Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/rbqyNtiH9v1c0rATNL3imD8uM9I.roa
File: rbqyNtiH9v1c0rATNL3imD8uM9I.roa (raw, json)
Hash identifier: v6jPVs7burq6JLdHcBYR4e5419KS3cvd4UTDuXjWqN4=
Subject key identifier: AD:BA:B2:36:D8:87:F6:FD:5C:D2:B0:13:34:BD:E2:98:3F:2E:33:D2
Certificate issuer: /CN=a849204ca4f0eb4e56e08e099fe3785ce06ffeaa
Certificate serial: 01897783B1B502027A3889112F458A426CCC
Authority key identifier: A8:49:20:4C:A4:F0:EB:4E:56:E0:8E:09:9F:E3:78:5C:E0:6F:FE:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qEkgTKTw605W4I4Jn-N4XOBv_qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/rbqyNtiH9v1c0rATNL3imD8uM9I.roa
Signing time: Fri 21 Jul 2023 08:14:26 +0000
ROA not before: Fri 21 Jul 2023 08:14:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201453
IP address blocks: 185.230.145.0/24 maxlen: 24
185.160.231.0/24 maxlen: 24
185.160.230.0/24 maxlen: 24
185.160.229.0/24 maxlen: 24
185.160.228.0/24 maxlen: 24
185.160.228.0/22 maxlen: 22
185.232.132.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:77:83:b1:b5:02:02:7a:38:89:11:2f:45:8a:42:6c:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a849204ca4f0eb4e56e08e099fe3785ce06ffeaa
Validity
Not Before: Jul 21 08:14:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=adbab236d887f6fd5cd2b01334bde2983f2e33d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0b:93:e5:90:53:e8:a9:e5:13:68:69:ca:7e:
7d:32:12:61:0c:9d:d7:6b:43:9b:67:fd:ed:1b:e8:
2d:5e:71:9f:ab:37:ee:62:39:fc:bf:7c:ce:00:df:
05:34:13:67:3a:8f:99:e6:72:80:bd:98:ce:b8:cc:
cc:7e:09:2e:19:f5:e4:80:b0:03:af:6e:34:96:0f:
b5:96:84:5a:d2:06:18:a6:0a:f6:07:a7:e5:bb:61:
b6:30:16:54:ef:8d:32:43:e7:4b:bd:fe:3b:25:5b:
c4:ec:05:93:06:35:ab:37:81:1e:57:21:1c:7e:e4:
f7:9e:9a:29:1c:8b:d6:29:7f:18:03:c6:a7:e8:85:
53:62:7f:36:4e:ac:c7:78:f1:73:92:f3:6c:2f:74:
63:88:3e:ab:57:45:57:e3:25:68:bc:cc:08:21:06:
2c:a6:46:05:1e:75:51:92:38:23:11:71:00:ff:ed:
83:ff:e9:59:07:40:f0:ba:f3:65:be:17:7f:97:47:
04:47:27:b7:e7:2b:6b:39:37:e5:30:fe:bc:6e:d4:
90:80:93:14:69:98:7d:4a:ae:2a:dd:2e:0f:07:bd:
6e:bd:26:a1:af:36:c9:4f:5d:0b:44:60:8b:27:69:
59:25:73:d0:14:98:79:e6:a1:1b:26:53:13:46:05:
c9:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:BA:B2:36:D8:87:F6:FD:5C:D2:B0:13:34:BD:E2:98:3F:2E:33:D2
X509v3 Authority Key Identifier:
keyid:A8:49:20:4C:A4:F0:EB:4E:56:E0:8E:09:9F:E3:78:5C:E0:6F:FE:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qEkgTKTw605W4I4Jn-N4XOBv_qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/rbqyNtiH9v1c0rATNL3imD8uM9I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/qEkgTKTw605W4I4Jn-N4XOBv_qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.160.228.0/22
185.230.145.0/24
185.232.132.0/22
Signature Algorithm: sha256WithRSAEncryption
4f:b4:06:df:11:ad:b7:2f:7a:d2:b6:d3:e9:b9:8c:ac:13:0f:
c0:b4:d1:88:2e:fa:b4:b5:62:4e:5e:78:7b:51:03:ce:65:3b:
21:35:5e:35:92:85:10:72:cb:2c:0a:24:b4:b8:69:ea:a2:a1:
13:7d:5f:6d:ed:7f:df:0e:04:ef:ab:37:68:b0:ae:c9:73:2f:
27:78:a4:fb:c1:41:bd:c7:e7:f2:4d:86:b8:a4:aa:9a:ad:49:
cf:10:c5:82:fd:0a:d8:5e:68:70:3a:bc:07:f7:c6:e6:ef:e0:
12:da:fc:48:00:72:90:0e:a6:07:63:86:81:d5:2e:03:f9:9a:
cf:1d:0e:55:72:7c:9c:47:95:77:3c:9c:c4:43:4d:9c:c2:2f:
0e:0d:3f:5d:ea:81:8c:c3:80:17:3b:19:e0:b6:7f:73:41:b6:
51:c5:9d:ec:cd:3d:ff:4d:50:3a:aa:8d:22:f7:96:e3:79:a9:
65:26:e0:21:35:2a:50:9c:eb:e7:25:56:b2:9a:0b:5e:7f:b8:
aa:b3:99:2d:69:03:a6:01:9a:25:fd:6a:4c:e7:39:3f:40:97:
05:af:48:f1:ba:5b:b7:3c:a4:e9:b0:a3:33:ba:d3:31:32:2d:
8d:4c:84:4e:ef:f6:c3:68:64:53:20:d5:3d:ed:85:46:94:a9:
42:b3:d6:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:06 2024 by rpki-client on console-ams.rpki-client.org