Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/032686-0d24-4660-ae72-7391207eac33/1/nZYddbLLX_-EX4Uu_ThfwkbP8LU.roa
File: nZYddbLLX_-EX4Uu_ThfwkbP8LU.roa (raw, json)
Hash identifier: S+cW4h7prwf1NHWRVbk1QbpxObRgg9/SR/KSnlBlZeI=
Subject key identifier: 9D:96:1D:75:B2:CB:5F:FF:84:5F:85:2E:FD:38:5F:C2:46:CF:F0:B5
Certificate issuer: /CN=cfea8dbf21588b5f0c96471cea33b54ed10917e8
Certificate serial: 018936042BC98B8B6FC37774AAC1FD9728B9
Authority key identifier: CF:EA:8D:BF:21:58:8B:5F:0C:96:47:1C:EA:33:B5:4E:D1:09:17:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z-qNvyFYi18Mlkcc6jO1TtEJF-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/032686-0d24-4660-ae72-7391207eac33/1/nZYddbLLX_-EX4Uu_ThfwkbP8LU.roa
Signing time: Sat 08 Jul 2023 14:59:50 +0000
ROA not before: Sat 08 Jul 2023 14:59:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201272
IP address blocks: 185.80.42.0/24 maxlen: 24
185.80.41.0/24 maxlen: 24
185.80.40.0/24 maxlen: 24
185.80.40.0/23 maxlen: 23
185.80.43.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:36:04:2b:c9:8b:8b:6f:c3:77:74:aa:c1:fd:97:28:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfea8dbf21588b5f0c96471cea33b54ed10917e8
Validity
Not Before: Jul 8 14:59:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9d961d75b2cb5fff845f852efd385fc246cff0b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:11:90:73:e8:b0:ab:5b:fc:e3:ac:d8:18:ed:
bd:d5:95:50:73:31:30:de:e9:e1:8d:10:c5:1e:f9:
bd:3c:20:2c:8c:9b:ab:2a:ec:9b:c0:41:27:96:72:
52:b3:67:45:3b:6a:f4:3e:b0:f5:7f:cc:47:cb:51:
02:52:df:3c:5f:19:26:be:b9:e8:3e:6f:77:0b:b7:
f6:00:ec:3c:68:f1:d4:c2:2a:07:0a:03:c2:15:ae:
41:10:d2:4c:12:75:f4:06:11:d2:cc:52:ce:de:50:
4e:34:99:41:c4:cc:7a:d5:2d:e3:16:01:21:55:51:
83:84:22:35:8f:75:5c:b1:4c:15:d5:0a:95:c8:8c:
cc:a5:5a:e5:42:fa:9e:fa:39:42:77:e8:27:9e:70:
0b:5b:6b:e4:cb:a1:2e:cd:1f:e3:aa:94:3a:2b:87:
3f:08:23:2a:16:05:37:2e:45:e4:77:a9:9b:d6:cc:
03:d2:6c:29:85:44:57:4d:c7:3e:ab:95:76:1f:ee:
16:f4:0f:aa:ca:b8:ea:62:05:61:15:98:32:6e:64:
01:ad:39:4b:79:0a:eb:fb:f6:e1:20:66:d0:71:6b:
bc:70:ca:85:4c:a3:73:bd:1c:04:c7:53:a4:91:01:
25:86:4c:ad:9c:54:2a:04:78:c5:f9:9c:fb:cc:04:
db:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:96:1D:75:B2:CB:5F:FF:84:5F:85:2E:FD:38:5F:C2:46:CF:F0:B5
X509v3 Authority Key Identifier:
keyid:CF:EA:8D:BF:21:58:8B:5F:0C:96:47:1C:EA:33:B5:4E:D1:09:17:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z-qNvyFYi18Mlkcc6jO1TtEJF-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/032686-0d24-4660-ae72-7391207eac33/1/nZYddbLLX_-EX4Uu_ThfwkbP8LU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/032686-0d24-4660-ae72-7391207eac33/1/z-qNvyFYi18Mlkcc6jO1TtEJF-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.80.40.0/22
Signature Algorithm: sha256WithRSAEncryption
4f:47:70:a6:77:0b:1b:82:d3:61:00:54:a9:09:cf:f6:b7:88:
4f:c2:db:28:4b:16:93:82:bf:5b:cb:50:77:0c:5e:bf:cd:16:
a7:de:80:6c:21:39:16:a6:87:66:17:50:c7:93:e6:a3:40:65:
e1:24:a4:ea:bc:af:a1:2a:13:70:05:42:74:05:83:0a:0f:a7:
8f:bd:ab:7b:82:6e:69:3f:69:77:9f:0a:c1:5a:00:f7:53:52:
0a:77:bf:18:83:98:42:06:52:85:8c:d0:d6:b3:9c:ac:7b:9c:
2e:5b:4e:3a:90:cc:16:ed:1e:43:69:38:b2:65:da:d5:14:0b:
42:08:93:73:23:8f:a0:69:37:e5:bf:99:e4:2a:52:07:e8:bf:
52:1d:77:5f:fa:c7:b8:ab:55:69:a2:30:08:ed:49:b3:87:f5:
d9:cf:6f:0f:5d:c8:65:be:63:dc:db:90:31:ee:a5:d3:e1:84:
bd:64:89:e8:68:e8:20:15:f8:47:73:42:63:01:00:78:44:37:
16:46:15:cd:6b:b0:ee:6f:fc:25:2a:f7:4c:fc:91:9d:5a:41:
79:64:ae:5f:71:06:67:4e:fb:b5:c3:c2:91:2e:f3:88:e1:f2:
85:b6:b1:2c:b4:2f:5f:5e:18:2f:92:41:b0:32:7e:40:24:47:
78:30:37:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:08 2024 by rpki-client on console-ams.rpki-client.org