Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/58bac7-0f52-4e70-9d9f-6a0ad6bc8240/1/9YOVzYTsWRoA3tfylFWfcGiJK6Q.roa
File: 9YOVzYTsWRoA3tfylFWfcGiJK6Q.roa (raw, json)
Hash identifier: 9VS7qatJaouDzc4ETtJsAAPoqWWrYI/jpGMEp0hqSUo=
Subject key identifier: F5:83:95:CD:84:EC:59:1A:00:DE:D7:F2:94:55:9F:70:68:89:2B:A4
Certificate issuer: /CN=57b02b5f682c0955f4cf47a35f8bb0c2b57f3a75
Certificate serial: 0B3AFE1C
Authority key identifier: 57:B0:2B:5F:68:2C:09:55:F4:CF:47:A3:5F:8B:B0:C2:B5:7F:3A:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V7ArX2gsCVX0z0ejX4uwwrV_OnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/58bac7-0f52-4e70-9d9f-6a0ad6bc8240/1/9YOVzYTsWRoA3tfylFWfcGiJK6Q.roa
Signing time: Sat 01 Jan 2022 06:52:54 +0000
ROA not before: Sat 01 Jan 2022 06:52:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39259
IP address blocks: 194.5.180.0/24 maxlen: 24
109.230.210.0/24 maxlen: 24
2a05:c680::/29 maxlen: 29
2a05:c680:53::/48 maxlen: 48
2a0c:e6c0::/29 maxlen: 29
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 188415516 (0xb3afe1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57b02b5f682c0955f4cf47a35f8bb0c2b57f3a75
Validity
Not Before: Jan 1 06:52:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f58395cd84ec591a00ded7f294559f7068892ba4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4e:8f:de:f0:f5:6b:59:ec:e6:b6:65:fe:5e:
38:fe:7d:b1:0c:b0:d4:af:af:df:42:a6:9d:f7:1c:
9f:4f:a6:d4:c9:4a:9a:5c:79:bd:8d:61:b5:d3:ae:
8a:13:34:a8:6d:21:71:f4:e8:f1:f0:38:5b:61:42:
87:63:00:e1:b0:5c:28:17:66:e5:96:c9:c7:2d:66:
06:6d:e2:d9:bc:f0:0a:86:e0:23:25:71:06:23:c1:
fb:34:83:cd:60:9a:87:36:04:66:17:37:02:58:a5:
6e:6a:87:e7:2e:e9:56:00:98:cf:a2:3b:93:70:e0:
7c:e4:3c:14:4f:9c:a6:29:03:7e:22:5f:a7:84:30:
67:7a:78:12:b5:c2:86:fa:70:29:0b:41:32:49:bf:
9c:67:31:b3:cb:d2:52:4c:f4:e4:a6:2d:bb:b1:60:
ce:95:fa:33:70:7f:28:11:3e:05:60:14:a7:48:33:
08:cb:4f:06:d1:6c:08:7e:2d:e6:57:ec:b1:b6:85:
ba:5b:93:87:b4:ab:24:38:b7:45:12:56:81:9b:55:
06:36:9b:96:fe:02:26:77:91:17:55:16:4b:37:c9:
94:58:63:eb:b1:bf:9a:b8:8a:b4:01:73:ab:cd:d2:
fe:cd:8e:01:ad:9d:1c:7a:eb:73:b1:ca:2e:c7:2a:
d7:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:83:95:CD:84:EC:59:1A:00:DE:D7:F2:94:55:9F:70:68:89:2B:A4
X509v3 Authority Key Identifier:
keyid:57:B0:2B:5F:68:2C:09:55:F4:CF:47:A3:5F:8B:B0:C2:B5:7F:3A:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V7ArX2gsCVX0z0ejX4uwwrV_OnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/58bac7-0f52-4e70-9d9f-6a0ad6bc8240/1/9YOVzYTsWRoA3tfylFWfcGiJK6Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/58bac7-0f52-4e70-9d9f-6a0ad6bc8240/1/V7ArX2gsCVX0z0ejX4uwwrV_OnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.230.210.0/24
194.5.180.0/24
IPv6:
2a05:c680::/29
2a0c:e6c0::/29
Signature Algorithm: sha256WithRSAEncryption
64:d1:c0:70:ad:db:3b:85:1f:42:ec:a0:80:1e:86:bd:47:f2:
ca:55:d0:15:a7:00:ca:80:65:f8:48:db:62:8e:79:cf:68:86:
45:11:3b:06:bd:8b:09:d0:49:6a:8f:69:4d:89:a1:a0:a3:69:
0f:b2:c3:49:4d:3b:91:41:6a:ab:70:86:d2:1e:c7:a6:a6:84:
27:d9:a8:fe:0b:2c:94:07:1c:c2:14:8f:27:4f:60:4a:2c:2b:
ae:55:60:f7:85:60:a4:04:a9:08:e3:d8:6e:50:7a:9b:94:33:
d3:47:8a:36:86:ca:ca:ff:a3:89:21:b4:aa:3b:93:a8:26:3c:
17:a1:65:c7:3d:08:65:e6:1c:13:57:5f:00:0f:12:3d:ec:a1:
a8:59:7e:ac:fe:35:6c:73:5b:25:79:ab:48:34:87:55:31:16:
6d:e2:92:b5:34:83:b9:c9:b9:01:e1:81:bd:cf:e4:a5:06:9a:
13:a0:e2:0d:77:43:78:a3:31:a0:29:6d:a4:ad:9a:1d:64:24:
8f:a1:42:91:bf:ba:d2:7d:c3:3a:d5:30:b1:8b:97:72:3b:63:
39:cc:42:c4:15:61:36:67:0d:14:02:f0:9b:94:18:1c:dd:4e:
b4:b3:ac:71:1e:82:ac:b8:33:38:85:99:b9:c9:8b:3f:60:c3:
d9:4c:6e:06
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:33 2023 by rpki-client on console.sobornost.net