Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/_kGZjJ3aBEyA3-6c0HdtOFlch1Y.roa
File: _kGZjJ3aBEyA3-6c0HdtOFlch1Y.roa (raw, json)
Hash identifier: iwwV0Ew8WOJxN1/ks5CH2HQN1tBvUn0V2avPzttzOqY=
Subject key identifier: FE:41:99:8C:9D:DA:04:4C:80:DF:EE:9C:D0:77:6D:38:59:5C:87:56
Certificate issuer: /CN=359f0f5ff620e0db5311f64736909973ac60f6f3
Certificate serial: 37F0B8A2
Authority key identifier: 35:9F:0F:5F:F6:20:E0:DB:53:11:F6:47:36:90:99:73:AC:60:F6:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/_kGZjJ3aBEyA3-6c0HdtOFlch1Y.roa
Signing time: Sat 01 Jan 2022 06:01:03 +0000
ROA not before: Sat 01 Jan 2022 06:01:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204064
IP address blocks: 185.115.180.0/22 maxlen: 32
185.116.48.0/22 maxlen: 32
185.116.51.0/24 maxlen: 32
185.151.172.0/22 maxlen: 32
2a07:7a00::/29 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 938522786 (0x37f0b8a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359f0f5ff620e0db5311f64736909973ac60f6f3
Validity
Not Before: Jan 1 06:01:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fe41998c9dda044c80dfee9cd0776d38595c8756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:67:06:51:7a:42:05:5b:5b:36:b2:0c:e7:f4:
93:fa:ca:49:4c:06:98:e1:a1:d4:fb:4e:eb:89:4c:
59:02:87:0b:fc:10:96:fe:09:cc:a9:cb:4b:ef:f5:
87:c8:4b:26:95:3f:e0:bc:55:04:4b:07:54:f5:dc:
70:6d:35:86:38:39:51:72:71:04:43:3c:02:4d:85:
30:df:c2:64:58:c2:08:4c:8a:41:f5:4b:72:10:ca:
bb:6c:e6:46:2d:12:3b:f6:d2:b9:53:7f:19:63:09:
76:38:92:de:ca:c5:c9:72:0e:41:78:d3:14:2e:a6:
00:c5:a5:dc:c9:35:6d:12:8c:eb:66:08:b8:1d:1a:
f9:19:d7:2a:1d:67:a9:47:52:3a:dc:23:91:5d:38:
6f:46:09:80:c8:57:81:bc:dd:98:2b:84:64:e4:3e:
49:0a:4b:2e:be:ae:44:8f:e0:c7:28:d4:8d:95:37:
79:6d:3e:ca:62:cb:a2:bb:6b:1b:8b:37:73:9c:82:
48:32:2d:d4:69:f1:f9:c3:42:01:7d:fa:8a:c3:a1:
4a:a3:e3:d7:03:11:f4:65:42:a4:eb:85:d1:37:97:
c3:6d:0e:d5:d1:41:d3:61:85:6d:65:0b:36:ea:7a:
4e:ed:21:e4:d6:69:0f:e0:d3:f1:ac:ab:14:54:40:
39:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:41:99:8C:9D:DA:04:4C:80:DF:EE:9C:D0:77:6D:38:59:5C:87:56
X509v3 Authority Key Identifier:
keyid:35:9F:0F:5F:F6:20:E0:DB:53:11:F6:47:36:90:99:73:AC:60:F6:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/_kGZjJ3aBEyA3-6c0HdtOFlch1Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.115.180.0/22
185.116.48.0/22
185.151.172.0/22
IPv6:
2a07:7a00::/29
Signature Algorithm: sha256WithRSAEncryption
75:60:1b:f4:79:ac:2a:29:f9:8d:c4:dd:29:de:d6:0f:eb:f1:
da:77:d7:ca:65:f4:0d:de:66:f8:d8:92:2e:ac:2c:11:56:39:
6b:4c:f4:44:9a:5b:70:9b:17:41:6b:e1:8f:ac:ff:96:63:a6:
ec:2f:c6:7a:88:b1:eb:76:26:17:06:ee:ad:b6:dd:6e:ad:47:
9e:dc:11:0a:3a:34:79:3d:57:34:c4:fa:89:23:ba:98:f1:a9:
ce:8e:76:ee:eb:7e:0f:70:16:50:71:26:8b:45:28:da:7a:0d:
2f:b7:94:f3:bc:0c:2a:b3:6e:8a:14:84:51:d8:af:f2:bc:29:
1e:d4:56:5c:9b:1b:7b:e8:54:ca:23:ce:84:f3:95:4e:4a:c3:
e6:95:e2:68:88:67:57:e8:86:59:53:70:d7:e9:f5:d5:24:da:
88:a4:30:92:2d:98:13:fd:c3:b2:9c:ad:df:7f:64:2d:dc:46:
84:f6:c0:df:e5:bb:d7:78:ab:c3:cb:38:f6:31:09:d0:f1:10:
8e:9d:9a:e5:8e:fd:35:ca:55:fd:78:04:39:5e:b1:3d:da:07:
e4:dd:90:96:c1:e4:c6:bb:31:73:b6:08:ec:ff:22:94:71:20:
36:2b:68:0b:40:a5:20:dd:af:6b:e3:47:fd:59:8b:dc:e3:13:
fa:db:a6:4e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:25:32 2024 by rpki-client on console-ams.rpki-client.org