Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/ru-XJuX9EsbHbB9arSUMh3a8-tM.roa
File: ru-XJuX9EsbHbB9arSUMh3a8-tM.roa (raw, json)
Hash identifier: hKivr90RLU6xv8vgxOL5bLbcVZp+ik/zf90U+FsczYw=
Subject key identifier: AE:EF:97:26:E5:FD:12:C6:C7:6C:1F:5A:AD:25:0C:87:76:BC:FA:D3
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 018C5E6D1661F8321E30B335C3527E54830E
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/ru-XJuX9EsbHbB9arSUMh3a8-tM.roa
Signing time: Tue 12 Dec 2023 14:27:36 +0000
ROA not before: Tue 12 Dec 2023 14:27:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 109.111.32.0/20 maxlen: 24
176.221.16.0/21 maxlen: 21
95.82.32.0/21 maxlen: 24
176.221.24.0/21 maxlen: 21
176.221.28.0/22 maxlen: 24
37.128.248.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:5e:6d:16:61:f8:32:1e:30:b3:35:c3:52:7e:54:83:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Dec 12 14:27:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aeef9726e5fd12c6c76c1f5aad250c8776bcfad3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:61:1b:c1:74:3b:52:7c:bb:42:47:87:2c:28:
55:5c:da:1e:da:08:be:63:59:49:11:c1:79:5f:97:
85:f5:21:68:59:9a:c9:3d:7a:a5:d0:d9:9b:e3:04:
75:b9:c2:42:95:03:15:e3:45:ed:13:70:e2:61:d7:
08:4f:ad:8b:49:43:21:d5:a6:05:00:de:b1:23:b8:
e9:9a:5f:b5:31:3b:da:fa:8a:90:9b:62:be:76:b5:
a9:29:40:49:e1:ca:18:a3:73:55:ad:44:a9:35:c4:
54:50:86:f6:29:f6:1c:fc:c8:8c:ee:07:51:e5:53:
53:9c:93:73:79:89:92:29:d7:cc:d8:9b:b1:42:e6:
ed:aa:d1:28:2a:07:1c:6c:64:dc:9b:ad:71:16:26:
c1:23:81:e0:ff:b3:7c:40:1c:01:80:31:ae:73:3b:
02:27:ae:4b:c7:47:fb:74:d5:f9:f6:f6:34:c8:b2:
ca:66:02:93:f1:84:ea:80:f9:03:29:37:1a:ce:c3:
22:80:65:a1:08:67:7a:33:dd:fa:73:ef:77:b2:df:
1a:62:91:01:f7:d8:5d:76:87:95:d3:7d:ce:38:54:
30:2f:f8:ba:b1:5f:4b:c9:9a:35:98:37:27:41:a7:
d2:6f:4c:9b:3b:ea:0a:ac:7c:61:b8:33:41:ed:4e:
81:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:EF:97:26:E5:FD:12:C6:C7:6C:1F:5A:AD:25:0C:87:76:BC:FA:D3
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/ru-XJuX9EsbHbB9arSUMh3a8-tM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.128.248.0/22
95.82.32.0/21
109.111.32.0/20
176.221.16.0/20
Signature Algorithm: sha256WithRSAEncryption
9d:04:25:ad:77:7d:cd:a2:2b:89:18:ac:69:6d:06:39:fa:3a:
1d:b2:9f:41:05:e8:f8:48:f3:cc:9f:87:41:87:c7:46:31:ff:
f2:3a:19:83:65:42:ef:3c:4b:c1:7d:7e:4a:44:3f:8c:22:c3:
8a:33:79:32:01:59:2c:9b:16:be:07:f0:69:61:a8:74:7a:cb:
16:3f:c8:76:91:1d:8e:96:34:dc:3d:b0:7b:0c:19:4f:a6:cf:
67:04:c8:31:ab:ec:b4:aa:09:53:db:a2:c1:e4:9f:4d:72:a3:
0e:45:38:3c:7d:3c:f1:c6:9e:64:df:6d:5b:d6:da:ed:5b:15:
13:16:e8:3a:d4:36:a5:64:f8:da:ca:43:5f:d2:00:cd:01:da:
e6:0d:27:7a:e6:3b:83:0d:50:84:96:8f:26:e8:e8:79:1a:88:
a8:57:e3:00:dc:3f:30:9b:6c:d9:26:fb:1c:fb:07:b6:40:44:
30:c9:2e:a7:59:3f:4a:c6:34:bd:2d:4e:e5:39:8c:12:02:62:
dd:44:61:2e:b7:39:97:17:3c:c0:ab:8b:88:7c:30:64:93:09:
0c:bf:f2:c0:41:df:3e:b3:6f:92:57:dc:84:4e:9f:38:43:de:
9d:d4:1c:30:77:47:bb:70:69:25:88:e4:02:2d:e6:ed:85:f9:
2e:f2:14:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:28:51 2025 by rpki-client