Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/ec583d-1aba-4798-8817-d6c9c6e86923/1/Jz1AXnWAzoKn2lCT3FEt7L4YAdE.roa
File: Jz1AXnWAzoKn2lCT3FEt7L4YAdE.roa (raw, json)
Hash identifier: P/e6I5DtYcWC7d2ONk1tJqw+Q0HlwSEYg7VRWfM/NL8=
Subject key identifier: 27:3D:40:5E:75:80:CE:82:A7:DA:50:93:DC:51:2D:EC:BE:18:01:D1
Certificate issuer: /CN=83286fa6da7d252e7828f84923f55919142b007f
Certificate serial: 018CC7941B550E672C472861D68F8E31B329
Authority key identifier: 83:28:6F:A6:DA:7D:25:2E:78:28:F8:49:23:F5:59:19:14:2B:00:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gyhvptp9JS54KPhJI_VZGRQrAH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/ec583d-1aba-4798-8817-d6c9c6e86923/1/Jz1AXnWAzoKn2lCT3FEt7L4YAdE.roa
Signing time: Tue 02 Jan 2024 00:30:21 +0000
ROA not before: Tue 02 Jan 2024 00:30:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205112
IP address blocks: 185.65.240.0/24 maxlen: 24
185.65.242.0/24 maxlen: 24
2a05:400::/29 maxlen: 29
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:1b:55:0e:67:2c:47:28:61:d6:8f:8e:31:b3:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83286fa6da7d252e7828f84923f55919142b007f
Validity
Not Before: Jan 2 00:30:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=273d405e7580ce82a7da5093dc512decbe1801d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:27:5a:df:fc:b9:2a:77:09:53:75:23:12:e7:
d0:a5:2a:b8:bb:56:8d:07:cf:d9:65:13:96:22:6f:
89:35:bc:cb:a3:37:fa:36:e3:49:6a:25:29:17:68:
e7:b5:15:95:a8:4e:bb:0a:52:b9:0e:76:fa:dd:c7:
58:41:7d:a1:af:f6:f1:52:d4:7c:ba:ca:62:a2:97:
33:cd:66:5d:86:29:ae:f8:a5:fc:16:46:eb:56:5d:
9b:2c:01:8e:9e:c2:39:c7:ed:13:d7:f8:3a:a7:67:
60:35:ae:51:40:54:3b:16:b8:20:e4:e4:ac:c0:4f:
91:5b:cd:8c:5b:7b:4a:5b:a0:f8:5e:8f:3b:06:b4:
de:ec:a5:99:0a:2d:8a:d3:fa:09:ae:1d:5c:eb:90:
17:50:b2:c1:04:f4:e6:a3:5d:5f:b6:67:85:37:0f:
37:59:a7:81:b0:f7:77:2f:19:98:3f:89:df:6f:89:
23:74:dd:80:60:88:e6:a5:1b:ba:32:f0:b7:9e:5a:
2d:da:57:b3:de:23:32:42:91:a2:30:6d:49:ff:0f:
07:07:f8:f0:4f:04:c7:e0:64:2f:ee:b3:f4:e5:2e:
55:9b:be:b7:b9:88:a0:c0:bb:df:7a:28:4b:88:a1:
b9:a4:82:f8:74:ad:e3:02:45:5e:d1:23:81:64:3b:
bc:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:3D:40:5E:75:80:CE:82:A7:DA:50:93:DC:51:2D:EC:BE:18:01:D1
X509v3 Authority Key Identifier:
keyid:83:28:6F:A6:DA:7D:25:2E:78:28:F8:49:23:F5:59:19:14:2B:00:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gyhvptp9JS54KPhJI_VZGRQrAH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ec583d-1aba-4798-8817-d6c9c6e86923/1/Jz1AXnWAzoKn2lCT3FEt7L4YAdE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ec583d-1aba-4798-8817-d6c9c6e86923/1/gyhvptp9JS54KPhJI_VZGRQrAH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.65.240.0/24
