Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/Gudqm-MGgD3pjvo7Ju4_-8OVwpc.roa
File: Gudqm-MGgD3pjvo7Ju4_-8OVwpc.roa (raw, json)
Hash identifier: FfOZGIXUnXPWDW6WHyaF3uXwo5PjiVUffLP8b9RkZjE=
Subject key identifier: 1A:E7:6A:9B:E3:06:80:3D:E9:8E:FA:3B:26:EE:3F:FB:C3:95:C2:97
Certificate issuer: /CN=3cd37ec23719b2f142f46e6f3317664034adf598
Certificate serial: 018861D6758FC8233BF02A016058492D8069
Authority key identifier: 3C:D3:7E:C2:37:19:B2:F1:42:F4:6E:6F:33:17:66:40:34:AD:F5:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/Gudqm-MGgD3pjvo7Ju4_-8OVwpc.roa
Signing time: Sun 28 May 2023 10:10:24 +0000
ROA not before: Sun 28 May 2023 10:10:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59441
IP address blocks: 185.83.181.0/24 maxlen: 24
185.83.183.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:61:d6:75:8f:c8:23:3b:f0:2a:01:60:58:49:2d:80:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cd37ec23719b2f142f46e6f3317664034adf598
Validity
Not Before: May 28 10:10:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1ae76a9be306803de98efa3b26ee3ffbc395c297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:8c:30:31:60:e3:10:fe:a6:e8:ac:48:e1:65:
ca:99:5b:9e:8a:97:c3:f9:0e:f7:63:35:a8:da:5b:
08:dd:73:04:37:69:c0:1d:6d:e1:3e:67:a3:55:a6:
2b:4c:1f:16:e9:63:20:87:f1:f8:2d:f4:ec:04:bc:
09:ed:d3:9d:d1:9e:7f:d3:e7:4c:b7:a3:dd:99:b7:
5a:07:ff:38:3c:da:8e:2c:27:4d:37:a8:8c:d4:fd:
3f:ce:d6:05:d9:1d:37:bc:53:b4:8d:09:e8:d3:ba:
69:19:82:94:8d:79:81:b5:b0:e1:47:55:eb:2d:fe:
43:e1:0e:18:71:20:f0:a6:c0:0f:76:39:67:99:8d:
fa:84:03:3f:b7:9b:74:e0:e1:04:51:92:85:d2:9b:
2e:16:a4:e7:5f:06:9c:b8:6c:d8:82:ca:53:bd:68:
4f:59:1c:1d:1a:2a:34:4a:9b:d8:72:13:2f:09:c3:
e3:f1:c2:8f:0a:69:d8:a6:2d:e0:03:8e:2c:fe:b8:
07:70:1c:f2:dc:a7:e4:9f:20:cf:ea:0d:1c:71:2d:
29:da:91:77:78:ae:c5:fb:e0:4a:70:de:60:27:fe:
64:d5:07:11:a5:40:a4:68:77:1b:89:32:7d:ad:06:
4d:ea:60:08:ba:be:71:d8:d8:1f:d8:28:9a:40:41:
a3:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:E7:6A:9B:E3:06:80:3D:E9:8E:FA:3B:26:EE:3F:FB:C3:95:C2:97
X509v3 Authority Key Identifier:
keyid:3C:D3:7E:C2:37:19:B2:F1:42:F4:6E:6F:33:17:66:40:34:AD:F5:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/Gudqm-MGgD3pjvo7Ju4_-8OVwpc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.83.181.0/24
185.83.183.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:17:6f:a1:e5:12:68:fb:0b:f5:7a:df:3c:5a:ce:58:2e:53:
