Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/R09HTl8p9K4wfPCWTCSflT-edVY.roa
File: R09HTl8p9K4wfPCWTCSflT-edVY.roa (raw, json)
Hash identifier: AEenI/uTQE9WGYS9XIprVvwZXlPQd7z193RW6ssvBCM=
Subject key identifier: 47:4F:47:4E:5F:29:F4:AE:30:7C:F0:96:4C:24:9F:95:3F:9E:75:56
Certificate issuer: /CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Certificate serial: 018CC500C8B2734DFFDE406FA891F238F7C0
Authority key identifier: 08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/R09HTl8p9K4wfPCWTCSflT-edVY.roa
Signing time: Mon 01 Jan 2024 12:30:12 +0000
ROA not before: Mon 01 Jan 2024 12:30:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212335
IP address blocks: 185.164.175.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:c8:b2:73:4d:ff:de:40:6f:a8:91:f2:38:f7:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Validity
Not Before: Jan 1 12:30:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=474f474e5f29f4ae307cf0964c249f953f9e7556
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:52:3c:02:08:ab:12:ed:e3:32:75:4c:a4:13:
a4:1c:53:a1:6a:02:a4:23:c0:74:0a:81:f4:67:b6:
38:70:6a:b8:f2:84:88:fe:70:73:24:45:b9:22:94:
a7:16:d9:75:e8:5b:90:da:fc:98:0b:1d:eb:06:2d:
65:2d:fa:f1:5b:fd:cd:25:e1:b2:1a:16:e5:08:b3:
e4:3a:94:6c:71:af:44:9d:08:48:25:63:75:b2:d3:
31:8c:c0:13:9c:35:a5:78:55:7f:69:be:41:b5:12:
ba:79:d8:b4:d5:d2:b6:b1:3d:73:9b:b3:6a:70:17:
a8:3f:97:b1:fe:76:7c:66:f9:55:12:2e:80:ef:25:
f2:e8:3f:91:36:41:d3:bd:7f:25:64:90:b6:94:14:
9d:bd:1e:60:01:78:aa:91:1b:ca:a8:57:85:f6:ab:
6c:8a:3a:6e:48:ae:66:5a:82:21:92:45:87:8b:2b:
6e:53:f1:4b:f4:bc:ca:79:24:66:62:2c:db:29:75:
33:44:dd:99:a3:51:b7:b8:a0:bb:18:a0:28:1c:8e:
15:a5:8b:97:2a:21:d4:63:b3:df:82:f6:02:24:65:
a1:48:5a:47:f3:6e:84:57:85:5d:43:07:8c:97:31:
38:fe:aa:34:99:44:05:d3:3e:db:3b:92:ab:b0:e4:
cb:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:4F:47:4E:5F:29:F4:AE:30:7C:F0:96:4C:24:9F:95:3F:9E:75:56
X509v3 Authority Key Identifier:
keyid:08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/R09HTl8p9K4wfPCWTCSflT-edVY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.164.175.0/24
Signature Algorithm: sha256WithRSAEncryption
59:8f:5c:f3:df:92:c9:70:02:bf:f4:8a:76:a3:5d:51:95:cc:
dd:08:9f:92:eb:65:7a:a1:d9:6a:41:62:53:a9:8b:61:6f:30:
5e:71:b5:20:02:ac:4a:71:1f:74:77:f5:d2:82:7f:b6:f4:b5:
18:1c:f5:e2:22:e2:a9:fa:7b:13:61:ad:11:b6:06:28:28:a0:
ed:60:5b:32:de:49:d7:41:0d:d6:14:74:84:24:bc:3e:e1:51:
c7:6b:07:03:96:4b:0d:06:a7:b1:eb:d3:ee:2f:66:e5:c1:72:
90:1d:1d:42:62:58:ff:ea:bf:29:bc:dd:9e:17:15:7c:b0:bc:
71:54:99:f4:4e:3f:9f:a3:10:fa:cc:b7:08:b3:4a:cd:c1:0a:
be:c6:4e:f9:52:2d:f0:0c:f9:03:b9:13:47:d0:f0:58:73:62:
72:79:f6:4a:3e:4b:97:4a:8a:8d:de:54:93:99:93:5b:be:d1:
63:5e:99:eb:b7:20:29:d2:87:a3:77:9d:57:1a:b2:62:1c:6b:
c3:f5:41:68:66:f1:df:93:1b:47:75:a2:f6:69:d9:d7:09:ee:
d2:5b:b9:45:f2:1a:8c:2e:69:14:55:ac:4f:44:09:a9:71:75:
df:6d:98:47:86:24:42:0e:4a:48:00:f8:7c:a2:90:38:d6:80:
23:f6:a2:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 1 13:29:04 2024 by rpki-client on console-fra.rpki-client.org