Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/3tJ8pFUi-pk-HF4y1KVCLPLJ9PA.roa
File: 3tJ8pFUi-pk-HF4y1KVCLPLJ9PA.roa (raw, json)
Hash identifier: HUVXZzvn43K7jnczGTc0M+1DD2opZXYqbVMykg/7tSw=
Subject key identifier: DE:D2:7C:A4:55:22:FA:99:3E:1C:5E:32:D4:A5:42:2C:F2:C9:F4:F0
Certificate issuer: /CN=0c4579a4028829d37acac65f66c056063251e57e
Certificate serial: 01856E38D1F67CC52B640D46815BEE491EF7
Authority key identifier: 0C:45:79:A4:02:88:29:D3:7A:CA:C6:5F:66:C0:56:06:32:51:E5:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DEV5pAKIKdN6ysZfZsBWBjJR5X4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/3tJ8pFUi-pk-HF4y1KVCLPLJ9PA.roa
Signing time: Sun 01 Jan 2023 16:44:55 +0000
ROA not before: Sun 01 Jan 2023 16:44:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47787
IP address blocks: 193.109.184.0/21 maxlen: 24
185.162.183.0/24 maxlen: 24
2001:b18::/32 maxlen: 48
2a12:c1c0::/29 maxlen: 29
2001:b18:bbbb::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:38:d1:f6:7c:c5:2b:64:0d:46:81:5b:ee:49:1e:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c4579a4028829d37acac65f66c056063251e57e
Validity
Not Before: Jan 1 16:44:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ded27ca45522fa993e1c5e32d4a5422cf2c9f4f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c6:b7:d8:ec:96:f0:97:8c:e4:17:1a:c3:dd:
2c:5d:42:b1:43:a2:c6:35:f5:56:ac:da:21:63:f9:
99:3c:39:60:26:2c:e0:ea:65:2a:9a:6d:0d:fc:12:
be:df:d3:95:ea:bd:2f:8d:b8:d8:ed:0c:72:cb:61:
92:fb:58:74:13:6d:2d:bc:77:03:4b:34:21:57:a4:
69:23:b4:cc:ef:69:01:94:92:12:e7:72:13:13:65:
14:03:b0:f4:07:21:ab:41:6f:6d:8c:14:7a:eb:08:
50:b6:30:33:cc:09:8e:cd:49:7b:60:3d:e7:0c:ef:
f7:03:d4:04:41:86:31:bb:fe:46:51:b0:58:80:62:
bd:55:cd:f7:88:de:b0:57:e7:45:f6:c5:36:33:f2:
01:a0:88:2f:95:82:fc:53:80:c5:64:d3:3a:08:ef:
94:e7:84:d3:a5:6c:69:95:57:4b:85:f7:41:50:e0:
82:c1:8f:8f:0e:a6:63:07:60:cd:7e:cd:f9:eb:a8:
17:5a:3c:89:89:3c:77:aa:61:a9:27:f2:02:09:92:
72:d0:2d:80:ad:68:97:76:9a:9f:92:a7:ce:6c:9d:
f8:cf:0a:f9:84:c8:b2:ec:7b:9a:01:a4:42:85:35:
39:3e:ef:41:cc:53:6b:d2:89:0c:fa:b3:95:7d:47:
4d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:D2:7C:A4:55:22:FA:99:3E:1C:5E:32:D4:A5:42:2C:F2:C9:F4:F0
X509v3 Authority Key Identifier:
keyid:0C:45:79:A4:02:88:29:D3:7A:CA:C6:5F:66:C0:56:06:32:51:E5:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DEV5pAKIKdN6ysZfZsBWBjJR5X4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/3tJ8pFUi-pk-HF4y1KVCLPLJ9PA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/DEV5pAKIKdN6ysZfZsBWBjJR5X4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.162.183.0/24
193.109.184.0/21
IPv6:
2001:b18::/32
2a12:c1c0::/29
Signature Algorithm: sha256WithRSAEncryption
4a:4e:38:69:96:a9:64:98:42:23:7e:e7:70:af:ba:b9:28:08:
c3:a3:45:b2:b9:b2:46:57:59:53:26:d6:51:27:d8:9c:53:fd:
11:7f:32:8e:3e:79:15:e9:86:c8:10:62:4f:28:a4:72:4c:f9:
4d:d6:9a:75:fc:57:22:54:1b:13:8b:9e:da:1f:20:c4:17:bb:
ed:1a:97:35:58:f7:ea:7d:7e:ab:ad:b1:a4:9f:0d:2a:c3:b3:
20:47:7f:e2:b9:e9:64:fa:d9:73:80:8b:13:73:26:5e:9f:ea:
3c:38:46:d3:fe:15:84:cc:c5:82:4e:2d:c3:a5:00:5f:c7:93:
08:cb:0b:73:c7:76:38:f4:02:28:5b:09:e7:4f:44:27:6e:e0:
0f:d9:65:e4:82:16:37:67:13:e8:50:e1:a2:24:dd:68:df:80:
3a:ec:23:ba:70:72:cf:26:bd:97:23:42:9f:53:25:19:1c:99:
3e:61:55:46:ba:2f:2a:19:24:a2:87:f7:90:83:7f:fe:34:da:
e2:71:27:56:e6:63:4a:39:07:86:d1:d4:eb:d9:2b:f6:07:e8:
1c:82:5e:90:db:c5:44:4e:a9:33:61:57:bd:ab:bc:ef:67:e3:
8a:2b:cd:ce:a7:78:54:0e:f7:c2:6f:91:66:f1:4d:1c:df:42:
c6:3f:66:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:07 2024 by rpki-client on console-fra.rpki-client.org