Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/af161b-ef51-44bd-8e0a-9eb3c682b009/1/IG99uHOulaa8ZLih1Q6jp8tkgSs.roa
File: IG99uHOulaa8ZLih1Q6jp8tkgSs.roa (raw, json)
Hash identifier: 1E/aB1+7daLduykqT14+dJBBqDfLBSeCsNhCCWIPLYk=
Subject key identifier: 20:6F:7D:B8:73:AE:95:A6:BC:64:B8:A1:D5:0E:A3:A7:CB:64:81:2B
Certificate issuer: /CN=287e1c97f71f355867e3fb877f21aa5130b6cf5d
Certificate serial: 018CC4929E4D9EA236D5FDE11934A302399D
Authority key identifier: 28:7E:1C:97:F7:1F:35:58:67:E3:FB:87:7F:21:AA:51:30:B6:CF:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KH4cl_cfNVhn4_uHfyGqUTC2z10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/af161b-ef51-44bd-8e0a-9eb3c682b009/1/IG99uHOulaa8ZLih1Q6jp8tkgSs.roa
Signing time: Mon 01 Jan 2024 10:29:52 +0000
ROA not before: Mon 01 Jan 2024 10:29:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205110
IP address blocks: 185.226.88.0/24 maxlen: 24
185.226.91.0/24 maxlen: 24
185.226.90.0/24 maxlen: 24
185.226.90.0/23 maxlen: 23
185.226.89.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:9e:4d:9e:a2:36:d5:fd:e1:19:34:a3:02:39:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=287e1c97f71f355867e3fb877f21aa5130b6cf5d
Validity
Not Before: Jan 1 10:29:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=206f7db873ae95a6bc64b8a1d50ea3a7cb64812b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:92:0c:26:b9:d2:ae:ce:95:58:a9:73:1a:f1:
ca:fa:ba:0f:b0:cb:3e:38:04:8d:a0:f0:ca:a2:26:
f8:c8:2a:20:f1:c8:b2:13:63:66:47:98:bf:fa:2f:
cf:50:b1:e9:38:21:82:15:ea:c5:3a:84:e3:bf:b7:
ef:f8:b7:f2:e3:fe:72:7e:55:fa:55:b5:d1:c9:eb:
6b:85:47:2a:73:0d:22:2b:74:28:2d:9f:f1:e9:63:
b7:5a:f4:34:13:24:02:d2:80:ad:02:be:39:85:d7:
3d:4e:ee:27:79:91:8b:77:e1:0c:d4:8d:46:6c:cc:
1d:8a:31:f6:d4:61:da:a7:ee:21:3a:08:9e:a4:e1:
df:86:4b:45:1b:60:13:0d:48:1e:ff:00:3d:17:36:
a6:b2:3f:08:5e:53:90:19:e7:4e:a8:2c:16:60:b2:
3c:64:82:78:52:d1:d8:fc:6c:1f:0e:11:bb:6a:c0:
6d:05:7a:7b:2b:84:b1:d6:7d:9f:d7:a5:ab:ef:87:
01:bd:a0:69:59:67:a8:97:53:9f:66:1a:0b:15:fd:
7d:5f:46:3a:e6:76:c1:ed:3f:f1:ed:ac:5c:67:61:
3b:d4:9a:8f:82:98:11:a7:cb:eb:39:b6:43:54:e8:
c4:56:32:9d:42:6e:56:30:45:62:cf:ce:ee:2d:42:
13:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:6F:7D:B8:73:AE:95:A6:BC:64:B8:A1:D5:0E:A3:A7:CB:64:81:2B
X509v3 Authority Key Identifier:
keyid:28:7E:1C:97:F7:1F:35:58:67:E3:FB:87:7F:21:AA:51:30:B6:CF:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KH4cl_cfNVhn4_uHfyGqUTC2z10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/af161b-ef51-44bd-8e0a-9eb3c682b009/1/IG99uHOulaa8ZLih1Q6jp8tkgSs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/af161b-ef51-44bd-8e0a-9eb3c682b009/1/KH4cl_cfNVhn4_uHfyGqUTC2z10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.88.0/22
Signature Algorithm: sha256WithRSAEncryption
50:a6:02:18:fc:07:70:fb:73:4d:1f:33:1e:b2:48:35:d0:38:
de:a6:bd:43:96:ca:34:ec:6e:1d:de:c5:26:13:7e:58:78:ec:
d7:7e:8d:87:0c:fb:30:04:2e:7b:8c:45:44:e0:80:54:b7:46:
e4:eb:a8:2d:6b:cf:cd:e1:eb:ce:85:93:9e:23:c4:db:a9:a9:
b6:dd:b6:8e:c1:c9:af:3b:90:70:f1:9b:35:eb:17:36:ff:39:
19:5f:b3:a8:c3:6d:a7:8b:23:17:14:4c:af:51:dd:ff:70:4a:
1e:ed:bc:e2:21:9e:6f:8e:51:72:ed:63:db:d3:72:ce:5a:db:
87:ec:59:5a:1e:c5:30:69:54:58:46:60:18:97:dc:50:f8:cf:
ca:2c:ce:e1:54:4a:65:e1:b7:01:ed:37:fb:f7:4f:20:3a:07:
97:b1:83:f4:38:97:10:fd:15:22:27:a7:27:af:70:a6:08:ae:
6f:b4:68:40:9f:f3:4e:bc:d6:77:e0:06:c0:68:15:95:80:6d:
6c:4d:ae:a5:23:37:07:52:25:7e:37:a4:02:df:80:c0:e1:1f:
f4:30:0b:31:e8:7a:4c:d2:73:6e:f5:8b:b6:bc:e6:a6:4e:7c:
d1:40:4f:1b:95:45:42:65:17:6f:c9:91:8c:c5:50:0a:17:cf:
4f:d2:25:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 14 12:27:55 2024 by rpki-client on console-fra.rpki-client.org