Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/4G7H0d9VPlv37WE2S2vE89IKqQY.roa
File: 4G7H0d9VPlv37WE2S2vE89IKqQY.roa (raw, json)
Hash identifier: 2pU28e8IvLUazUGbgzO74ezJagRCNxMmv792s2zAw+E=
Subject key identifier: E0:6E:C7:D1:DF:55:3E:5B:F7:ED:61:36:4B:6B:C4:F3:D2:0A:A9:06
Certificate issuer: /CN=a849204ca4f0eb4e56e08e099fe3785ce06ffeaa
Certificate serial: 018A6A186674957FB718BC05D75A7AC54739
Authority key identifier: A8:49:20:4C:A4:F0:EB:4E:56:E0:8E:09:9F:E3:78:5C:E0:6F:FE:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qEkgTKTw605W4I4Jn-N4XOBv_qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/4G7H0d9VPlv37WE2S2vE89IKqQY.roa
Signing time: Wed 06 Sep 2023 10:44:58 +0000
ROA not before: Wed 06 Sep 2023 10:44:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201453
IP address blocks: 185.230.145.0/24 maxlen: 24
185.230.144.0/22 maxlen: 22
185.230.144.0/24 maxlen: 24
185.160.231.0/24 maxlen: 24
185.160.230.0/24 maxlen: 24
185.160.229.0/24 maxlen: 24
185.160.228.0/24 maxlen: 24
185.160.228.0/22 maxlen: 22
185.232.132.0/22 maxlen: 22
185.232.135.0/24 maxlen: 24
185.232.134.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:6a:18:66:74:95:7f:b7:18:bc:05:d7:5a:7a:c5:47:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a849204ca4f0eb4e56e08e099fe3785ce06ffeaa
Validity
Not Before: Sep 6 10:44:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e06ec7d1df553e5bf7ed61364b6bc4f3d20aa906
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b8:e9:a1:db:bc:b1:60:67:8f:15:ad:0a:24:
ed:0f:d1:fd:ff:e8:c8:8e:ba:e4:ad:b4:c2:32:00:
e6:c7:de:bb:e6:87:e1:7c:29:35:1f:da:eb:a4:d2:
79:0d:f2:90:22:c2:04:98:a3:91:00:94:63:37:11:
39:5c:26:72:b2:89:ec:ef:e0:29:85:d9:aa:b6:85:
9e:f8:3c:80:1a:c4:1f:18:32:73:b0:c7:ae:22:ef:
54:12:00:28:46:94:09:33:43:2f:5f:5b:d9:d2:3b:
61:19:53:5f:a7:98:f9:05:c3:55:55:5a:0c:88:1c:
d6:af:da:69:94:29:2f:6c:28:51:9a:96:fd:f6:14:
ae:97:bd:47:5c:29:08:0c:17:4d:24:ce:d1:b8:d7:
fc:9f:2a:d6:8b:3a:d1:d7:78:ea:29:98:50:1d:11:
01:c0:3f:54:3f:da:2a:7f:8c:9d:b1:68:24:b9:c8:
cb:dd:21:23:ae:7c:e9:4a:5b:ab:06:80:cf:99:e5:
af:a9:cb:8a:0b:a6:1f:d8:c3:5e:07:2d:b3:e8:83:
71:ac:94:a7:36:98:04:8d:3a:57:3e:2a:0e:56:93:
be:aa:cb:10:3d:34:07:f3:04:66:d1:ff:52:74:9f:
f8:a0:5c:3f:92:12:1b:35:9f:93:57:c0:29:8c:0a:
8a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:6E:C7:D1:DF:55:3E:5B:F7:ED:61:36:4B:6B:C4:F3:D2:0A:A9:06
X509v3 Authority Key Identifier:
keyid:A8:49:20:4C:A4:F0:EB:4E:56:E0:8E:09:9F:E3:78:5C:E0:6F:FE:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qEkgTKTw605W4I4Jn-N4XOBv_qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/4G7H0d9VPlv37WE2S2vE89IKqQY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/qEkgTKTw605W4I4Jn-N4XOBv_qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.160.228.0/22
