Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/303a43-1003-42d6-96b0-66b86fc781a2/1/rTMTZoVKm1G7EwUUTn9J_0O21DM.roa
File: rTMTZoVKm1G7EwUUTn9J_0O21DM.roa (raw, json)
Hash identifier: QfIqS0IiJoeIvF/lyOHyVj8REgs+PRa3Zg/6TK8IVjc=
Subject key identifier: AD:33:13:66:85:4A:9B:51:BB:13:05:14:4E:7F:49:FF:43:B6:D4:33
Certificate issuer: /CN=5e33dda6defc93cf82516494d9f3488d6c4ad9dc
Certificate serial: 018CC26D85B44099DF5002A896420D00C3C4
Authority key identifier: 5E:33:DD:A6:DE:FC:93:CF:82:51:64:94:D9:F3:48:8D:6C:4A:D9:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XjPdpt78k8-CUWSU2fNIjWxK2dw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/303a43-1003-42d6-96b0-66b86fc781a2/1/rTMTZoVKm1G7EwUUTn9J_0O21DM.roa
Signing time: Mon 01 Jan 2024 00:30:06 +0000
ROA not before: Mon 01 Jan 2024 00:30:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200736
IP address blocks: 185.235.240.0/24 maxlen: 24
185.235.240.0/23 maxlen: 23
185.235.241.0/24 maxlen: 24
185.235.243.0/24 maxlen: 24
185.235.242.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:85:b4:40:99:df:50:02:a8:96:42:0d:00:c3:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e33dda6defc93cf82516494d9f3488d6c4ad9dc
Validity
Not Before: Jan 1 00:30:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ad331366854a9b51bb1305144e7f49ff43b6d433
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:00:ba:ba:4e:21:3d:7c:95:05:8a:28:a1:8f:
78:62:2c:9a:c5:fd:5b:2d:a3:fd:93:37:6d:a1:d8:
79:49:78:ef:de:47:79:e1:57:17:62:53:e5:21:77:
19:48:56:c4:c2:1e:f8:cc:2f:6b:42:5c:44:b8:87:
45:c0:8b:3f:09:41:35:6f:c4:f2:5a:cb:5c:0e:41:
09:e6:34:5b:6c:81:80:e1:04:f9:19:a0:6b:7c:59:
c3:77:5b:3d:0e:cf:fb:e8:cd:94:ce:1f:6e:9b:8f:
b3:86:1b:ba:f5:41:aa:37:aa:ec:b2:07:ee:a7:61:
da:87:a2:9b:88:19:bb:26:86:67:4d:28:7c:6c:b5:
b8:ed:a9:08:01:fa:eb:3e:fa:d6:ef:a4:bf:0e:7c:
61:11:46:8f:12:47:c0:bd:7a:78:77:99:bb:f4:58:
c9:70:db:d5:7a:4a:4e:40:c3:70:f5:78:fa:e9:a5:
67:fb:e6:e4:a0:98:43:77:ec:46:e1:b2:82:8e:59:
21:18:97:a8:ff:38:21:c3:0e:2b:79:fc:7c:9c:c1:
ce:c1:ee:2f:21:aa:e7:3c:2a:61:eb:eb:c2:7f:68:
39:3e:33:0f:6f:2c:51:b4:2f:05:7b:46:8a:a4:23:
ce:ed:b8:88:1e:ad:34:d8:0e:fc:ad:e2:34:9b:07:
f0:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:33:13:66:85:4A:9B:51:BB:13:05:14:4E:7F:49:FF:43:B6:D4:33
X509v3 Authority Key Identifier:
keyid:5E:33:DD:A6:DE:FC:93:CF:82:51:64:94:D9:F3:48:8D:6C:4A:D9:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XjPdpt78k8-CUWSU2fNIjWxK2dw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/303a43-1003-42d6-96b0-66b86fc781a2/1/rTMTZoVKm1G7EwUUTn9J_0O21DM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/303a43-1003-42d6-96b0-66b86fc781a2/1/XjPdpt78k8-CUWSU2fNIjWxK2dw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.235.240.0/22
Signature Algorithm: sha256WithRSAEncryption
0b:fe:03:09:f8:9f:63:93:a1:db:f0:5b:29:03:32:7f:1e:47:
e9:80:0f:fa:75:c8:96:1a:63:44:d1:93:c4:1e:c7:99:ff:8a:
01:0a:27:16:61:dd:bb:1c:84:46:d8:fd:c8:85:ba:2f:56:72:
4a:5e:5c:ff:a9:54:bc:69:3f:12:e0:07:ad:ba:c7:84:1d:26:
53:32:d9:2a:52:3d:a5:83:2a:b1:d4:d0:d1:67:6d:c9:97:8b:
06:7c:cb:e8:53:f7:cd:68:b7:e4:db:c7:ba:17:e1:e2:92:7c:
27:89:a1:58:18:dd:4f:d5:58:e9:5f:c7:34:66:29:3f:19:41:
8b:db:3f:59:bf:81:78:27:a9:6a:a2:ac:d8:62:33:c1:d3:e6:
e1:89:7e:ca:0e:0f:26:db:15:a0:6c:0e:80:84:6c:97:09:ed:
e2:49:8f:03:85:e4:8a:ed:a6:62:70:5a:22:fa:57:e1:71:fd:
39:44:8e:c1:6b:dc:74:64:87:75:d5:6d:ed:85:df:c4:a2:aa:
dd:51:e6:bf:6e:3d:18:63:b0:d8:ee:b0:00:e6:40:19:6f:79:
a3:43:71:63:af:ef:8f:bf:d9:1d:06:0b:b6:b3:7a:bb:e6:c4:
6f:85:95:56:0e:4d:b5:85:76:1b:24:20:31:a7:35:8a:8e:51:
76:ca:73:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 29 16:39:01 2024 by rpki-client on console-ams.rpki-client.org