Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/6add07-e6ad-4dba-9b8b-23e3813651d4/1/yqMp-0fJaatS0kxlD9QNeex1Fyw.roa
File: yqMp-0fJaatS0kxlD9QNeex1Fyw.roa (raw, json)
Hash identifier: aFBWXsVnyUjZl6MFgroOpLYhdeDSWiA/WrINLA/A3PQ=
Subject key identifier: CA:A3:29:FB:47:C9:69:AB:52:D2:4C:65:0F:D4:0D:79:EC:75:17:2C
Certificate issuer: /CN=aab1db0e00820876dfa20bec9b719aa795acc1de
Certificate serial: 0B10DDB7
Authority key identifier: AA:B1:DB:0E:00:82:08:76:DF:A2:0B:EC:9B:71:9A:A7:95:AC:C1:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qrHbDgCCCHbfogvsm3Gap5Wswd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/6add07-e6ad-4dba-9b8b-23e3813651d4/1/yqMp-0fJaatS0kxlD9QNeex1Fyw.roa
Signing time: Sat 01 Jan 2022 05:01:40 +0000
ROA not before: Sat 01 Jan 2022 05:01:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60783
IP address blocks: 185.25.232.0/22 maxlen: 24
185.198.208.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 185654711 (0xb10ddb7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aab1db0e00820876dfa20bec9b719aa795acc1de
Validity
Not Before: Jan 1 05:01:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=caa329fb47c969ab52d24c650fd40d79ec75172c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:e1:0c:b7:f4:60:aa:25:53:13:5d:93:ae:92:
86:4f:c8:f9:57:17:73:de:3d:57:93:da:23:a1:94:
03:1d:19:cb:2c:eb:db:fb:99:e3:ec:0a:78:91:f6:
98:0a:49:d1:19:fd:82:a8:36:73:a0:15:2d:39:d6:
4a:24:d6:86:ef:c8:47:2d:c9:21:7d:fa:9a:b9:2d:
bf:6b:15:e2:d2:fe:e4:77:08:cd:f5:7a:61:e3:f4:
1e:98:d8:e4:c6:0d:3b:c6:ea:9c:36:6d:bd:87:d3:
91:a3:08:15:5d:bf:b0:5a:cc:02:12:1d:ca:af:a4:
1e:98:bc:b7:50:0f:04:25:56:03:f5:ad:37:7e:96:
c2:fe:2d:08:3b:ee:d2:47:90:e8:79:23:62:c3:f1:
f9:31:ad:e8:79:70:d6:06:85:96:f0:81:24:c5:40:
d9:79:ad:1f:bf:af:9e:f8:62:dd:97:bf:0a:db:3f:
8a:14:27:29:25:8b:3d:42:28:55:de:08:28:46:1f:
8c:66:47:46:7f:b3:fa:fe:e7:d8:c2:dd:ee:7d:d9:
5e:f0:22:8c:6f:90:23:5e:2a:83:33:12:75:d0:e7:
63:7a:3a:11:e8:53:30:48:69:52:b9:04:e5:f1:0c:
75:5e:1e:35:ff:4a:e4:c7:89:8c:ec:90:68:06:67:
67:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:A3:29:FB:47:C9:69:AB:52:D2:4C:65:0F:D4:0D:79:EC:75:17:2C
X509v3 Authority Key Identifier:
keyid:AA:B1:DB:0E:00:82:08:76:DF:A2:0B:EC:9B:71:9A:A7:95:AC:C1:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qrHbDgCCCHbfogvsm3Gap5Wswd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6add07-e6ad-4dba-9b8b-23e3813651d4/1/yqMp-0fJaatS0kxlD9QNeex1Fyw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6add07-e6ad-4dba-9b8b-23e3813651d4/1/qrHbDgCCCHbfogvsm3Gap5Wswd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.25.232.0/22
185.198.208.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:ac:a3:e6:14:1f:80:84:26:25:8f:fd:e2:7d:b5:0b:48:eb:
a6:e1:05:68:bd:9d:2c:1c:53:db:36:24:d1:c7:d5:5a:fe:aa:
47:57:57:78:6a:73:c9:db:c0:41:95:19:f5:50:68:27:dd:76:
cd:41:22:a0:12:d9:1e:7e:8d:ce:62:d2:0e:dd:e2:be:1e:3f:
b0:19:75:c6:7b:ba:68:4e:54:4d:cf:06:61:53:61:57:a5:d9:
fd:7c:d7:4a:91:92:c1:4a:61:ea:e9:62:c5:ca:6d:d2:7e:27:
65:f0:31:b5:1e:ae:f4:30:d2:36:5c:59:82:7b:10:b5:ba:93:
4c:7c:6f:88:01:a9:c8:a6:ec:53:eb:7e:24:8b:1b:76:c6:03:
14:59:16:38:0c:c3:c2:df:d8:ac:22:a6:68:fe:96:90:26:85:
4f:41:c0:18:37:d6:4f:10:e1:93:9d:b3:ce:59:83:ec:2c:db:
68:ac:1d:2a:d9:5a:83:d7:b7:39:7a:bd:b0:2c:4e:a7:52:7c:
61:7c:23:57:81:7d:49:c4:a0:a5:83:26:71:be:ac:25:0a:0a:
b0:eb:06:ff:6b:f1:b1:7a:f9:3e:90:4d:bf:79:79:5a:0d:98:
a3:0a:34:08:90:dc:f9:d1:b3:f1:6b:aa:31:69:55:e9:f3:45:
de:ab:ef:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:12 2023 by rpki-client on console-ams.rpki-client.org