3f:ab:8b:36:18:b9:2b:0d:2a:84:b2:8c:ef:f0:ac:26:d2:df:
0a:8f:3c:4d:94:59:58:66:48:0f:b3:67:ae:7d:b2:8a:34:cf:
14:a6:18:29:be:4b:91:e6:fc:d3:c5:89:8e:95:6e:23:b4:d2:
75:b7:0b:f4:ba:c8:e6:54:82:83:88:f9:07:1a:ad:c3:33:38:
02:a3:3a:10:94:62:f2:35:6e:27:88:9f:8b:c1:71:c8:92:d5:
32:9f:9d:f9:72:a0:d6:42:0c:06:95:71:02:61:e1:01:6f:5d:
8a:45:f0:62:84:c9:f6:3b:88:fb:6e:11:23:40:b6:38:0e:8a:
36:82:34:42:19:b0:cb:2a:07:64:b9:fb:8a:d0:78:5e:c6:0c:
3b:47:00:a4:b9:19:d1:2b:c5:51:c2:33:48:15:28:46:35:c1:
ab:32:14:1c:83:8a:92:e5:5f:e8:14:8d:2e:33:cf:40:06:9c:
83:c5:50:e6:5a:c1:c1:62:3e:ba:57:c9:d2:24:39:e6:75:d2:
55:8d:a7:a9:69:b4:12:b9:b7:41:2e:44:e6:f5:b8:49:70:c2:
c8:39:9d:93:9e:ca:8d:df:09:3c:7f:d0:d3:0e:01:58:ca:61:
6c:b5:ea:6b
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYhh1nWPyCM78CoBYFhJLYBpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjZDM3ZWMyMzcxOWIyZjE0MmY0NmU2ZjMzMTc2NjQwMzRh
ZGY1OTgwHhcNMjMwNTI4MTAxMDI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYWU3NmE5YmUzMDY4MDNkZTk4ZWZhM2IyNmVlM2ZmYmMzOTVjMjk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnIwwMWDjEP6m6KxI4WXKmVueipfD
+Q73YzWo2lsI3XMEN2nAHW3hPmejVaYrTB8W6WMgh/H4LfTsBLwJ7dOd0Z5/0+dM
t6PdmbdaB/84PNqOLCdNN6iM1P0/ztYF2R03vFO0jQno07ppGYKUjXmBtbDhR1Xr
Lf5D4Q4YcSDwpsAPdjlnmY36hAM/t5t04OEEUZKF0psuFqTnXwacuGzYgspTvWhP
WRwdGio0SpvYchMvCcPj8cKPCmnYpi3gA44s/rgHcBzy3KfknyDP6g0ccS0p2pF3
eK7F++BKcN5gJ/5k1QcRpUCkaHcbiTJ9rQZN6mAIur5x2Ngf2CiaQEGjOwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFBrnapvjBoA96Y76OybuP/vDlcKXMB8GA1UdIwQY
MBaAFDzTfsI3GbLxQvRubzMXZkA0rfWYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUE5OLXdqY1pzdkZDOUc1dk14ZG1RRFN0OVpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8zZjdlNTYtMDkxNi00N2FjLTg1ODYt
YTkzODhmMzFiNDdlLzEvR3VkcW0tTUdnRDNwanZvN0p1NF8tOE9Wd3BjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS8zZjdlNTYtMDkxNi00N2FjLTg1ODYtYTkzODhmMzFiNDdl
LzEvUE5OLXdqY1pzdkZDOUc1dk14ZG1RRFN0OVpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuVO1AwQA
uVO3MA0GCSqGSIb3DQEBCwUAA4IBAQCLF2+h5RJo+wv1et88Ws5YLlM/q4s2GLkr
DSqEsozv8Kwm0t8KjzxNlFlYZkgPs2eufbKKNM8UphgpvkuR5vzTxYmOlW4jtNJ1
twv0usjmVIKDiPkHGq3DMzgCozoQlGLyNW4niJ+LwXHIktUyn535cqDWQgwGlXEC
YeEBb12KRfBihMn2O4j7bhEjQLY4Doo2gjRCGbDLKgdkufuK0Hhexgw7RwCkuRnR
K8VRwjNIFShGNcGrMhQcg4qS5V/oFI0uM89ABpyDxVDmWsHBYj66V8nSJDnmddJV
jaepabQSubdBLkTm9bhJcMLIOZ2TnsqN3wk8f9DTDgFYymFstepr
-----END CERTIFICATE-----
Generated at Tue Mar 11 05:03:52 2025 by rpki-client