Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/Ohq96wv2WZrZ2MiTocnpY0oDsY8.roa
File: Ohq96wv2WZrZ2MiTocnpY0oDsY8.roa (raw, json)
Hash identifier: iDvqTkLNbujIhtxkGL+uIc3Vl5RyFVzNA6VoDUpO8uE=
Subject key identifier: 3A:1A:BD:EB:0B:F6:59:9A:D9:D8:C8:93:A1:C9:E9:63:4A:03:B1:8F
Certificate issuer: /CN=306d618355bd8937f75bb4650bb5c1af70f9a12e
Certificate serial: 03E08284
Authority key identifier: 30:6D:61:83:55:BD:89:37:F7:5B:B4:65:0B:B5:C1:AF:70:F9:A1:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MG1hg1W9iTf3W7RlC7XBr3D5oS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/Ohq96wv2WZrZ2MiTocnpY0oDsY8.roa
Signing time: Mon 23 May 2022 06:41:30 +0000
ROA not before: Mon 23 May 2022 06:41:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58128
IP address blocks: 185.155.205.0/24 maxlen: 24
185.155.204.0/24 maxlen: 24
185.155.206.0/24 maxlen: 24
2.57.226.0/24 maxlen: 24
2.57.225.0/24 maxlen: 24
2.57.224.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65045124 (0x3e08284)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=306d618355bd8937f75bb4650bb5c1af70f9a12e
Validity
Not Before: May 23 06:41:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3a1abdeb0bf6599ad9d8c893a1c9e9634a03b18f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:78:b4:05:1c:45:a8:cb:69:46:53:5f:79:3f:
80:d7:02:28:bd:a5:c5:5f:29:85:d8:1c:8a:08:61:
5a:8a:d8:80:58:b4:12:96:b0:54:13:a5:21:30:23:
78:45:1d:92:8e:83:61:c7:0f:df:54:c2:1b:b1:0f:
7d:08:f8:7d:95:9e:0f:12:48:1b:1d:71:54:22:8d:
ec:19:41:14:ec:9a:d2:64:3a:9e:cc:03:56:29:f5:
21:3b:e3:77:31:72:a1:e4:4c:28:5b:6a:e9:3f:2a:
86:ca:39:d1:8c:77:45:4a:a8:64:d9:3c:93:3e:c8:
eb:f5:9c:f4:6e:50:97:bc:fb:fa:d8:1c:63:f8:da:
cd:c4:4d:0a:47:57:4f:a4:5f:be:bf:6a:07:87:cf:
98:1d:a1:41:d9:02:ac:66:a9:bb:a8:ea:7b:c7:08:
40:29:12:1e:0d:4a:09:a2:07:91:e0:9a:a0:35:ab:
8e:17:62:1a:39:d5:26:ff:5c:d3:62:1b:cb:41:62:
1a:e5:fa:10:4c:0d:e2:40:7c:85:24:2d:bc:42:43:
94:8f:7f:3e:9e:51:af:18:a2:d9:01:f1:cb:ad:f4:
d3:30:39:29:67:ee:93:4e:da:1e:e4:41:5b:09:cb:
a9:6f:2e:62:1a:ef:c1:da:6c:c1:e8:89:e5:e1:e5:
7e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:1A:BD:EB:0B:F6:59:9A:D9:D8:C8:93:A1:C9:E9:63:4A:03:B1:8F
X509v3 Authority Key Identifier:
keyid:30:6D:61:83:55:BD:89:37:F7:5B:B4:65:0B:B5:C1:AF:70:F9:A1:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MG1hg1W9iTf3W7RlC7XBr3D5oS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/Ohq96wv2WZrZ2MiTocnpY0oDsY8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.224.0-2.57.226.255
185.155.204.0-185.155.206.255
Signature Algorithm: sha256WithRSAEncryption
8e:bd:ba:22:c2:17:dd:ac:da:b3:6e:7e:90:64:d4:80:94:fd:
6c:ea:de:5b:58:ce:89:1c:ab:bc:28:56:7a:ac:f5:68:46:75:
96:65:dd:b8:43:37:0f:93:2d:35:89:f3:e5:17:8d:24:98:a9:
e9:c1:b5:46:95:c9:c4:08:a2:1a:e6:2a:41:f2:e5:f7:ab:7b:
a1:f6:db:3c:c5:a4:0b:3a:6d:1b:f4:8a:58:c4:85:52:cf:6b:
7d:82:df:4f:2d:f1:39:9e:6e:70:e9:cf:f6:66:cb:e3:98:1b:
69:63:e7:6e:5a:23:b6:4f:76:b5:bd:4d:71:ed:80:e8:30:d5:
77:00:a8:40:1f:2e:a8:b7:d4:91:a1:9c:47:8f:1e:5d:95:4d:
41:f2:73:d3:29:45:52:bc:cb:25:2f:02:2a:37:39:19:70:22:
43:1a:02:15:6a:50:5a:24:7a:ac:f1:72:44:05:08:0e:b9:e4:
80:f0:b0:f1:59:29:c4:8e:9c:1e:1c:d5:ad:66:17:d3:81:ce:
89:18:3c:08:60:0b:e1:72:f9:73:34:01:7c:01:be:38:b4:47:
02:ea:23:f0:39:31:83:16:95:b7:c4:9c:91:f1:ab:b8:23:51:
8e:a7:75:08:85:a4:81:39:46:a5:01:fd:ba:73:dd:d4:f5:41:
15:43:29:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:43 2024 by rpki-client on console-fra.rpki-client.org