 maxlen: 24
88.135.26.0/24 maxlen: 24
88.135.27.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:02:70:7f:58:c0:a5:fc:39:21:f5:11:fd:bb:6b:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80bd00829536d47745f47da9d1a8a72f6dd462d4
Validity
Not Before: Jan 2 01:04:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ad47f855b855eb3f06832a80567b1918e42ac528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:6b:b4:66:44:1e:5a:75:2d:fb:97:6e:24:e0:
b4:02:e9:66:05:a7:62:84:d6:ed:bf:af:5c:41:b0:
31:fc:99:2f:06:9f:ae:71:d0:5b:84:50:7c:af:c9:
d0:1b:de:d5:86:0d:b6:51:79:97:24:25:51:d2:06:
43:ca:51:c2:92:70:7c:4b:81:b1:0b:c4:31:f3:f8:
08:d2:4d:11:4e:59:bc:68:b5:ec:6a:fa:a5:63:b3:
f5:98:86:f3:9a:87:c8:42:01:be:70:91:86:c2:3d:
4f:46:62:83:b4:02:7f:1a:d1:7f:b1:32:b0:ea:84:
7b:fd:24:74:1b:b6:5d:71:26:4a:3d:75:28:81:34:
9f:9f:8e:6f:be:50:01:20:4b:20:f8:ae:7e:19:e3:
e9:f8:f1:bb:bf:f5:5e:47:57:52:6b:cb:99:58:ac:
73:2e:14:0a:b6:4b:92:78:f3:b4:38:ef:1a:22:0b:
93:89:83:8c:7e:51:c7:bc:b1:83:9f:f0:11:6e:18:
1f:1e:45:a0:c6:fa:05:2b:c8:c3:ca:21:ef:c1:28:
c4:2e:1d:9a:5a:0e:ae:f5:6e:26:2c:65:60:fd:be:
be:b6:69:d6:f3:b7:64:26:99:a5:7e:21:db:47:22:
75:94:00:b9:10:5c:a7:a9:15:73:38:b9:39:79:74:
92:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:47:F8:55:B8:55:EB:3F:06:83:2A:80:56:7B:19:18:E4:2A:C5:28
X509v3 Authority Key Identifier:
keyid:80:BD:00:82:95:36:D4:77:45:F4:7D:A9:D1:A8:A7:2F:6D:D4:62:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gL0AgpU21HdF9H2p0ainL23UYtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/rUf4VbhV6z8GgyqAVnsZGOQqxSg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.31.184.0/21
88.135.16.0/20
185.110.135.0/24
Signature Algorithm: sha256WithRSAEncryption
48:d8:93:fa:3e:8a:97:70:4e:39:97:f0:0c:e7:46:d2:b9:67:
fa:b9:7e:b1:d5:41:ab:ee:70:8a:3b:f7:20:15:63:8b:07:4c:
45:08:4e:e2:6f:58:4a:80:d3:c7:00:87:98:ed:63:e9:91:bd:
33:45:d5:09:05:83:cf:ba:a7:f4:86:c7:eb:34:ff:b5:76:95:
1b:d1:1f:6c:58:c5:d1:c3:ec:54:02:7a:80:87:4c:db:62:97:
47:04:13:29:06:ca:ed:94:f9:d4:30:d8:b6:81:f6:29:ef:76:
0d:de:e3:fb:a6:87:af:17:42:6c:16:43:ff:15:d8:2b:f1:d4:
2b:e8:5c:33:12:91:43:78:8c:18:74:46:17:18:c4:b8:ad:64:
4a:8d:db:f0:f7:86:53:74:dc:fa:e9:44:a2:0b:01:69:f3:89:
41:26:cf:46:ba:5a:58:de:fa:38:18:0e:ea:4d:40:09:68:66:
61:2e:7c:13:90:3f:1d:c5:d1:33:98:01:c0:c2:4c:b8:71:35:
ef:ac:0a:75:79:53:a7:0e:0d:d0:38:24:d7:f1:f4:fc:fe:c0:
f7:7a:92:66:d3:ae:9c:da:4c:5b:1b:fb:bd:97:94:d2:1f:d4:
74:c3:dc:5b:92:c0:50:f0:49:6d:01:be:31:30:9e:c9:29:b5:
19:f9:ef:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:43 2023 by rpki-client on console.sobornost.net