Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/ffZv3Lcbv_U1smEUo7kcRzVIvMA.roa
File: ffZv3Lcbv_U1smEUo7kcRzVIvMA.roa (raw, json)
Hash identifier: XLbvF+/7dPfkMSx2ARbG3jya7cjlxf396HP0YJykqp8=
Subject key identifier: 7D:F6:6F:DC:B7:1B:BF:F5:35:B2:61:14:A3:B9:1C:47:35:48:BC:C0
Certificate issuer: /CN=cfcd73f82c260da87386dcf7be26d5c5445526fa
Certificate serial: 018CF55029CD334186258A2A551F5BEEF627
Authority key identifier: CF:CD:73:F8:2C:26:0D:A8:73:86:DC:F7:BE:26:D5:C5:44:55:26:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z81z-CwmDahzhtz3vibVxURVJvo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/ffZv3Lcbv_U1smEUo7kcRzVIvMA.roa
Signing time: Wed 10 Jan 2024 21:38:40 +0000
ROA not before: Wed 10 Jan 2024 21:38:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50923
IP address blocks: 85.158.186.0/24 maxlen: 24
85.158.185.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f5:50:29:cd:33:41:86:25:8a:2a:55:1f:5b:ee:f6:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfcd73f82c260da87386dcf7be26d5c5445526fa
Validity
Not Before: Jan 10 21:38:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7df66fdcb71bbff535b26114a3b91c473548bcc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:a2:75:75:1e:ab:8c:a0:5c:ed:04:6d:90:a7:
5d:bd:1e:8b:2c:d0:d9:4b:73:9d:f3:03:e1:c6:86:
e1:e7:89:8a:ef:de:34:a6:5c:8a:c9:f5:41:3e:a5:
04:bc:9f:c9:bd:50:20:22:22:81:94:3d:08:fc:a8:
80:65:5b:bb:02:1e:71:a0:57:40:88:52:6a:0d:4b:
15:5f:df:cb:1e:9c:bc:09:89:b0:f5:d3:62:76:5e:
e6:66:b8:c2:e8:a6:be:b5:1e:d6:eb:c0:c2:16:35:
09:16:0d:a4:7d:5c:3a:3e:88:8c:19:ef:90:cd:85:
a2:aa:78:fe:0d:d7:30:a1:2d:1d:2c:e1:39:4c:bf:
ed:a4:55:f4:87:e1:eb:39:ab:b7:ff:81:44:88:eb:
3c:55:6e:8d:dc:2d:6c:46:97:a1:4e:fc:f8:8c:08:
0b:4c:59:f8:e2:aa:bb:46:8b:ed:53:e3:f7:88:51:
07:40:9b:33:26:9c:b5:ed:a1:4d:4c:dc:cb:52:21:
fc:f6:cd:7e:a0:18:1c:30:44:94:bf:f7:c2:1d:58:
95:2d:7b:7c:a4:32:27:3b:1e:06:e0:62:da:80:30:
f6:9e:2a:5b:b2:a2:38:58:66:de:c1:8a:d9:bb:2a:
09:5c:c1:5a:a9:e2:88:c9:9d:cb:27:aa:d6:f6:fb:
f3:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:F6:6F:DC:B7:1B:BF:F5:35:B2:61:14:A3:B9:1C:47:35:48:BC:C0
X509v3 Authority Key Identifier:
keyid:CF:CD:73:F8:2C:26:0D:A8:73:86:DC:F7:BE:26:D5:C5:44:55:26:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z81z-CwmDahzhtz3vibVxURVJvo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/ffZv3Lcbv_U1smEUo7kcRzVIvMA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.158.185.0-85.158.186.255
Signature Algorithm: sha256WithRSAEncryption
9f:02:61:32:f1:63:6c:29:04:67:35:38:7e:96:fd:83:09:13:
ac:78:e7:17:0d:0f:4d:e6:37:94:11:7a:ab:48:28:15:1e:c5:
8a:47:ca:9c:a4:e3:5d:fe:79:ed:53:14:b3:2d:b0:4c:8c:48:
c8:10:e3:34:d6:6e:3b:1c:ef:9a:0a:8a:0b:60:0a:03:7c:5c:
6a:5a:ac:9a:ed:c1:cd:1a:9f:81:b0:d0:85:71:e0:58:7b:b3:
b2:79:51:26:ad:d4:8a:5e:6a:40:81:24:9e:e5:e8:b5:3c:67:
b5:99:b7:82:58:66:62:07:95:7a:65:0e:61:98:48:06:f9:fe:
65:06:26:f6:69:3f:cc:94:5f:4b:b1:96:82:2e:cd:e7:73:e9:
7b:ab:32:eb:58:f7:9b:91:bd:9c:07:d0:68:b6:82:86:5a:67:
a8:1b:25:2d:7e:63:9b:26:05:53:4c:fd:1c:f7:e9:e9:b0:a3:
8a:12:37:2a:d5:87:55:3a:f2:7b:31:c5:d1:5d:2b:7a:cf:5d:
6e:d1:86:6d:f6:85:52:80:6b:51:c4:3e:b6:8b:f9:7d:f0:90:
59:e4:03:e9:6e:ab:7f:5c:52:36:8f:d9:6f:51:c1:18:58:f1:
c7:21:52:58:02:65:64:7f:4e:34:08:5a:48:54:e1:ca:29:8e:
5b:6b:70:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:36 2024 by rpki-client on console-fra.rpki-client.org