Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/318a23-2876-46a2-af72-3497f7e2de62/1/2hL95epnnpGSYF52ChiFCx31pgg.roa
File: 2hL95epnnpGSYF52ChiFCx31pgg.roa (raw, json)
Hash identifier: 6/ALGn9QmkCtQTHQEnjhEJRyZC+GlFtQJy8c1W+uyxg=
Subject key identifier: DA:12:FD:E5:EA:67:9E:91:92:60:5E:76:0A:18:85:0B:1D:F5:A6:08
Certificate issuer: /CN=c7d91462c4dc1df6a8a3a97a1aee57a0cc14efba
Certificate serial: 01856CCAB7FAF5F842947677BB19C5226EAE
Authority key identifier: C7:D9:14:62:C4:DC:1D:F6:A8:A3:A9:7A:1A:EE:57:A0:CC:14:EF:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x9kUYsTcHfaoo6l6Gu5XoMwU77o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/318a23-2876-46a2-af72-3497f7e2de62/1/2hL95epnnpGSYF52ChiFCx31pgg.roa
Signing time: Sun 01 Jan 2023 10:05:02 +0000
ROA not before: Sun 01 Jan 2023 10:05:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200937
IP address blocks: 185.90.151.0/24 maxlen: 24
185.90.148.0/24 maxlen: 24
185.90.149.0/24 maxlen: 24
185.90.150.0/24 maxlen: 24
185.90.148.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ca:b7:fa:f5:f8:42:94:76:77:bb:19:c5:22:6e:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7d91462c4dc1df6a8a3a97a1aee57a0cc14efba
Validity
Not Before: Jan 1 10:05:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=da12fde5ea679e9192605e760a18850b1df5a608
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5f:9c:fe:c0:c4:cb:19:a9:d9:94:df:e3:c3:
bc:a7:51:b6:d7:7b:a3:63:a9:cf:b6:69:36:6c:23:
cb:cb:88:25:ea:6c:77:d2:1d:33:16:2d:fc:7c:f6:
4d:aa:df:89:4a:10:b7:f8:82:d3:06:e1:f0:77:dd:
af:bf:f8:8e:1d:0d:e7:5c:e9:e0:7c:83:4b:15:48:
72:d0:e7:0c:d0:f9:58:36:a6:e6:34:ad:b4:61:a6:
fe:8f:e8:6d:c3:39:f3:71:60:31:64:e1:01:36:c2:
b9:f6:3e:51:44:f0:41:42:0b:8a:18:fd:aa:38:96:
18:5c:85:2f:50:64:5b:7f:49:6c:13:37:ed:ad:91:
7a:e5:3f:89:57:21:3e:1b:67:e1:df:05:f0:d1:6b:
71:8b:bd:f6:ba:de:0d:bb:cd:2d:64:ef:45:ce:a1:
bd:b4:2f:4c:da:72:0f:d8:09:ff:16:10:0f:5b:51:
21:24:d8:e2:4d:05:8b:77:40:95:fe:d9:5c:1e:6f:
bf:2a:4a:56:8d:81:64:af:0a:cc:d7:f9:96:ea:54:
70:b6:57:73:6c:be:b8:b7:d4:d7:7c:e2:d8:70:b1:
7a:69:d7:49:30:b1:ae:69:f7:0b:00:d3:a2:e0:d1:
16:1f:58:e8:3f:7e:8b:06:8a:e3:e5:b8:51:47:f6:
75:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:12:FD:E5:EA:67:9E:91:92:60:5E:76:0A:18:85:0B:1D:F5:A6:08
X509v3 Authority Key Identifier:
keyid:C7:D9:14:62:C4:DC:1D:F6:A8:A3:A9:7A:1A:EE:57:A0:CC:14:EF:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x9kUYsTcHfaoo6l6Gu5XoMwU77o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/318a23-2876-46a2-af72-3497f7e2de62/1/2hL95epnnpGSYF52ChiFCx31pgg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/318a23-2876-46a2-af72-3497f7e2de62/1/x9kUYsTcHfaoo6l6Gu5XoMwU77o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.90.148.0/22
Signature Algorithm: sha256WithRSAEncryption
9d:59:f6:bb:94:e5:46:94:0f:4a:b8:74:b1:58:c8:78:37:a4:
3d:cb:b5:9e:51:f0:e4:19:c9:51:26:ff:83:13:94:03:e2:5e:
24:69:88:7e:8c:d1:49:ec:73:75:35:76:50:35:29:a1:0d:14:
21:63:1e:82:0b:25:0a:54:3b:71:75:ca:5a:5b:18:df:27:a8:
fc:fc:fd:1c:31:6e:85:c8:7f:6a:27:65:9a:f6:55:b8:f4:bd:
a5:f8:64:92:2c:a0:65:d5:b2:8b:d9:8b:5b:0b:74:73:17:f4:
18:6e:49:eb:16:22:65:04:6b:c3:02:ab:79:6a:6b:ab:4f:a0:
4c:9a:6b:4c:4d:00:de:7d:6a:c7:c5:59:7a:f9:79:a5:63:91:
aa:de:e8:02:52:a1:2d:86:e6:b1:b9:30:b7:c2:ca:dd:fb:40:
95:9e:ab:6b:fd:57:56:d3:38:05:9a:17:44:87:72:5d:1f:10:
61:e8:a1:12:6c:60:fe:23:15:a7:af:d9:22:c7:a5:b0:0d:f8:
9e:6c:f9:b8:a9:11:57:09:5c:37:b4:aa:63:3d:05:c9:01:14:
89:c5:fc:c1:f7:74:f2:01:8f:b3:08:a2:3a:7b:ae:44:4c:70:
73:6e:04:b2:9d:38:0a:94:d9:96:c6:6e:5f:2a:55:72:05:74:
5c:09:33:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 08:29:35 2025 by rpki-client