Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/d4b835-f5b5-4704-ae97-c26328561030/1/Ld35KSmvF65vpEY5eXQxlzXxW3Y.roa
File: Ld35KSmvF65vpEY5eXQxlzXxW3Y.roa (raw, json)
Hash identifier: GXXfMo81HzVfOo0erigCJ9zLm8CgngaFsBnSjjTcxks=
Subject key identifier: 2D:DD:F9:29:29:AF:17:AE:6F:A4:46:39:79:74:31:97:35:F1:5B:76
Certificate issuer: /CN=1d4404c8392e82d4b7029b69cb6ee290b9b42c00
Certificate serial: 0190BBB03412D585A371F86655A24639C6EA
Authority key identifier: 1D:44:04:C8:39:2E:82:D4:B7:02:9B:69:CB:6E:E2:90:B9:B4:2C:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HUQEyDkugtS3Aptpy27ikLm0LAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/d4b835-f5b5-4704-ae97-c26328561030/1/Ld35KSmvF65vpEY5eXQxlzXxW3Y.roa
Signing time: Tue 16 Jul 2024 13:16:45 +0000
ROA not before: Tue 16 Jul 2024 13:16:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201453
IP address blocks: 185.112.76.0/24 maxlen: 24
185.112.78.0/24 maxlen: 24
2a06:6380::/29 maxlen: 29
2a06:6380::/32 maxlen: 32
2a06:6381::/32 maxlen: 32
2a06:6382::/32 maxlen: 32
2a06:6383::/32 maxlen: 32
2a06:6384::/32 maxlen: 32
2a06:6385::/32 maxlen: 32
2a06:6386::/32 maxlen: 32
2a06:6387::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:bb:b0:34:12:d5:85:a3:71:f8:66:55:a2:46:39:c6:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d4404c8392e82d4b7029b69cb6ee290b9b42c00
Validity
Not Before: Jul 16 13:16:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2dddf92929af17ae6fa446397974319735f15b76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:1b:83:76:6f:66:11:a1:d7:ba:0e:a2:de:64:
18:98:cf:50:db:7f:9e:85:04:e5:e0:70:76:b8:09:
02:6a:f7:33:8e:76:0e:48:10:04:2c:06:9a:19:24:
0e:96:61:38:6d:7a:95:a2:eb:bb:a9:b7:01:7a:ea:
4a:a7:4d:88:3f:9b:e3:38:50:c4:67:99:5e:a5:d7:
78:d4:12:27:01:7e:a2:20:e5:e0:38:4f:54:da:c3:
9b:e5:48:b6:50:ef:c3:f3:8b:81:91:3f:ec:77:80:
d7:73:02:0f:50:72:0b:56:6c:57:e6:96:0d:6b:fe:
0f:80:5b:14:82:bd:e0:71:03:ee:e6:c5:b6:07:74:
42:08:b6:0f:a6:a5:38:0b:2d:e5:18:7c:88:77:09:
7b:8b:77:1f:81:3a:2c:a8:24:81:54:3a:ec:d5:76:
db:5a:8b:46:6b:72:56:2e:4e:53:73:c5:be:72:70:
f6:d9:d3:3e:65:31:94:69:44:41:c6:30:6e:f5:2f:
e3:bf:43:43:c8:02:50:ac:20:6c:c2:ae:d4:0b:2e:
e2:2e:af:92:e1:87:01:b6:8b:0f:fd:1c:3b:32:86:
44:ab:61:08:df:d6:d4:6e:0b:52:ef:45:a1:2f:91:
d2:a9:94:61:50:ad:d3:05:d6:da:67:56:16:b8:04:
16:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:DD:F9:29:29:AF:17:AE:6F:A4:46:39:79:74:31:97:35:F1:5B:76
X509v3 Authority Key Identifier:
keyid:1D:44:04:C8:39:2E:82:D4:B7:02:9B:69:CB:6E:E2:90:B9:B4:2C:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HUQEyDkugtS3Aptpy27ikLm0LAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/d4b835-f5b5-4704-ae97-c26328561030/1/Ld35KSmvF65vpEY5eXQxlzXxW3Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/d4b835-f5b5-4704-ae97-c26328561030/1/HUQEyDkugtS3Aptpy27ikLm0LAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.112.76.0/24
185.112.78.0/24
IPv6:
2a06:6380::/29
Signature Algorithm: sha256WithRSAEncryption
18:8f:e7:45:61:88:bc:3f:ec:49:4c:cc:f5:97:cf:e6:9b:32:
7f:0b:79:7f:f1:8c:1b:91:bc:19:02:69:7f:6a:1f:64:38:43:
37:53:29:85:ff:58:ff:60:9d:40:8e:70:73:1b:80:2d:4a:b5:
92:4e:98:de:a5:85:b5:fc:b2:47:29:0e:ba:45:dc:d8:1e:99:
a1:41:34:11:66:38:a3:e7:87:60:7c:d6:7e:7d:f3:40:9d:ad:
00:81:0c:fa:ac:ff:29:71:04:4e:14:0c:60:61:b1:1a:79:c5:
5a:0a:0f:fd:9e:9f:d4:ae:5c:72:c3:00:bd:1e:07:e7:31:70:
61:1d:2e:c2:b2:19:c6:ad:06:9e:3a:f8:b1:c9:db:25:3d:4f:
cf:2b:19:c0:a6:79:22:80:ed:c0:c7:68:d9:61:c4:74:7a:93:
f0:50:ca:98:94:2e:94:10:cd:26:20:05:ee:ea:78:a7:29:7f:
36:bd:47:9e:90:f4:0f:d8:a8:7c:1a:f7:26:b2:a5:1f:ee:5b:
bd:bb:4e:39:1f:a4:91:07:00:be:15:aa:51:9c:89:2c:8d:c1:
8c:0d:44:59:24:01:76:22:77:0c:76:ec:4a:97:d7:ca:ed:5e:
bc:7c:6c:f1:cf:ff:5b:06:65:1b:3e:c0:e5:04:e3:1b:41:a4:
66:98:b7:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 14:36:53 2024 by rpki-client on console-fra.rpki-client.org