Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/cd2983-218c-457d-811b-5d42e1fa45b9/1/Xoj1WF5Cs8lF7dJWWihZHJz0nxw.roa
File: Xoj1WF5Cs8lF7dJWWihZHJz0nxw.roa (raw, json)
Hash identifier: i/PuIDUof/7IjTGgMM09Q/ratositDzk79dUjCcnMi0=
Subject key identifier: 5E:88:F5:58:5E:42:B3:C9:45:ED:D2:56:5A:28:59:1C:9C:F4:9F:1C
Certificate issuer: /CN=bb8321c05d501edb499190c0c4a3089d246c5b76
Certificate serial: 01E7D7
Authority key identifier: BB:83:21:C0:5D:50:1E:DB:49:91:90:C0:C4:A3:08:9D:24:6C:5B:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4MhwF1QHttJkZDAxKMInSRsW3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/cd2983-218c-457d-811b-5d42e1fa45b9/1/Xoj1WF5Cs8lF7dJWWihZHJz0nxw.roa
Signing time: Wed 22 Jun 2022 08:56:44 +0000
ROA not before: Wed 22 Jun 2022 08:56:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 37.44.215.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 124887 (0x1e7d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8321c05d501edb499190c0c4a3089d246c5b76
Validity
Not Before: Jun 22 08:56:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5e88f5585e42b3c945edd2565a28591c9cf49f1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:8b:0d:c1:35:2f:db:26:6c:bd:62:2e:6a:89:
2c:d4:75:d9:c6:b7:b2:f9:a3:50:1a:b3:38:e6:ca:
58:de:10:a4:ea:79:87:7c:ae:a5:86:89:91:7f:ce:
ca:16:00:1e:03:2e:b3:20:45:e6:b9:1b:c3:62:1e:
5e:56:57:49:c4:9e:c8:57:1b:67:91:c2:cc:65:6c:
8e:f6:fc:2a:fc:58:b6:f8:0d:89:6d:65:18:b9:4d:
73:72:64:9d:b7:8f:8d:b1:89:53:1a:f7:49:44:5a:
a6:0a:74:a8:2d:f5:2b:e3:17:fc:8d:b8:e1:d5:27:
13:b4:d8:c4:7f:e5:75:63:ae:7a:09:0a:f5:d7:74:
c9:cd:d4:3d:e1:19:e7:d4:ed:61:67:55:74:e6:a3:
a4:b3:86:da:db:3f:d4:0c:90:19:57:aa:1c:5d:57:
77:46:55:2b:07:94:7c:61:f4:df:c9:a4:df:25:02:
e4:34:30:8c:ab:57:4b:eb:20:7a:63:b2:73:09:52:
e9:64:42:d5:9a:77:9f:3a:eb:47:48:d5:a4:84:f9:
66:a6:ba:df:7c:2c:40:9f:75:64:dd:c2:05:d6:e7:
0d:18:db:6e:4a:aa:d2:15:21:c3:33:7f:f2:87:74:
e3:fd:10:60:19:73:09:02:f4:0f:29:27:3f:e4:de:
8f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:88:F5:58:5E:42:B3:C9:45:ED:D2:56:5A:28:59:1C:9C:F4:9F:1C
X509v3 Authority Key Identifier:
keyid:BB:83:21:C0:5D:50:1E:DB:49:91:90:C0:C4:A3:08:9D:24:6C:5B:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4MhwF1QHttJkZDAxKMInSRsW3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/cd2983-218c-457d-811b-5d42e1fa45b9/1/Xoj1WF5Cs8lF7dJWWihZHJz0nxw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/cd2983-218c-457d-811b-5d42e1fa45b9/1/u4MhwF1QHttJkZDAxKMInSRsW3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.44.215.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:38:ca:96:f9:fd:58:e3:3e:84:e8:12:94:a4:a3:e1:d0:12:
