Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/vfpJJPgsnmlUjzYsnGjIUYPLl0c.roa
File: vfpJJPgsnmlUjzYsnGjIUYPLl0c.roa (raw, json)
Hash identifier: mFpac9NesyAtStC10g3bMCL3hOItXSpv0CL3rvYtFuA=
Subject key identifier: BD:FA:49:24:F8:2C:9E:69:54:8F:36:2C:9C:68:C8:51:83:CB:97:47
Certificate issuer: /CN=a849204ca4f0eb4e56e08e099fe3785ce06ffeaa
Certificate serial: 018A4B16DEB71385611EADFDA4B645FB681C
Authority key identifier: A8:49:20:4C:A4:F0:EB:4E:56:E0:8E:09:9F:E3:78:5C:E0:6F:FE:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qEkgTKTw605W4I4Jn-N4XOBv_qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/vfpJJPgsnmlUjzYsnGjIUYPLl0c.roa
Signing time: Thu 31 Aug 2023 10:15:04 +0000
ROA not before: Thu 31 Aug 2023 10:15:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201453
IP address blocks: 185.230.145.0/24 maxlen: 24
185.230.144.0/22 maxlen: 22
185.230.144.0/24 maxlen: 24
185.160.231.0/24 maxlen: 24
185.160.230.0/24 maxlen: 24
185.160.229.0/24 maxlen: 24
185.160.228.0/24 maxlen: 24
185.160.228.0/22 maxlen: 22
185.232.132.0/22 maxlen: 22
185.232.135.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:4b:16:de:b7:13:85:61:1e:ad:fd:a4:b6:45:fb:68:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a849204ca4f0eb4e56e08e099fe3785ce06ffeaa
Validity
Not Before: Aug 31 10:15:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bdfa4924f82c9e69548f362c9c68c85183cb9747
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5e:ab:79:d2:85:31:d7:5f:11:8d:59:03:31:
1b:ad:b8:50:31:60:59:9a:dd:2d:e7:75:78:84:66:
7b:df:ff:f4:be:ca:0a:9e:ec:b7:68:1e:9d:a0:37:
e3:83:f0:22:76:dc:ae:25:b4:e1:1c:93:71:c6:eb:
00:0b:27:99:21:f5:b6:67:a3:be:31:d6:c8:a2:41:
36:88:bd:e2:54:44:95:fc:b8:a4:2c:40:c3:90:68:
17:e0:66:ad:ee:80:69:cf:bb:e6:3b:5e:b3:61:db:
bc:51:d1:a6:02:ca:77:34:68:d8:92:32:b4:b9:b7:
31:d5:70:91:e6:dc:ba:d3:6d:e4:07:30:ac:66:75:
f2:76:a8:13:6f:ee:f7:e2:39:a8:d5:75:b4:b2:5d:
f7:f7:df:d8:a9:7d:6f:fa:da:9a:f3:5b:de:da:86:
f4:0f:8e:27:1a:29:ad:c5:12:16:c2:d1:04:62:6c:
8f:01:e6:93:1a:e6:7d:7e:cf:2b:a3:ee:2d:c7:fc:
46:e3:e6:59:b4:bf:73:27:87:9c:25:52:cd:8a:3e:
bd:16:53:04:b1:c1:6e:a5:a5:fa:55:a4:e6:87:1e:
0a:c9:48:8e:61:ac:98:bd:9f:80:2a:27:8c:d7:5a:
8c:c7:87:b8:76:23:74:0f:fa:d3:f6:f8:86:f7:b4:
e3:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:FA:49:24:F8:2C:9E:69:54:8F:36:2C:9C:68:C8:51:83:CB:97:47
X509v3 Authority Key Identifier:
keyid:A8:49:20:4C:A4:F0:EB:4E:56:E0:8E:09:9F:E3:78:5C:E0:6F:FE:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qEkgTKTw605W4I4Jn-N4XOBv_qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/vfpJJPgsnmlUjzYsnGjIUYPLl0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/qEkgTKTw605W4I4Jn-N4XOBv_qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.160.228.0/22
185.230.144.0/22
185.232.132.0/22
Signature Algorithm: sha256WithRSAEncryption
98:1f:3b:f9:f5:3a:ce:4d:84:2c:86:8b:da:0b:87:54:cb:13:
a4:8e:4c:a3:c0:e6:f9:9d:78:35:c5:a8:eb:cd:6b:e5:cd:2f:
2d:e5:1e:df:3c:e6:d5:5c:b0:8e:66:1a:68:4f:b1:bb:25:8b:
10:bd:d4:e8:45:d6:30:18:48:8d:19:b8:54:e2:19:55:a5:78:
5c:86:53:31:6b:5e:ac:85:a1:d3:05:1a:35:e3:35:41:3f:c6:
74:6c:d6:7b:59:45:d5:60:e6:01:b1:cf:3d:1f:8f:2c:bd:c4:
1f:09:45:54:d2:6c:cd:18:22:df:0d:bd:69:2b:a9:86:a9:d8:
c3:1b:30:d6:f4:8b:1b:40:3a:e1:1d:e1:06:a8:1f:88:00:55:
c1:a5:8a:62:55:1f:85:25:be:c1:b7:7e:da:aa:d3:a4:18:01:
0d:b2:6f:34:0b:0d:12:97:f0:a7:ea:3d:4b:6a:ef:2e:7b:aa:
63:79:c3:b4:dc:b4:d7:52:73:01:09:85:86:9c:c5:35:30:53:
1c:56:9f:57:4a:34:2c:4a:af:60:11:90:bb:02:d5:4f:e3:d4:
d7:e0:ef:05:36:c7:cd:33:eb:4c:02:e3:db:f1:00:b1:1f:09:
be:f3:3a:0b:53:dd:7f:da:18:63:ad:0e:a7:87:3a:8b:25:23:
58:b5:90:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:06 2024 by rpki-client on console-ams.rpki-client.org