Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/dcfa2a-76f7-4443-a495-6bb30a8730ed/1/bq2ABZCIrXOu6v_CYWfhWsomupw.roa
File: bq2ABZCIrXOu6v_CYWfhWsomupw.roa (raw, json)
Hash identifier: zJWIfS2zkW24UecbSgL6LFWBxANl75WEVcAW7o+WbK8=
Subject key identifier: 6E:AD:80:05:90:88:AD:73:AE:EA:FF:C2:61:67:E1:5A:CA:26:BA:9C
Certificate issuer: /CN=3556e7fb5772f979edd5e5c5aa63eb2b9c0ddc8e
Certificate serial: 0188AA57AC334A25C74CA35C356A463B0BDF
Authority key identifier: 35:56:E7:FB:57:72:F9:79:ED:D5:E5:C5:AA:63:EB:2B:9C:0D:DC:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NVbn-1dy-Xnt1eXFqmPrK5wN3I4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/dcfa2a-76f7-4443-a495-6bb30a8730ed/1/bq2ABZCIrXOu6v_CYWfhWsomupw.roa
Signing time: Sun 11 Jun 2023 12:04:12 +0000
ROA not before: Sun 11 Jun 2023 12:04:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61135
IP address blocks: 185.1.202.0/24 maxlen: 24
46.31.76.0/24 maxlen: 24
185.73.203.0/24 maxlen: 24
185.73.201.0/24 maxlen: 24
185.73.200.0/24 maxlen: 24
185.73.202.0/24 maxlen: 32
185.17.112.0/24 maxlen: 24
185.17.113.0/24 maxlen: 32
185.17.115.0/24 maxlen: 24
185.17.114.0/24 maxlen: 24
2a05:4640::/29 maxlen: 48
2a04:7c0:1::/48 maxlen: 48
2a04:7c0::/29 maxlen: 48
2a04:7c0::/33 maxlen: 48
2a04:7c0:2::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:aa:57:ac:33:4a:25:c7:4c:a3:5c:35:6a:46:3b:0b:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3556e7fb5772f979edd5e5c5aa63eb2b9c0ddc8e
Validity
Not Before: Jun 11 12:04:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6ead80059088ad73aeeaffc26167e15aca26ba9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f9:3d:ca:81:dd:3b:f3:55:a9:e6:0f:74:ad:
53:80:f6:24:dc:30:3d:86:61:ea:dd:fb:ba:f7:b3:
d6:ba:51:54:6e:a3:d8:88:ed:dd:36:60:71:44:23:
8b:1f:92:a7:45:43:43:d4:4b:4a:02:5f:37:92:0d:
62:8b:af:ef:15:ac:e8:b2:65:d9:2e:8c:df:23:cd:
42:9b:a8:7a:88:96:9e:6a:c9:8b:a9:33:70:c8:2d:
1a:77:c2:52:db:cb:8f:ef:74:8d:31:ea:8a:a7:f6:
1a:1a:56:76:a5:3c:ae:7c:23:73:c0:4e:b0:9a:54:
e3:3c:37:0b:ef:41:de:83:51:db:21:f8:45:c9:f3:
15:bd:18:33:22:37:55:e9:86:31:a9:63:07:13:d4:
d1:f6:ec:15:45:41:2f:05:4a:d5:bc:4b:6c:58:3b:
30:70:d7:53:59:e0:08:59:20:2a:0c:22:43:71:07:
f8:11:44:09:06:81:a3:70:94:2b:f7:e7:1e:66:73:
df:cc:60:ab:43:62:d8:03:0f:bc:4d:2b:96:e6:eb:
e4:8c:be:a4:12:1a:90:a5:0f:f1:08:4a:3b:f1:94:
71:b1:79:2f:28:da:75:05:4a:e1:4c:46:6d:6d:9c:
c0:fe:77:d6:ac:6e:a7:c7:a9:72:73:00:f6:5d:34:
5f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:AD:80:05:90:88:AD:73:AE:EA:FF:C2:61:67:E1:5A:CA:26:BA:9C
X509v3 Authority Key Identifier:
keyid:35:56:E7:FB:57:72:F9:79:ED:D5:E5:C5:AA:63:EB:2B:9C:0D:DC:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NVbn-1dy-Xnt1eXFqmPrK5wN3I4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/dcfa2a-76f7-4443-a495-6bb30a8730ed/1/bq2ABZCIrXOu6v_CYWfhWsomupw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/dcfa2a-76f7-4443-a495-6bb30a8730ed/1/NVbn-1dy-Xnt1eXFqmPrK5wN3I4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.31.76.0/24
185.1.202.0/24
185.17.112.0/22
185.73.200.0/22
IPv6:
2a04:7c0::/29
2a05:4640::/29
Signature Algorithm: sha256WithRSAEncryption
33:74:84:c7:47:a8:a9:25:b8:ac:46:fc:84:f3:a9:c4:8f:74:
a1:30:f5:b2:9c:32:ce:82:53:58:1e:d2:94:32:a8:b5:fd:42:
04:95:40:44:dd:6d:98:33:4d:8a:fc:e6:24:2b:6f:ee:79:a2:
fc:3d:f7:07:58:8b:6e:54:03:47:82:3c:f3:74:a6:2f:08:15:
52:e9:79:71:db:6d:8f:4e:b9:e4:27:fd:0d:ff:ac:66:9c:db:
80:ba:0c:a5:61:e4:be:bf:0c:84:37:dd:28:5f:0e:11:b8:73:
80:8a:7d:02:09:34:a7:93:aa:72:5f:e5:e5:86:da:df:10:e9:
9c:61:79:05:a3:2e:9d:7d:d8:21:06:bd:f5:cf:00:91:1d:dd:
33:2f:01:38:a4:5b:2a:a7:d0:47:bf:d2:25:d5:48:70:c6:93:
ec:bd:29:db:da:b8:6c:3f:26:e9:c5:a2:4c:b4:79:84:67:38:
c9:6b:f5:77:7e:9c:a2:97:f2:fd:fd:e1:19:0c:c2:21:b0:97:
e5:72:b9:74:a9:32:70:67:91:ad:37:bc:1a:7f:23:bf:23:81:
bf:c4:3c:de:9a:15:b2:65:da:f0:49:82:be:86:c5:6b:55:73:
90:14:37:66:e2:a8:05:42:b3:c5:dc:d5:cf:e6:98:84:e8:de:
63:42:d4:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:05 2024 by rpki-client on console-fra.rpki-client.org