Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NpuFL5LSqO9V3lXltT8po0M5X5E.roa
File: NpuFL5LSqO9V3lXltT8po0M5X5E.roa (raw, json)
Hash identifier: qAxzrxxCMG4tOtkMv/LbkVzoNyIBZoa+bvmBcaGutCI=
Subject key identifier: 36:9B:85:2F:92:D2:A8:EF:55:DE:55:E5:B5:3F:29:A3:43:39:5F:91
Certificate issuer: /CN=359f0f5ff620e0db5311f64736909973ac60f6f3
Certificate serial: 018570B9826912C37C0A7CF90EC3E9748DC4
Authority key identifier: 35:9F:0F:5F:F6:20:E0:DB:53:11:F6:47:36:90:99:73:AC:60:F6:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NpuFL5LSqO9V3lXltT8po0M5X5E.roa
Signing time: Mon 02 Jan 2023 04:24:43 +0000
ROA not before: Mon 02 Jan 2023 04:24:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204064
IP address blocks: 185.115.180.0/22 maxlen: 32
185.116.48.0/22 maxlen: 32
185.116.51.0/24 maxlen: 32
185.151.172.0/22 maxlen: 32
2a07:7a00::/29 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:b9:82:69:12:c3:7c:0a:7c:f9:0e:c3:e9:74:8d:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359f0f5ff620e0db5311f64736909973ac60f6f3
Validity
Not Before: Jan 2 04:24:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=369b852f92d2a8ef55de55e5b53f29a343395f91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:40:0e:cb:6b:95:90:39:d6:cd:46:34:68:81:
30:d6:6c:45:bb:cb:f3:b4:ee:9e:2b:8e:20:fa:9f:
c9:95:d7:20:c0:e5:1c:66:f9:2b:25:d9:3e:37:14:
85:46:ba:2e:79:7a:1c:00:30:93:63:fb:57:2a:04:
28:01:ec:97:fc:bc:d0:91:eb:ae:7e:a9:99:82:5f:
7e:fa:10:0e:97:b7:9c:e5:49:39:11:7b:be:d7:05:
1c:34:b0:8c:02:67:70:0f:a6:de:ab:05:1a:a1:65:
16:b0:1a:11:1d:af:ab:20:ac:be:f8:ac:ce:1f:c4:
67:8f:38:20:37:ce:44:cb:b2:7c:61:b3:3f:4d:cf:
21:dc:e6:db:6d:19:40:d2:d4:b4:0e:ec:4a:7e:d1:
7f:d9:13:c9:41:18:60:cb:1f:86:0c:dc:0e:04:13:
a1:2b:0a:7e:d7:ef:52:ec:ce:9b:23:10:97:90:55:
4b:f8:7e:5d:c8:e4:47:19:35:2d:a3:c3:0c:7a:f6:
99:09:cb:85:6c:48:05:b8:8b:27:ea:3f:93:a9:8e:
a9:13:a0:28:f1:9e:fd:fb:ce:3b:02:ed:24:64:89:
8a:c5:97:cd:42:6b:0d:a1:c1:4c:f9:eb:ff:85:92:
f5:5b:b4:2b:69:e5:46:0c:d4:f2:dd:17:0b:d9:c1:
2d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:9B:85:2F:92:D2:A8:EF:55:DE:55:E5:B5:3F:29:A3:43:39:5F:91
X509v3 Authority Key Identifier:
keyid:35:9F:0F:5F:F6:20:E0:DB:53:11:F6:47:36:90:99:73:AC:60:F6:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NpuFL5LSqO9V3lXltT8po0M5X5E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.115.180.0/22
185.116.48.0/22
185.151.172.0/22
IPv6:
2a07:7a00::/29
Signature Algorithm: sha256WithRSAEncryption
c2:2c:7a:e1:a4:c1:b3:3e:7f:60:45:82:56:b7:86:24:4d:ad:
24:2b:76:5f:17:b8:ff:b0:96:26:79:dc:86:c1:83:2f:46:1f:
6f:02:d6:e7:96:5d:3e:52:cb:9b:5f:68:3e:77:9b:f6:20:27:
76:b4:a5:5d:1e:a7:60:12:f3:71:e3:05:5e:4d:eb:1c:ae:58:
e5:63:18:41:8f:e3:31:02:51:3e:df:8d:bf:d8:37:de:e5:52:
90:77:60:9c:4c:ee:1e:9a:30:56:55:1b:fc:72:c6:85:52:d7:
b8:f9:b0:4c:35:dd:3d:ed:ee:fb:6d:19:27:e4:f2:6b:a6:48:
b7:e0:d4:ca:ff:c7:ed:ed:c5:0f:e2:d0:6a:c9:82:51:bb:cc:
42:3f:56:bc:f4:d1:e2:ff:02:f7:2a:33:48:5a:9b:5c:eb:da:
81:94:8b:4a:e9:e6:c0:d7:08:9f:ff:db:5b:42:cf:38:e2:39:
d5:62:ab:ef:23:a8:be:67:f5:22:f0:07:43:9e:d7:ba:ad:6a:
e8:2d:0a:c1:bd:4f:fa:77:c1:34:51:91:48:89:46:4a:d0:32:
ae:f6:e5:76:56:0b:3f:5c:db:e9:a1:e7:aa:79:b5:41:f8:ed:
df:f4:9f:1d:67:8e:85:12:ab:8b:db:b4:5d:f2:a3:1f:10:3a:
eb:0e:89:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:32 2024 by rpki-client on console-fra.rpki-client.org