Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/cHj7d-DJZaEjtYoEkX-BRg9giP4.roa
File: cHj7d-DJZaEjtYoEkX-BRg9giP4.roa (raw, json)
Hash identifier: JRdfdtL9GcMtR060kKuJzkV7hQc02bB94Q2KwY1d26w=
Subject key identifier: 70:78:FB:77:E0:C9:65:A1:23:B5:8A:04:91:7F:81:46:0F:60:88:FE
Certificate issuer: /CN=a849204ca4f0eb4e56e08e099fe3785ce06ffeaa
Certificate serial: 09FD97C0
Authority key identifier: A8:49:20:4C:A4:F0:EB:4E:56:E0:8E:09:9F:E3:78:5C:E0:6F:FE:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qEkgTKTw605W4I4Jn-N4XOBv_qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/cHj7d-DJZaEjtYoEkX-BRg9giP4.roa
Signing time: Sat 01 Jan 2022 03:59:47 +0000
ROA not before: Sat 01 Jan 2022 03:59:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213177
IP address blocks: 185.226.228.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 167614400 (0x9fd97c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a849204ca4f0eb4e56e08e099fe3785ce06ffeaa
Validity
Not Before: Jan 1 03:59:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7078fb77e0c965a123b58a04917f81460f6088fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:77:76:f8:e9:85:d9:0c:19:84:84:6a:ee:f4:
64:fc:a0:f9:5d:ef:89:09:ae:51:7a:8d:7f:6e:c8:
60:ac:64:46:5b:73:95:ea:28:5d:3f:e7:81:43:dd:
be:d8:06:96:ba:74:75:c7:ca:ca:8b:d8:38:d1:0b:
42:3a:8e:cb:aa:f2:49:20:d6:43:33:5e:54:6f:d1:
a4:5a:4a:b6:a0:e0:f8:f5:33:2f:66:c4:1b:1a:50:
6a:d0:0b:7e:3e:02:16:74:0c:c0:92:6c:1b:11:bb:
63:c8:77:07:92:c2:1a:8b:5d:b4:5b:03:6c:09:88:
42:5a:48:e2:41:69:9b:02:d3:67:68:16:64:b5:40:
ec:56:eb:9f:e1:4d:d6:66:bd:d4:88:f0:0c:9d:91:
4a:45:62:77:38:f8:c0:71:a3:6e:d0:89:79:a5:5d:
2c:40:85:53:04:03:2c:27:4d:a0:1c:32:42:b8:ba:
76:a6:84:ab:08:49:fe:16:59:36:33:3e:e0:15:10:
e2:67:85:4d:33:1e:62:59:f6:25:e3:65:16:22:eb:
01:26:12:5a:53:ea:67:4d:06:03:47:c7:75:2d:12:
45:48:22:75:b2:42:4a:73:48:f4:49:e2:28:2d:33:
4f:2b:6f:59:5d:c2:d8:25:1e:0c:c8:41:3e:24:86:
ca:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:78:FB:77:E0:C9:65:A1:23:B5:8A:04:91:7F:81:46:0F:60:88:FE
X509v3 Authority Key Identifier:
keyid:A8:49:20:4C:A4:F0:EB:4E:56:E0:8E:09:9F:E3:78:5C:E0:6F:FE:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qEkgTKTw605W4I4Jn-N4XOBv_qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/cHj7d-DJZaEjtYoEkX-BRg9giP4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/qEkgTKTw605W4I4Jn-N4XOBv_qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.228.0/24
Signature Algorithm: sha256WithRSAEncryption
46:f2:8d:48:4c:92:f9:4f:74:fa:e5:c4:fc:40:20:7b:e1:dc:
2a:db:20:07:a1:a2:ab:4e:f8:94:52:ed:ee:84:4b:39:59:4a:
6d:8d:2f:30:ad:5a:49:de:56:e3:16:62:bd:93:1d:9e:f4:39:
87:f0:ed:91:66:6c:69:95:8f:35:b1:3e:57:c5:76:2e:6a:f7:
33:7e:f2:14:65:e8:94:b2:ce:42:3a:e6:e2:f7:50:e9:bc:ff:
91:5e:12:26:ca:95:d4:e4:ec:a7:d0:c6:30:67:51:d8:8f:47:
f9:64:66:01:5a:49:af:c1:30:fa:5e:8c:1a:eb:ed:f0:d1:f2:
9f:ee:0a:ce:7d:f7:38:af:9d:5c:ee:c7:08:79:e1:cf:f7:83:
0e:03:ab:a7:80:ca:cd:a5:4e:d9:b1:fa:31:a3:63:32:d8:89:
9c:a8:8f:a7:c9:39:dd:cd:46:0a:45:97:89:14:5d:ff:80:56:
b9:4d:7c:b2:f1:33:1b:76:9a:8a:cb:48:72:0e:1c:a9:c5:91:
b1:2e:0b:92:bc:30:35:14:65:cd:80:7a:8a:27:96:2c:24:9b:
f6:d2:fe:06:c5:85:fb:7d:be:b3:c9:d9:09:3f:28:8c:0c:fe:
1d:de:57:69:91:66:05:e2:2d:ba:48:a1:8d:2b:7f:21:eb:69:
74:68:26:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:02 2024 by rpki-client on console-fra.rpki-client.org