Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/miTEfrm9sOMBAMlVGFZVJXgiKyw.roa
File: miTEfrm9sOMBAMlVGFZVJXgiKyw.roa (raw, json)
Hash identifier: l4WmN4lXyfhLYP1x/2Qkn/CVBjW/dknPLQjkQpuUhqU=
Subject key identifier: 9A:24:C4:7E:B9:BD:B0:E3:01:00:C9:55:18:56:55:25:78:22:2B:2C
Certificate issuer: /CN=e8403b5e45cd58be5f6c5d33fa565ab49223e3db
Certificate serial: 018572FA5F515C0CD2EE98EAF9C1565EC297
Authority key identifier: E8:40:3B:5E:45:CD:58:BE:5F:6C:5D:33:FA:56:5A:B4:92:23:E3:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/miTEfrm9sOMBAMlVGFZVJXgiKyw.roa
Signing time: Mon 02 Jan 2023 14:54:49 +0000
ROA not before: Mon 02 Jan 2023 14:54:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199329
IP address blocks: 212.49.180.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:fa:5f:51:5c:0c:d2:ee:98:ea:f9:c1:56:5e:c2:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8403b5e45cd58be5f6c5d33fa565ab49223e3db
Validity
Not Before: Jan 2 14:54:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9a24c47eb9bdb0e30100c9551856552578222b2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:f1:36:40:cd:42:f0:d4:af:d4:c7:eb:e0:a9:
c4:67:08:0f:82:f3:1e:94:9c:b4:c6:fb:ca:23:a9:
74:a0:c6:8a:d7:f8:ae:2d:b7:3f:2e:0f:11:e0:c7:
6e:1f:8f:f7:17:db:81:f9:58:48:d6:a9:77:7a:c7:
6a:b2:ff:a9:52:6d:b8:1d:7e:df:45:71:00:a3:df:
ac:b5:92:b5:3d:7e:87:23:e4:16:f5:0a:55:12:87:
a8:99:d0:57:b6:97:ff:cf:b6:e7:c3:1e:3a:6c:58:
d6:80:50:8c:0c:1d:10:dc:1f:06:95:88:1b:23:f3:
d3:a7:b1:5c:81:8a:b8:37:38:c2:17:e7:36:e1:27:
2e:12:d7:d9:90:1b:1b:67:99:1d:1d:30:61:22:34:
3e:80:33:bc:42:f1:19:27:5b:d7:be:3d:04:9e:5e:
32:f3:c4:d9:5c:56:0d:0b:d9:31:aa:21:61:2d:04:
4c:4a:fe:78:42:f1:85:53:a4:64:63:e7:81:61:fb:
27:52:18:0b:eb:27:e4:f9:16:67:b2:2b:20:7e:b7:
fe:22:2a:fb:e3:9d:7e:54:79:c4:e0:46:24:d0:9f:
ad:7b:e7:c7:79:07:62:9b:1b:5b:6f:38:34:05:3a:
32:89:68:cb:80:1c:83:97:b3:86:1d:4f:0a:88:0d:
ab:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:24:C4:7E:B9:BD:B0:E3:01:00:C9:55:18:56:55:25:78:22:2B:2C
X509v3 Authority Key Identifier:
keyid:E8:40:3B:5E:45:CD:58:BE:5F:6C:5D:33:FA:56:5A:B4:92:23:E3:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/miTEfrm9sOMBAMlVGFZVJXgiKyw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.49.180.0/24
Signature Algorithm: sha256WithRSAEncryption
22:05:17:a5:48:69:29:6a:d1:0a:35:ac:b5:e7:45:0d:d2:2c:
4d:20:bf:e1:8c:f8:33:89:60:b9:47:61:32:fc:a4:d5:97:5a:
ab:78:a7:b6:76:d4:e9:d8:cb:1b:d7:26:ef:be:2e:c1:b7:4a:
9d:52:43:7d:39:fd:89:2c:43:38:fb:24:16:2b:6a:5d:fa:76:
45:bc:8a:0f:ea:a1:8b:a3:fa:46:e8:74:38:c5:ec:a1:03:8b:
b4:21:22:46:0d:45:9d:e1:0b:ea:8d:1e:31:3b:1a:a7:c0:5b:
4f:12:9f:64:34:23:e0:ed:e9:41:ce:98:10:04:4b:c5:37:5d:
c8:a3:43:cc:7c:bb:55:72:e4:b4:b0:1b:fe:17:69:71:7e:3e:
d1:99:4f:46:a6:6b:b7:af:6d:70:3a:0b:ed:4f:f1:93:60:2c:
bb:71:f1:54:3b:0a:6f:44:bc:19:b5:f5:9b:a2:c3:22:9a:3c:
5a:1b:8f:34:0b:45:02:10:06:65:d8:23:2d:4f:37:4b:07:8d:
1c:ec:92:03:55:9a:17:f6:68:91:4a:5e:af:66:cb:29:ca:41:
b7:08:d9:df:04:1d:5b:d2:3c:9a:f1:23:d9:ba:bd:29:12:7e:
c5:b4:73:3b:e2:1d:95:68:e4:aa:9c:7d:b7:1e:eb:a1:22:da:
26:d5:d5:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:26 2023 by rpki-client on console.sobornost.net