d0:4e:96:72:34:39:4d:f9:b6:1b:cc:bc:d2:e7:68:ad:ef:f5:
65:cf:89:ee:40:c9:9c:ea:d2:26:3e:77:9a:d5:5d:c1:79:62:
60:87:cf:5c:53:0a:06:e9:45:98:79:b8:31:49:92:b2:a6:25:
c2:f4:bd:d0:af:a4:b3:34:a3:88:6e:ab:87:88:d0:9c:5b:88:
79:e6:0f:46:c2:3f:80:44:0b:6a:49:0d:d8:26:2c:3d:7e:22:
31:84:d8:cd:37:4e:40:45:a3:fb:d7:2c:c2:97:06:13:54:86:
1c:46:3e:3d:d4:bd:68:33:c4:fa:de:5b:6a:03:8e:4d:67:dc:
08:12:f9:63:25:27:d1:0b:72:81:20:15:1b:8b:25:96:4c:b8:
12:09:22:f1:3e:66:6e:bf:2d:48:74:c0:8c:b8:c0:90:a2:c3:
0a:10:17:74:c7:eb:ef:14:78:88:16:c8:2a:f2:d4:2f:fa:99:
7a:78:2a:0b:b6:ed:26:18:cf:93:8a:cc:ac:7c:f8:bf:22:b0:
29:1e:b1:1e:39:19:cb:4c:a3:d6:f8:73:5f:ba:f4:2c:fa:b3:
28:4f:d6:18:ca:0c:40:01:6a:58:e1:c3:d0:17:05:bc:c3:c4:
68:12:8e:ab
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDAefXMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGJi
ODMyMWMwNWQ1MDFlZGI0OTkxOTBjMGM0YTMwODlkMjQ2YzViNzYwHhcNMjIwNjIy
MDg1NjQ0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg1ZTg4ZjU1ODVlNDJi
M2M5NDVlZGQyNTY1YTI4NTkxYzljZjQ5ZjFjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA4osNwTUv2yZsvWIuaoks1HXZxrey+aNQGrM45spY3hCk6nmH
fK6lhomRf87KFgAeAy6zIEXmuRvDYh5eVldJxJ7IVxtnkcLMZWyO9vwq/Fi2+A2J
bWUYuU1zcmSdt4+NsYlTGvdJRFqmCnSoLfUr4xf8jbjh1ScTtNjEf+V1Y656CQr1
13TJzdQ94Rnn1O1hZ1V05qOks4ba2z/UDJAZV6ocXVd3RlUrB5R8YfTfyaTfJQLk
NDCMq1dL6yB6Y7JzCVLpZELVmnefOutHSNWkhPlmprrffCxAn3Vk3cIF1ucNGNtu
SqrSFSHDM3/yh3Tj/RBgGXMJAvQPKSc/5N6PuwIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFF6I9VheQrPJRe3SVlooWRyc9J8cMB8GA1UdIwQYMBaAFLuDIcBdUB7bSZGQ
wMSjCJ0kbFt2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
dTRNaHdGMVFIdHRKa1pEQXhLTUluU1JzVzNZLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9lOC9jZDI5ODMtMjE4Yy00NTdkLTgxMWItNWQ0MmUxZmE0NWI5LzEv
WG9qMVdGNUNzOGxGN2RKV1dpaFpISnowbnh3LnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9j
ZDI5ODMtMjE4Yy00NTdkLTgxMWItNWQ0MmUxZmE0NWI5LzEvdTRNaHdGMVFIdHRK
a1pEQXhLTUluU1JzVzNZLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJSzXMA0GCSqGSIb3DQEBCwUAA4IB
AQB/OMqW+f1Y4z6E6BKUpKPh0BLQTpZyNDlN+bYbzLzS52it7/Vlz4nuQMmc6tIm
Pnea1V3BeWJgh89cUwoG6UWYebgxSZKypiXC9L3Qr6SzNKOIbquHiNCcW4h55g9G
wj+ARAtqSQ3YJiw9fiIxhNjNN05ARaP71yzClwYTVIYcRj491L1oM8T63ltqA45N
Z9wIEvljJSfRC3KBIBUbiyWWTLgSCSLxPmZuvy1IdMCMuMCQosMKEBd0x+vvFHiI
Fsgq8tQv+pl6eCoLtu0mGM+TisysfPi/IrApHrEeORnLTKPW+HNfuvQs+rMoT9YY
ygxAAWpY4cPQFwW8w8RoEo6r
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:33 2023 by rpki-client on console.sobornost.net