Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/6e44b7-baff-45f3-a4e9-17f881f771cb/1/1UmKQqpJ0x3bISFY5gE5CXZ1XN4.roa
File: 1UmKQqpJ0x3bISFY5gE5CXZ1XN4.roa (raw, json)
Hash identifier: EUqWalahdB6wnWKeWPmsbaaHF6Z0evL66TGmHqzBSLs=
Subject key identifier: D5:49:8A:42:AA:49:D3:1D:DB:21:21:58:E6:01:39:09:76:75:5C:DE
Certificate issuer: /CN=56641d162079efd3c560a5de9e9226b2f2f0b097
Certificate serial: 01856F8BA525D630F421AEF248919A8F8124
Authority key identifier: 56:64:1D:16:20:79:EF:D3:C5:60:A5:DE:9E:92:26:B2:F2:F0:B0:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VmQdFiB579PFYKXenpImsvLwsJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/6e44b7-baff-45f3-a4e9-17f881f771cb/1/1UmKQqpJ0x3bISFY5gE5CXZ1XN4.roa
Signing time: Sun 01 Jan 2023 22:55:00 +0000
ROA not before: Sun 01 Jan 2023 22:55:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44853
IP address blocks: 185.93.173.0/24 maxlen: 24
188.214.157.0/24 maxlen: 24
86.105.182.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:8b:a5:25:d6:30:f4:21:ae:f2:48:91:9a:8f:81:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56641d162079efd3c560a5de9e9226b2f2f0b097
Validity
Not Before: Jan 1 22:55:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d5498a42aa49d31ddb212158e601390976755cde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f9:a9:29:46:c2:20:91:0b:e5:e4:9c:88:29:
1e:f1:e9:cb:d1:0f:94:5e:99:90:34:f4:33:6c:52:
ce:3e:0a:3d:5b:99:7c:cd:fe:62:ec:a0:17:2d:86:
58:f7:5c:7f:d5:ab:ae:18:b3:b2:6a:c6:1f:c7:aa:
cb:c9:f2:86:a9:8c:cb:62:20:f8:85:bc:e8:c6:2d:
d5:21:fb:2b:c3:8c:74:c6:78:04:d4:8a:68:72:94:
ac:eb:77:36:60:ab:39:f5:28:a6:b6:75:f9:6a:a4:
1a:b4:2e:db:cf:7f:d7:e1:e4:be:02:f4:05:fd:49:
0d:2a:3f:c6:fd:3a:34:9c:fb:78:52:37:07:11:dc:
d3:46:25:6b:96:cb:82:83:e6:cc:f7:20:5f:1a:49:
c3:46:dc:39:bb:2f:3e:72:e5:c0:87:0d:27:79:90:
25:ae:ac:59:45:16:e4:5e:39:f6:e0:c8:17:74:f4:
62:2c:cf:d9:21:75:6f:78:e9:3a:cf:79:c1:71:71:
c7:fc:18:c5:00:1d:95:8d:4b:fa:bd:d9:20:13:75:
61:13:66:6f:35:e2:a7:67:15:7f:87:21:82:bb:69:
05:36:9d:5d:1f:2b:45:f4:6d:b8:8f:a8:9b:00:8a:
e7:b7:31:03:f0:e3:e7:d1:95:c2:9b:03:89:59:c0:
10:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:49:8A:42:AA:49:D3:1D:DB:21:21:58:E6:01:39:09:76:75:5C:DE
X509v3 Authority Key Identifier:
keyid:56:64:1D:16:20:79:EF:D3:C5:60:A5:DE:9E:92:26:B2:F2:F0:B0:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VmQdFiB579PFYKXenpImsvLwsJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6e44b7-baff-45f3-a4e9-17f881f771cb/1/1UmKQqpJ0x3bISFY5gE5CXZ1XN4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6e44b7-baff-45f3-a4e9-17f881f771cb/1/VmQdFiB579PFYKXenpImsvLwsJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.105.182.0/24
185.93.173.0/24
188.214.157.0/24
Signature Algorithm: sha256WithRSAEncryption
06:d2:29:d9:9e:8b:df:35:32:bc:e2:43:f1:78:1d:3b:3c:4d:
da:e8:ae:15:80:3b:99:7e:2d:46:a9:87:2f:e9:a8:87:c7:f6:
7a:33:86:e8:ba:6f:26:15:5a:ad:f6:a9:92:85:d2:ad:8e:b5:
d6:88:c9:35:f3:85:2c:69:bb:44:29:53:62:52:33:7c:40:69:
a4:a8:f7:34:ba:2c:b1:ad:89:70:1e:e7:a0:3c:b3:0d:f9:02:
c6:55:65:f3:d7:48:89:27:c4:94:6e:f2:25:15:07:fe:61:07:
33:64:e0:a9:f8:2c:b4:af:7b:46:14:db:64:63:44:db:07:8a:
06:c0:a2:59:79:9a:c8:ac:eb:5c:1a:0c:36:10:40:c9:e2:43:
af:51:e3:1e:36:b9:18:01:75:09:b8:04:99:90:23:8d:08:e2:
61:71:82:1e:fe:91:26:81:2b:df:a4:60:00:19:36:0a:f4:46:
6a:2c:55:f9:f3:f4:9a:e6:d6:16:b1:f6:43:20:a6:77:2c:34:
61:d1:61:86:4e:b8:62:ca:47:fa:7e:a4:17:ec:a1:54:16:25:
09:eb:25:cf:37:bf:86:e3:85:ff:60:29:2d:a0:ba:5a:71:28:
c4:f9:df:26:b0:87:e4:b3:13:93:28:92:a5:c8:17:e4:e8:4e:
69:19:fe:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 24 09:09:20 2023 by rpki-client on console-ams.rpki-client.org