185.65.242.0/24
IPv6:
2a05:400::/29
Signature Algorithm: sha256WithRSAEncryption
c0:f5:d1:70:4b:1e:9d:0a:f8:c1:ce:a6:b9:71:3f:f8:24:51:
e7:18:26:be:39:ad:8f:80:70:a5:30:75:7a:b5:cd:2d:bc:69:
e8:8f:e5:c7:3a:72:46:85:cb:0a:17:76:d6:04:66:b2:d4:f8:
e2:b9:78:10:e9:be:7b:3e:14:8a:a3:55:7d:40:28:5c:53:7d:
e9:4f:e0:c8:15:28:c0:0a:4d:22:61:d2:23:04:96:02:1f:0e:
6e:41:90:69:7f:4c:83:89:a5:7f:9d:9f:19:26:d4:c7:45:3c:
9c:e0:86:59:59:33:8c:24:60:c7:79:21:9e:80:9e:8c:c2:fc:
35:3d:a0:d5:00:76:ef:2b:fd:9a:68:7d:32:2c:9b:e3:e6:0b:
55:42:da:8d:68:4e:7d:f3:60:59:49:9b:03:cc:7c:cd:11:fc:
9e:6d:e9:cb:13:f6:3e:66:0b:2a:59:5b:0e:6a:a2:b0:a8:cd:
4d:19:29:7d:c4:30:56:1e:d8:03:51:ce:79:29:7c:ec:5b:c3:
4d:19:f6:3b:4c:4c:40:e4:d0:6a:81:5a:d3:67:ca:73:a0:4f:
00:08:9e:88:c8:0a:49:19:02:66:fc:44:bd:5d:66:4e:e9:6b:
f3:fe:e6:51:b9:31:e6:3b:f9:27:20:55:2e:ef:f6:c1:a6:eb:
8d:63:10:3c
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYzHlBtVDmcsRyhh1o+OMbMpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzMjg2ZmE2ZGE3ZDI1MmU3ODI4Zjg0OTIzZjU1OTE5MTQy
YjAwN2YwHhcNMjQwMTAyMDAzMDIxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNzNkNDA1ZTc1ODBjZTgyYTdkYTUwOTNkYzUxMmRlY2JlMTgwMWQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhCda3/y5KncJU3UjEufQpSq4u1aN
B8/ZZROWIm+JNbzLozf6NuNJaiUpF2jntRWVqE67ClK5Dnb63cdYQX2hr/bxUtR8
uspiopczzWZdhimu+KX8FkbrVl2bLAGOnsI5x+0T1/g6p2dgNa5RQFQ7Frgg5OSs
wE+RW82MW3tKW6D4Xo87BrTe7KWZCi2K0/oJrh1c65AXULLBBPTmo11ftmeFNw83
WaeBsPd3LxmYP4nfb4kjdN2AYIjmpRu6MvC3nlot2lez3iMyQpGiMG1J/w8HB/jw
TwTH4GQv7rP05S5Vm763uYigwLvfeihLiKG5pIL4dK3jAkVe0SOBZDu8FwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFCc9QF51gM6Cp9pQk9xRLey+GAHRMB8GA1UdIwQY
MBaAFIMob6bafSUueCj4SSP1WRkUKwB/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3lodnB0cDlKUzU0S1BoSklfVlpHUlFyQUg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9lYzU4M2QtMWFiYS00Nzk4LTg4MTct
ZDZjOWM2ZTg2OTIzLzEvSnoxQVhuV0F6b0tuMmxDVDNGRXQ3TDRZQWRFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS9lYzU4M2QtMWFiYS00Nzk4LTg4MTctZDZjOWM2ZTg2OTIz
LzEvZ3lodnB0cDlKUzU0S1BoSklfVlpHUlFyQUg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAuUHwAwQA
uUHyMA0EAgACMAcDBQMqBQQAMA0GCSqGSIb3DQEBCwUAA4IBAQDA9dFwSx6dCvjB
zqa5cT/4JFHnGCa+Oa2PgHClMHV6tc0tvGnoj+XHOnJGhcsKF3bWBGay1PjiuXgQ
6b57PhSKo1V9QChcU33pT+DIFSjACk0iYdIjBJYCHw5uQZBpf0yDiaV/nZ8ZJtTH
RTyc4IZZWTOMJGDHeSGegJ6Mwvw1PaDVAHbvK/2aaH0yLJvj5gtVQtqNaE5982BZ
SZsDzHzNEfyebenLE/Y+ZgsqWVsOaqKwqM1NGSl9xDBWHtgDUc55KXzsW8NNGfY7
TExA5NBqgVrTZ8pzoE8ACJ6IyApJGQJm/ES9XWZO6Wvz/uZRuTHmO/knIFUu7/bB
puuNYxA8
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:56 2024 by rpki-client on console-fra.rpki-client.org