Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/w3_mAO-fXsAW9kloIq1seGqNvZU.roa
File: w3_mAO-fXsAW9kloIq1seGqNvZU.roa (raw, json)
Hash identifier: Rpi0H/R/hS8qS6JcBMzFhDsH6dP1ezGM2Cwr3cvaWSQ=
Subject key identifier: C3:7F:E6:00:EF:9F:5E:C0:16:F6:49:68:22:AD:6C:78:6A:8D:BD:95
Certificate issuer: /CN=3cd37ec23719b2f142f46e6f3317664034adf598
Certificate serial: 018CC6B92F9BA66FDC429D29FBB14990FA73
Authority key identifier: 3C:D3:7E:C2:37:19:B2:F1:42:F4:6E:6F:33:17:66:40:34:AD:F5:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/w3_mAO-fXsAW9kloIq1seGqNvZU.roa
Signing time: Mon 01 Jan 2024 20:31:14 +0000
ROA not before: Mon 01 Jan 2024 20:31:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59441
IP address blocks: 185.83.181.0/24 maxlen: 24
185.83.183.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:2f:9b:a6:6f:dc:42:9d:29:fb:b1:49:90:fa:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cd37ec23719b2f142f46e6f3317664034adf598
Validity
Not Before: Jan 1 20:31:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c37fe600ef9f5ec016f6496822ad6c786a8dbd95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:8f:99:08:d2:0e:76:b9:1d:9a:b3:a9:37:2d:
a9:a9:0a:87:a1:88:78:5f:cb:aa:0b:a1:8c:7e:1c:
e7:b7:85:e4:8a:31:16:1d:ac:37:7a:3c:10:0a:88:
fe:21:1d:f6:f1:90:3f:b9:ee:50:b2:73:ba:e1:dd:
8a:84:61:88:39:dc:16:25:0d:b3:4c:6f:03:15:43:
61:eb:82:c1:56:45:77:92:71:4b:fa:86:34:06:6b:
c2:e7:2d:3a:5b:e4:0a:65:ec:73:7c:dd:1a:52:ff:
0e:17:88:db:e5:2f:31:78:ed:e8:57:90:b1:79:05:
44:46:59:e2:49:9e:0f:46:12:8f:04:81:86:b6:f7:
2a:9c:cc:05:d5:ac:7e:54:bf:1b:4d:90:b9:39:62:
db:66:be:c4:a9:83:6d:16:5e:26:5b:39:2b:57:6c:
45:ef:b0:d8:05:82:9c:86:8d:79:26:38:64:fc:26:
6d:40:17:0b:0f:06:e6:c7:c1:1b:13:d4:d4:56:dd:
5d:3f:68:93:e8:46:60:89:8b:5a:d4:ad:74:18:04:
06:49:81:b5:c2:bd:bd:02:62:6a:ba:7d:e5:b5:b7:
7d:ab:c4:68:4d:d8:58:96:b8:87:08:95:c1:45:43:
b1:d0:e4:07:cb:3f:9b:ab:2f:ed:19:e1:5b:ed:7c:
00:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:7F:E6:00:EF:9F:5E:C0:16:F6:49:68:22:AD:6C:78:6A:8D:BD:95
X509v3 Authority Key Identifier:
keyid:3C:D3:7E:C2:37:19:B2:F1:42:F4:6E:6F:33:17:66:40:34:AD:F5:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/w3_mAO-fXsAW9kloIq1seGqNvZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.83.181.0/24
185.83.183.0/24
Signature Algorithm: sha256WithRSAEncryption
47:c4:b3:69:a0:02:e7:a7:0d:01:c2:43:8a:d0:e4:58:33:ea:
98:6a:56:3f:07:b3:95:0f:ba:dc:80:08:18:6c:c6:68:1b:72:
86:b2:04:90:ef:7a:05:79:06:c0:01:19:ac:75:88:c5:88:0e:
c3:7b:3c:44:b4:43:f4:25:08:8b:3c:b6:1b:52:d0:59:20:4c:
87:28:54:3e:c7:ab:8a:5d:16:08:a8:0d:72:12:55:70:28:80:
2a:88:b5:71:73:52:df:0d:8e:f8:0f:e7:f8:39:40:3d:f9:8b:
58:18:79:af:a1:fc:e9:53:a1:cd:df:e6:24:58:30:cb:af:a7:
52:bb:35:c7:2c:fc:38:75:ba:9f:fa:37:43:0a:6f:ff:0d:2d:
ce:c7:ba:f4:44:a8:bf:44:fc:cc:e4:31:ff:74:a8:ba:36:35:
bb:3a:d4:61:d9:d6:43:7e:29:a1:05:d4:18:c5:74:aa:ec:c4:
dd:c6:5a:4c:8f:26:8e:04:b7:f9:4c:3f:c6:0c:6c:09:55:4f:
0b:2a:26:c9:e8:06:ab:4f:7f:1e:f0:09:98:d8:66:43:af:df:
b4:f0:d6:f0:62:14:56:ef:f8:c6:61:d1:39:ba:09:fa:30:c9:
2a:b4:b0:9c:09:71:7e:e4:3c:d7:6d:de:94:e2:bc:40:94:73:
38:7f:37:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:15 2024 by rpki-client on console-fra.rpki-client.org