Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/3/3138352e3235302e3232302e302f32322d3234203d3e2030.roa
File: 3138352e3235302e3232302e302f32322d3234203d3e2030.roa (raw, json)
Hash identifier: o5rF+GtNhdEhfvy2YlyA1UC1b74M3KcnYTNRQOeFnHA=
Subject key identifier: 57:0B:F8:BE:70:E8:85:7D:71:45:5E:42:E3:82:CB:20:FE:4A:B9:D2
Certificate issuer: /CN=b97bcfac27bbaf19de1d31e53629726c1e4caaa2
Certificate serial: 14EC8A7A2287CD29E198D3041CFB918061001481
Authority key identifier: B9:7B:CF:AC:27:BB:AF:19:DE:1D:31:E5:36:29:72:6C:1E:4C:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uXvPrCe7rxneHTHlNilybB5MqqI.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/3/3138352e3235302e3232302e302f32322d3234203d3e2030.roa
Signing time: Mon 27 Mar 2023 08:27:42 +0000
ROA not before: Mon 27 Mar 2023 08:22:42 +0000
ROA not after: Mon 25 Mar 2024 08:27:42 +0000
asID: 0
IP address blocks: 185.250.220.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:ec:8a:7a:22:87:cd:29:e1:98:d3:04:1c:fb:91:80:61:00:14:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b97bcfac27bbaf19de1d31e53629726c1e4caaa2
Validity
Not Before: Mar 27 08:22:42 2023 GMT
Not After : Mar 25 08:27:42 2024 GMT
Subject: CN=570BF8BE70E8857D71455E42E382CB20FE4AB9D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:62:72:3b:bf:6f:2c:15:a2:06:34:42:cf:f2:
f7:43:b0:ed:24:43:64:15:90:f3:bd:99:1e:5b:54:
c9:a2:7e:d5:7f:31:ea:fc:81:3a:8c:06:0d:7d:ee:
c1:e4:f4:a3:5f:6c:eb:99:c8:d0:31:06:b7:87:d4:
99:7b:ea:c7:36:16:48:87:3c:7c:12:cd:ef:b4:6a:
5c:3e:96:35:33:bc:1b:b4:6c:06:84:88:0d:80:9f:
b4:8f:0b:72:80:9a:e9:a6:14:eb:59:f8:f0:ee:83:
cb:99:a4:ec:11:bc:0a:f3:f5:5a:e1:f7:3f:20:0e:
a0:87:cc:5c:31:4e:b7:67:85:ed:4f:0e:e8:87:e6:
de:82:86:a1:31:10:10:dc:1a:a7:60:54:96:62:a6:
66:be:54:77:d0:da:31:99:c5:53:96:29:13:0d:8d:
e2:9e:85:41:9f:bd:87:5b:58:27:38:ee:2d:47:e1:
f4:a5:26:e4:a3:8a:20:c6:84:e0:da:55:00:82:48:
59:00:3a:74:b9:30:97:6f:cd:77:f7:b4:83:dd:cb:
76:8b:79:22:e6:33:8e:86:71:84:b1:fb:7e:b0:f0:
0c:9d:bc:ea:4e:be:a0:f0:9b:f0:cf:5a:21:b2:1c:
5d:10:f2:a7:4a:69:4b:f8:21:4e:28:13:60:89:95:
fc:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:0B:F8:BE:70:E8:85:7D:71:45:5E:42:E3:82:CB:20:FE:4A:B9:D2
X509v3 Authority Key Identifier:
keyid:B9:7B:CF:AC:27:BB:AF:19:DE:1D:31:E5:36:29:72:6C:1E:4C:AA:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/3/B97BCFAC27BBAF19DE1D31E53629726C1E4CAAA2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uXvPrCe7rxneHTHlNilybB5MqqI.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/3/3138352e3235302e3232302e302f32322d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.250.220.0/22
Signature Algorithm: sha256WithRSAEncryption
79:a9:43:51:a1:f1:72:a2:26:b2:96:d9:68:1b:54:1e:b6:a9:
1e:81:cb:ed:bd:60:da:1f:8d:fb:f5:76:ca:0c:cc:6a:cc:81:
24:c3:38:07:5b:59:62:f8:f4:8d:4b:23:3e:2e:d9:e1:34:ca:
de:ab:39:70:ab:40:34:3a:58:a5:4c:a9:50:16:18:13:29:14:
23:c4:f2:cd:4b:c8:0a:38:2c:62:5b:88:cc:f9:75:55:15:b4:
08:4f:7d:5c:dc:40:a9:02:a4:6a:7d:f6:8f:24:6d:18:7b:d6:
05:67:c1:8f:75:87:d3:3b:0d:c3:75:7e:7a:50:dc:50:40:46:
86:6a:6e:23:80:3d:b3:1f:22:1a:1e:c7:2d:50:0f:45:37:11:
58:9b:67:18:94:49:83:56:68:bc:81:18:7f:af:ec:6a:58:e3:
b2:3e:b6:a7:14:88:ca:d3:ad:c9:c8:c5:a7:33:57:31:40:23:
0c:61:ba:e1:46:d1:e2:b0:96:27:c6:22:b7:2a:da:3b:97:eb:
36:54:43:19:73:d5:e5:bc:f8:c1:b3:ad:a0:50:28:61:c8:81:
a4:da:ab:1c:9c:1d:9e:da:e3:3b:f0:84:aa:d3:74:25:bf:bb:
7b:11:64:a0:44:7c:58:09:ba:e2:83:fb:97:ed:63:de:e3:a6:
17:0b:c8:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:23 2024 by rpki-client on console-fra.rpki-client.org