Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/f71dcb-9e92-44e7-b042-3665067db256/1/w9iXngLc5ThvVWpK2osL2pv_fpI.roa
File: w9iXngLc5ThvVWpK2osL2pv_fpI.roa (raw, json)
Hash identifier: JhSYQOHRxZzb0Xg5+xFBUNg7JPf4WdA4sNpkiKEPQpM=
Subject key identifier: C3:D8:97:9E:02:DC:E5:38:6F:55:6A:4A:DA:8B:0B:DA:9B:FF:7E:92
Certificate issuer: /CN=f50bae60970a2dfc86dd607c5b915ad5c534b413
Certificate serial: 08E57655
Authority key identifier: F5:0B:AE:60:97:0A:2D:FC:86:DD:60:7C:5B:91:5A:D5:C5:34:B4:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/f71dcb-9e92-44e7-b042-3665067db256/1/w9iXngLc5ThvVWpK2osL2pv_fpI.roa
Signing time: Sat 01 Jan 2022 10:03:36 +0000
ROA not before: Sat 01 Jan 2022 10:03:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206774
IP address blocks: 185.176.244.0/23 maxlen: 23
185.176.246.0/23 maxlen: 23
2a0a:2787::/32 maxlen: 32
2a0a:2781::/32 maxlen: 32
2a0a:2786::/32 maxlen: 32
2a0a:2784::/32 maxlen: 32
2a0a:2780::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 149255765 (0x8e57655)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f50bae60970a2dfc86dd607c5b915ad5c534b413
Validity
Not Before: Jan 1 10:03:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c3d8979e02dce5386f556a4ada8b0bda9bff7e92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:0c:4e:53:93:8e:fc:a7:43:dc:3b:39:6e:d6:
16:4e:0d:65:a2:c9:af:83:d5:1e:6b:4b:76:b3:3a:
b9:11:2e:d6:43:28:f9:c7:9c:5d:d6:85:fc:5b:5d:
17:15:f8:64:09:d1:7b:a0:e5:ef:94:3b:16:ba:d2:
92:b9:02:35:6e:30:c9:eb:34:86:4b:10:7f:3e:e8:
d8:91:f2:82:9d:67:d2:f9:da:24:7c:8e:9e:49:df:
f5:62:12:d1:86:4c:1f:d7:f9:e7:62:26:af:62:0d:
c7:9d:bf:f9:95:b8:35:2d:35:4c:51:e6:92:fa:d4:
67:1c:8c:43:9c:e3:b9:dd:9b:69:7a:2f:bc:15:37:
d8:8b:f2:67:03:e0:bd:f0:63:7a:5b:fe:d5:2a:63:
eb:2a:50:26:97:f8:1f:3b:12:d0:75:bf:c9:84:06:
b0:1e:46:72:cf:46:0e:b9:cd:68:87:28:35:b2:83:
25:82:1a:c5:4a:1c:5a:ff:91:c6:17:c4:41:e8:1c:
64:77:29:f1:0f:a0:00:d5:35:9c:f1:42:b0:37:a2:
bb:8b:b1:65:1f:c0:3f:ec:8a:72:dd:34:c8:49:7b:
1e:8e:bd:cf:d6:e2:8a:ad:0c:1a:43:4e:04:2d:52:
84:b1:bc:dd:c3:02:fb:50:01:76:03:78:1f:2b:d0:
bf:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:D8:97:9E:02:DC:E5:38:6F:55:6A:4A:DA:8B:0B:DA:9B:FF:7E:92
X509v3 Authority Key Identifier:
keyid:F5:0B:AE:60:97:0A:2D:FC:86:DD:60:7C:5B:91:5A:D5:C5:34:B4:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f71dcb-9e92-44e7-b042-3665067db256/1/w9iXngLc5ThvVWpK2osL2pv_fpI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f71dcb-9e92-44e7-b042-3665067db256/1/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.176.244.0/22
IPv6:
2a0a:2780::/31
2a0a:2784::/32
2a0a:2786::/31
Signature Algorithm: sha256WithRSAEncryption
09:4a:35:aa:ca:ef:e8:8b:39:2e:1e:36:95:39:cb:e9:86:0b:
d6:13:f4:e9:a2:bf:66:88:ae:b5:26:94:dc:ef:2f:20:61:3e:
cd:e0:07:ce:20:c7:de:e6:24:20:05:d2:fa:d9:19:71:2c:b1:
c8:1b:a3:cf:41:84:73:38:10:78:c4:94:2b:16:89:ee:79:ae:
72:4d:90:9a:9f:7c:3d:fe:3b:62:25:7e:26:95:ca:2b:8e:4f:
b6:7b:1f:ca:62:19:05:66:b4:3d:88:2b:e7:40:9f:5c:10:7b:
4b:ac:ca:ca:ed:fe:e2:47:62:d3:6a:c7:69:ac:af:81:ff:98:
8a:68:96:16:b3:59:70:5d:61:9f:4f:8d:36:b5:26:11:87:08:
0d:b3:1e:1a:49:06:81:76:db:61:c9:c3:ce:10:10:75:db:6a:
cb:37:89:69:89:2e:ea:31:e2:0a:27:70:6c:45:c5:4f:71:10:
b7:ad:93:f8:f1:a7:5e:c1:c7:fd:d0:bd:67:09:2f:ef:31:48:
8d:c6:47:b6:26:3a:5f:28:bf:bf:5d:eb:97:fc:b6:d7:8b:e7:
f1:0a:1f:47:58:ce:7b:ed:f8:d6:0e:06:4d:e0:c1:6e:33:7f:
f3:61:47:52:f1:bc:97:ac:70:34:0d:e2:11:91:98:dd:bd:3a:
14:8e:37:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:49 2024 by rpki-client on console-ams.rpki-client.org