Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/47a9c9-d457-4579-b2b0-e5212574f9ec/1/vdxr_pateQwYhwfYcl-fYclFRls.roa
File: vdxr_pateQwYhwfYcl-fYclFRls.roa (raw, json)
Hash identifier: wpTi+4jE71m0FpF9U9AmympJV7dUiBYpd2UZF8lr9Po=
Subject key identifier: BD:DC:6B:FE:96:AD:79:0C:18:87:07:D8:72:5F:9F:61:C9:45:46:5B
Certificate issuer: /CN=add9207994ba9c7d91ea7e479fefd1b8099f62ce
Certificate serial: 01856D53D30A0B2BBACAFF1723286F7CFD78
Authority key identifier: AD:D9:20:79:94:BA:9C:7D:91:EA:7E:47:9F:EF:D1:B8:09:9F:62:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rdkgeZS6nH2R6n5Hn-_RuAmfYs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/47a9c9-d457-4579-b2b0-e5212574f9ec/1/vdxr_pateQwYhwfYcl-fYclFRls.roa
Signing time: Sun 01 Jan 2023 12:34:47 +0000
ROA not before: Sun 01 Jan 2023 12:34:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49717
IP address blocks: 109.94.124.0/23 maxlen: 23
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:53:d3:0a:0b:2b:ba:ca:ff:17:23:28:6f:7c:fd:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=add9207994ba9c7d91ea7e479fefd1b8099f62ce
Validity
Not Before: Jan 1 12:34:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bddc6bfe96ad790c188707d8725f9f61c945465b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:4a:ce:59:e5:85:d3:66:6b:b8:af:81:31:b3:
4c:fa:18:69:9a:dc:e1:45:29:ef:ad:f7:13:7e:d8:
31:dc:2b:01:18:40:99:ef:89:81:09:b0:29:52:80:
be:f7:d0:59:60:e2:9e:23:3b:b9:ee:c0:2f:b6:ca:
6f:14:b7:91:9f:da:43:8d:d6:5a:d2:4d:cc:d9:a3:
a3:e2:1f:68:de:77:f0:eb:da:25:9d:65:80:bd:c1:
32:f4:09:6b:4d:23:0c:7c:c3:8c:18:f5:d0:ad:df:
26:6f:5e:06:8d:3e:ff:5e:bb:1f:66:75:01:b9:62:
95:46:44:aa:cc:4e:2d:2c:2d:3c:96:4c:4f:10:8e:
99:20:5d:65:da:7d:7a:c2:74:a3:5a:76:56:01:3e:
4f:be:cb:00:84:55:14:9e:29:a4:56:6b:19:56:e8:
5b:00:2b:ea:9f:dc:18:7a:a9:c7:51:7a:8e:e3:61:
d4:13:25:1a:ff:bf:4f:d8:f9:4c:12:db:f8:e8:0a:
02:21:df:8f:ce:5d:af:2e:5d:82:84:f6:ff:8f:65:
33:a2:0f:3f:e0:b2:5c:5a:18:3c:0e:f4:a2:b3:e5:
a4:09:a8:aa:85:75:78:03:aa:f2:95:a2:3d:73:c0:
e7:83:7b:a9:23:01:ea:3a:bd:c4:e9:52:74:fc:f5:
b1:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:DC:6B:FE:96:AD:79:0C:18:87:07:D8:72:5F:9F:61:C9:45:46:5B
X509v3 Authority Key Identifier:
keyid:AD:D9:20:79:94:BA:9C:7D:91:EA:7E:47:9F:EF:D1:B8:09:9F:62:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rdkgeZS6nH2R6n5Hn-_RuAmfYs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/47a9c9-d457-4579-b2b0-e5212574f9ec/1/vdxr_pateQwYhwfYcl-fYclFRls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/47a9c9-d457-4579-b2b0-e5212574f9ec/1/rdkgeZS6nH2R6n5Hn-_RuAmfYs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.94.124.0/23
Signature Algorithm: sha256WithRSAEncryption
23:77:d3:40:e9:37:22:5d:50:9b:44:af:47:0a:64:af:81:4c:
66:43:b2:10:06:36:1d:6a:3a:48:0f:a8:02:ce:bd:37:8b:71:
88:dc:ff:58:52:92:d2:d4:fb:25:66:a9:5a:7b:f0:58:ab:72:
2f:b1:ae:f9:63:09:3d:7e:a6:83:45:86:76:55:e9:ae:88:8d:
88:2b:37:81:a5:53:b3:0a:71:4e:eb:73:82:d6:bf:3b:30:0b:
67:e2:a3:e0:b4:3b:27:7d:d6:c9:08:91:14:2d:72:3a:18:61:
a2:60:44:13:1d:5a:41:e9:b2:c9:6b:19:8a:f4:22:79:db:69:
1a:31:c1:db:04:05:4a:48:90:2b:a5:99:f8:71:da:58:23:e7:
ec:cb:5b:f5:b4:bb:67:c2:e8:b4:7f:60:28:07:40:23:92:10:
e4:b4:ed:ee:09:ed:db:b2:d7:c5:3e:99:cc:18:31:ca:cb:6c:
41:10:95:64:a2:36:99:88:b8:53:7d:06:d7:06:24:6f:d2:d1:
b9:dd:65:3d:88:36:33:61:f0:03:3f:64:c3:0b:b2:f8:93:4f:
c6:0e:f6:04:a3:db:39:fd:0a:ad:31:db:27:69:a2:f7:22:1c:
a8:16:9d:de:0c:ba:e5:fd:20:0b:7c:63:87:4c:13:3c:b3:8f:
eb:dc:b6:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:54 2023 by rpki-client on console.sobornost.net