185.230.144.0/22
185.232.132.0/22
Signature Algorithm: sha256WithRSAEncryption
7d:be:ab:fa:7a:d9:80:aa:91:77:8e:5e:4f:fc:36:fb:a4:71:
93:2a:e3:33:e7:0e:6c:6a:19:2d:f2:7a:50:77:24:fc:3c:43:
37:62:53:1c:10:c2:1f:0b:ba:41:40:57:54:8e:e3:6f:17:7b:
a1:8a:4c:63:4e:58:21:54:2c:f4:05:87:eb:55:3e:34:ba:ec:
19:9e:1e:2b:92:9f:8c:31:7b:3d:6c:ef:a4:29:0b:28:49:0e:
ff:d0:24:76:90:cf:20:f1:b4:2e:f0:56:d5:61:b5:fc:0f:c1:
c9:b6:50:a9:dc:5a:0e:27:05:c6:0b:1b:8b:4c:72:1f:47:9f:
d5:70:66:36:fc:29:c3:63:90:37:4a:fa:2d:7a:53:1f:0b:73:
33:ed:72:b9:50:bd:2b:90:78:72:1c:41:99:08:ef:8b:87:86:
c9:1c:3a:e1:df:c4:37:1b:f5:07:3f:0e:ff:45:06:dc:0b:2f:
7e:49:32:2e:07:09:bf:15:4c:26:81:b3:4d:d1:5c:81:35:7a:
e5:0a:b7:41:f4:a0:c1:ec:c2:65:98:5d:97:89:d5:28:05:4f:
73:e3:d1:cf:99:51:6f:c0:ee:ce:12:0a:55:26:62:be:bd:2a:
f3:d3:92:df:db:2d:3d:55:1a:f9:74:23:8d:74:3c:df:e9:36:
26:07:81:40
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYpqGGZ0lX+3GLwF11p6xUc5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4NDkyMDRjYTRmMGViNGU1NmUwOGUwOTlmZTM3ODVjZTA2
ZmZlYWEwHhcNMjMwOTA2MTA0NDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMDZlYzdkMWRmNTUzZTViZjdlZDYxMzY0YjZiYzRmM2QyMGFhOTA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlrjpodu8sWBnjxWtCiTtD9H9/+jI
jrrkrbTCMgDmx9675ofhfCk1H9rrpNJ5DfKQIsIEmKORAJRjNxE5XCZysons7+Ap
hdmqtoWe+DyAGsQfGDJzsMeuIu9UEgAoRpQJM0MvX1vZ0jthGVNfp5j5BcNVVVoM
iBzWr9pplCkvbChRmpb99hSul71HXCkIDBdNJM7RuNf8nyrWizrR13jqKZhQHREB
wD9UP9oqf4ydsWgkucjL3SEjrnzpSlurBoDPmeWvqcuKC6Yf2MNeBy2z6INxrJSn
NpgEjTpXPioOVpO+qssQPTQH8wRm0f9SdJ/4oFw/khIbNZ+TV8ApjAqKFwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFOBux9HfVT5b9+1hNktrxPPSCqkGMB8GA1UdIwQY
MBaAFKhJIEyk8OtOVuCOCZ/jeFzgb/6qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUVrZ1RLVHc2MDVXNEk0Sm4tTjRYT0J2X3FvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi80NWIyM2YtMzAyYi00MWYyLTk0OTYt
OWNjYmIwODQyOGZhLzEvNEc3SDBkOVZQbHYzN1dFMlMydkU4OUlLcVFZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi80NWIyM2YtMzAyYi00MWYyLTk0OTYtOWNjYmIwODQyOGZh
LzEvcUVrZ1RLVHc2MDVXNEk0Sm4tTjRYT0J2X3FvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCuaDkAwQC
ueaQAwQCueiEMA0GCSqGSIb3DQEBCwUAA4IBAQB9vqv6etmAqpF3jl5P/Db7pHGT
KuMz5w5sahkt8npQdyT8PEM3YlMcEMIfC7pBQFdUjuNvF3uhikxjTlghVCz0BYfr
VT40uuwZnh4rkp+MMXs9bO+kKQsoSQ7/0CR2kM8g8bQu8FbVYbX8D8HJtlCp3FoO
JwXGCxuLTHIfR5/VcGY2/CnDY5A3SvotelMfC3Mz7XK5UL0rkHhyHEGZCO+Lh4bJ
HDrh38Q3G/UHPw7/RQbcCy9+STIuBwm/FUwmgbNN0VyBNXrlCrdB9KDB7MJlmF2X
idUoBU9z49HPmVFvwO7OEgpVJmK+vSrz05Lf2y09VRr5dCONdDzf6TYmB4FA
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:06 2024 by rpki-client on console-ams.rpki-client.org