Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/c2o16NiyjgUS1YikDe7pN2intFM.roa
File: c2o16NiyjgUS1YikDe7pN2intFM.roa (raw, json)
Hash identifier: Lm6I/XpMmQxksYGES+3VjTpWXys+o5OkdC89FaQF1Ow=
Subject key identifier: 73:6A:35:E8:D8:B2:8E:05:12:D5:88:A4:0D:EE:E9:37:68:A7:B4:53
Certificate issuer: /CN=541fdc7a2f11a5766d3ad7bdf625ce5e119a8fdf
Certificate serial: 0187791572CE3BC2229FC5EE7C3BA158DE4B
Authority key identifier: 54:1F:DC:7A:2F:11:A5:76:6D:3A:D7:BD:F6:25:CE:5E:11:9A:8F:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VB_cei8RpXZtOte99iXOXhGaj98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/c2o16NiyjgUS1YikDe7pN2intFM.roa
Signing time: Thu 13 Apr 2023 05:27:41 +0000
ROA not before: Thu 13 Apr 2023 05:27:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48881
IP address blocks: 185.104.180.0/22 maxlen: 22
185.104.43.0/24 maxlen: 24
185.104.48.0/21 maxlen: 21
2a06:1fc0::/29 maxlen: 29
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:79:15:72:ce:3b:c2:22:9f:c5:ee:7c:3b:a1:58:de:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=541fdc7a2f11a5766d3ad7bdf625ce5e119a8fdf
Validity
Not Before: Apr 13 05:27:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=736a35e8d8b28e0512d588a40deee93768a7b453
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:95:1a:57:3b:0e:e2:92:b0:a7:72:1a:7e:9c:
d8:bc:58:56:5a:60:77:7d:91:74:ca:6f:dd:1b:5c:
7c:e2:aa:18:a0:d0:b8:13:77:76:a8:d7:48:5a:1d:
0a:29:36:9f:6f:a6:6f:d7:2b:a0:21:3c:16:92:99:
e8:0a:c7:8d:83:ff:63:f3:82:b8:a3:95:82:8f:98:
af:11:bb:18:db:b7:53:f1:6c:5a:f9:f6:2f:e5:b5:
08:34:b1:b4:1b:83:f9:de:14:c8:70:38:6f:b5:7c:
25:93:61:f7:37:d0:68:e5:92:6d:d6:e7:e2:87:13:
74:33:d6:2a:5b:b8:4e:a3:77:33:1c:78:b8:92:9e:
ba:1c:ef:9d:69:0d:42:5b:b6:ea:66:5e:ee:34:c9:
c4:00:20:47:13:5c:ec:5f:8b:d0:4d:5f:0c:df:82:
67:65:f8:da:8b:04:09:b4:90:f7:e4:e7:61:b7:40:
bc:c7:84:27:c0:f0:6b:cb:a2:fe:29:39:d5:4a:b5:
c5:62:f5:44:61:5c:79:9a:28:d0:ad:30:74:20:85:
04:35:b4:d3:33:30:d3:9b:5d:bd:b4:e1:42:11:15:
db:a1:4d:23:01:77:cb:d4:c2:26:9d:3d:db:d3:65:
34:16:93:dd:07:70:40:6e:00:70:9f:2d:e1:08:16:
ef:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:6A:35:E8:D8:B2:8E:05:12:D5:88:A4:0D:EE:E9:37:68:A7:B4:53
X509v3 Authority Key Identifier:
keyid:54:1F:DC:7A:2F:11:A5:76:6D:3A:D7:BD:F6:25:CE:5E:11:9A:8F:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VB_cei8RpXZtOte99iXOXhGaj98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/c2o16NiyjgUS1YikDe7pN2intFM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/VB_cei8RpXZtOte99iXOXhGaj98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.104.43.0/24
185.104.48.0/21
185.104.180.0/22
IPv6:
2a06:1fc0::/29
Signature Algorithm: sha256WithRSAEncryption
94:06:a9:de:5f:70:15:dd:9b:3c:41:50:33:f9:62:6b:cd:ed:
80:1f:99:39:31:8a:87:e5:fb:af:aa:28:ec:d9:a3:5a:4b:88:
92:de:f8:7a:3b:26:9b:6b:27:98:8c:a8:e3:96:72:7a:24:f3:
0f:b5:30:fc:de:e4:be:5b:26:d1:2e:0e:65:d2:20:c5:a7:09:
71:3a:c1:5c:ee:67:b9:9c:68:ff:97:76:bf:65:06:31:ea:3e:
ac:40:a5:7e:b0:07:d1:d0:01:21:4d:3e:27:ef:11:32:2d:d5:
1c:dd:44:ce:4b:20:cc:7c:74:37:a9:25:ad:8c:99:9f:c5:bf:
fe:e3:33:a4:73:d1:10:2d:d1:48:b8:59:ab:00:e4:58:e9:83:
97:4f:af:1b:62:fe:67:c7:a7:d7:b4:03:9e:67:cc:1c:2e:3b:
1b:4e:ad:52:40:d9:8e:24:e0:0c:fb:39:df:24:86:b1:39:41:
ef:37:cc:63:a6:f4:1a:66:c1:f4:1c:a0:f5:10:cf:d6:56:4b:
b9:90:a6:2e:80:54:2e:d8:c4:99:ee:1c:86:03:1b:fc:7e:09:
cc:b2:20:7e:f3:8c:55:e4:87:80:75:b0:5c:97:0d:48:58:06:
42:0c:59:ee:31:31:32:fd:26:54:ec:a8:17:01:70:03:82:a0:
f0:fa:c2:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:47 2024 by rpki-client on console-fra.rpki-client.org