Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/bXSCrnVFJbQr23FTxKz6h9uqg-A.roa
File: bXSCrnVFJbQr23FTxKz6h9uqg-A.roa (raw, json)
Hash identifier: GvR5FnD3sPMA4QY5lwk5ToNCktmdMVe7BoOMVcoobSg=
Subject key identifier: 6D:74:82:AE:75:45:25:B4:2B:DB:71:53:C4:AC:FA:87:DB:AA:83:E0
Certificate issuer: /CN=a0e381b6e76cb9520e8d8f56776eca0fe176cc40
Certificate serial: 0B62DC93
Authority key identifier: A0:E3:81:B6:E7:6C:B9:52:0E:8D:8F:56:77:6E:CA:0F:E1:76:CC:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oOOBtudsuVIOjY9Wd27KD-F2zEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/bXSCrnVFJbQr23FTxKz6h9uqg-A.roa
Signing time: Sat 01 Jan 2022 13:58:33 +0000
ROA not before: Sat 01 Jan 2022 13:58:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204203
IP address blocks: 185.110.247.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 191028371 (0xb62dc93)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0e381b6e76cb9520e8d8f56776eca0fe176cc40
Validity
Not Before: Jan 1 13:58:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6d7482ae754525b42bdb7153c4acfa87dbaa83e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:40:9f:1c:cd:5b:ca:0e:a9:84:3e:c1:51:f9:
ec:91:a2:7f:fe:37:ef:82:43:49:7c:d5:15:6e:df:
0e:d0:c9:a2:d0:56:6d:4e:dd:bd:a7:5c:cd:18:2b:
a6:18:cb:30:c6:72:3b:19:43:8e:30:20:5b:f7:a0:
13:08:5a:3d:e3:cf:04:24:82:c8:bf:67:fb:8a:a9:
e8:de:e8:d0:7a:b7:25:7f:c3:0f:d8:80:58:7c:50:
eb:61:9a:73:51:5c:de:4a:1d:1a:45:15:95:93:da:
f2:5c:47:c5:a1:67:b4:2a:fa:b0:ca:44:53:57:4c:
b7:c3:ec:9c:e0:18:0a:94:bf:0a:22:34:75:44:7d:
17:d1:12:82:53:52:68:41:83:53:85:4e:f5:7a:71:
53:7a:7b:31:c0:74:ef:bd:9e:87:a3:00:1d:01:fb:
7f:b3:c4:94:ed:81:02:cf:f1:bc:6d:fb:ca:ce:9a:
9d:35:c0:3c:db:0a:9c:04:6a:52:65:c8:f2:71:1a:
56:24:81:f0:fc:99:76:df:d5:bd:2f:f6:ad:74:a1:
3b:fc:c5:31:7b:48:45:e9:6a:7c:33:e1:83:1e:1e:
1d:ea:6f:99:11:d6:4d:7a:a0:70:02:2f:01:80:48:
a0:d4:20:f1:59:6b:78:b0:01:4a:db:c9:8f:3d:92:
ca:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:74:82:AE:75:45:25:B4:2B:DB:71:53:C4:AC:FA:87:DB:AA:83:E0
X509v3 Authority Key Identifier:
keyid:A0:E3:81:B6:E7:6C:B9:52:0E:8D:8F:56:77:6E:CA:0F:E1:76:CC:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oOOBtudsuVIOjY9Wd27KD-F2zEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/bXSCrnVFJbQr23FTxKz6h9uqg-A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/oOOBtudsuVIOjY9Wd27KD-F2zEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.110.247.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:50:22:91:d7:3e:d1:06:f7:06:9c:2c:1f:99:7a:7b:4a:67:
a8:38:ba:ba:93:3b:bb:5f:37:2b:ed:cb:5b:77:56:e2:be:9b:
59:c3:da:95:71:c7:56:a3:3b:a1:17:02:36:14:22:a7:3f:f7:
8b:d1:9e:47:81:9c:aa:56:20:03:22:41:b0:25:da:f8:5c:b8:
38:e3:ce:82:4e:ec:1c:c4:e8:be:25:85:a0:7f:64:50:58:dd:
26:4d:cf:be:bb:0a:e9:73:88:1f:d6:fd:d4:20:64:6d:7b:b3:
9a:80:80:0d:f2:75:2b:d3:75:62:48:ca:45:91:47:ff:68:76:
a9:3d:5f:8c:20:62:af:01:43:5f:9f:b5:0e:88:e2:a1:24:e4:
a2:a7:ba:86:aa:65:86:c7:97:8c:27:0a:d7:9b:71:61:71:46:
dd:fd:35:7a:42:3a:d2:d6:73:c9:6c:6f:dd:07:97:7c:eb:e6:
65:86:6b:7c:68:81:41:fa:34:33:d6:fa:a1:d9:62:4e:53:55:
66:40:73:f4:fd:a6:e2:c9:55:4b:ca:9d:97:c4:12:fb:c1:38:
83:c7:b3:df:f9:da:ed:7f:c6:9b:ae:74:d4:e0:10:79:29:65:
9c:38:e2:1d:dd:f2:bd:0e:b3:52:42:28:1a:94:4e:10:61:ff:
3c:08:0e:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:46 2024 by rpki-client on console-ams.rpki-client.org