Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/591xa3BiMKmQLsjBNUrt-7oYWy0.roa
File: 591xa3BiMKmQLsjBNUrt-7oYWy0.roa (raw, json)
Hash identifier: 53VlM3N5gOtddHb139Cinyh4Yjf8o++CNhPtd11MOfA=
Subject key identifier: E7:DD:71:6B:70:62:30:A9:90:2E:C8:C1:35:4A:ED:FB:BA:18:5B:2D
Certificate issuer: /CN=a849204ca4f0eb4e56e08e099fe3785ce06ffeaa
Certificate serial: 01856FCB8D44F1B09329DA18858B82E07970
Authority key identifier: A8:49:20:4C:A4:F0:EB:4E:56:E0:8E:09:9F:E3:78:5C:E0:6F:FE:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qEkgTKTw605W4I4Jn-N4XOBv_qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/591xa3BiMKmQLsjBNUrt-7oYWy0.roa
Signing time: Mon 02 Jan 2023 00:04:48 +0000
ROA not before: Mon 02 Jan 2023 00:04:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213177
IP address blocks: 185.226.228.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:cb:8d:44:f1:b0:93:29:da:18:85:8b:82:e0:79:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a849204ca4f0eb4e56e08e099fe3785ce06ffeaa
Validity
Not Before: Jan 2 00:04:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e7dd716b706230a9902ec8c1354aedfbba185b2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e5:9f:5b:50:d0:52:26:9a:67:7a:df:3c:85:
80:6a:ef:32:30:82:9f:0f:8b:9e:51:15:92:9a:f1:
26:a7:99:d0:80:49:4e:d4:5e:1a:c2:43:80:8e:19:
8e:71:a0:8e:ca:33:d4:1c:5d:d1:1b:6f:54:cd:3a:
8d:91:27:c9:b6:13:58:5a:2e:10:38:00:f0:0a:ac:
4d:97:3b:15:d5:bb:cc:7f:c5:94:ff:34:e2:7c:cb:
bd:ab:ad:ea:f8:05:bc:e3:81:60:44:95:f7:7a:f3:
5c:54:b2:d0:13:56:e5:5f:59:3f:7b:13:3a:d3:09:
0f:2a:83:40:d8:9f:44:c1:35:ba:78:29:3b:69:3d:
c1:eb:8b:36:2d:b8:b9:be:76:8a:a2:f0:59:0f:15:
81:af:a1:89:79:09:5a:51:26:c4:7b:77:0c:40:38:
42:72:d6:db:3d:75:53:f4:fd:64:23:30:f5:94:0c:
eb:af:37:8b:73:05:9a:86:8a:6d:ad:d1:be:c4:0f:
5c:e4:6c:f5:02:7f:36:d5:98:1a:0f:e6:30:a6:1c:
b6:99:e7:74:4d:df:92:59:07:7b:13:27:ee:75:26:
2f:9c:1b:11:83:67:e3:19:99:81:9c:b4:57:c5:0a:
15:d4:30:03:2b:17:c4:9e:22:b7:d8:5b:aa:1e:c6:
7c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:DD:71:6B:70:62:30:A9:90:2E:C8:C1:35:4A:ED:FB:BA:18:5B:2D
X509v3 Authority Key Identifier:
keyid:A8:49:20:4C:A4:F0:EB:4E:56:E0:8E:09:9F:E3:78:5C:E0:6F:FE:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qEkgTKTw605W4I4Jn-N4XOBv_qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/591xa3BiMKmQLsjBNUrt-7oYWy0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/qEkgTKTw605W4I4Jn-N4XOBv_qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.228.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:ea:b5:fd:c2:0c:88:ee:8d:42:89:36:90:d2:06:b9:52:b9:
55:aa:d7:d1:87:e8:07:46:1f:c9:36:29:a0:05:5e:cb:0a:d6:
4b:c9:9f:b3:fb:c4:9b:29:5b:48:50:ec:70:89:f5:26:c2:91:
a3:6e:25:36:b6:f1:94:2f:94:44:94:1a:57:a7:32:43:e7:9e:
e8:84:e6:3c:c0:43:8b:94:9a:ad:fa:07:80:08:11:a8:c1:96:
9e:7c:62:37:91:41:a2:ec:e3:cd:56:6d:9b:a9:9a:4c:ba:08:
44:a8:5c:d3:7f:51:94:9e:a6:f8:e3:97:1a:f8:a0:29:0a:b3:
50:80:de:0d:45:11:e1:a7:48:65:32:6d:9c:33:4e:32:60:c9:
f7:89:1b:17:88:64:a4:99:c4:1f:86:fe:95:4c:5f:28:ea:a3:
96:bd:05:c7:e9:41:7c:08:ae:12:05:36:1c:da:09:04:c7:34:
08:b2:65:2f:e7:56:64:9b:b6:6f:ae:a4:3e:7b:c1:bf:c5:0a:
ab:db:5e:8b:66:9c:f1:cd:05:48:22:aa:a3:d2:53:49:9b:db:
7b:b0:6a:91:77:ad:ca:67:17:2d:1a:83:ca:70:9a:a7:c5:41:
fd:7a:1d:e7:cd:b1:9e:99:05:5d:cf:6a:79:e6:6f:3c:bf:f3:
c0:06:4a:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:02 2024 by rpki-client on console-fra.rpki-client.org