Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/0cIZTvgsoH4NNfW-s7xht-3upGY.roa
File: 0cIZTvgsoH4NNfW-s7xht-3upGY.roa (raw, json)
Hash identifier: YKBNQi3Gbze+PrA9OXkH1PdWxrQn6LHtDcqpIvwBgvk=
Subject key identifier: D1:C2:19:4E:F8:2C:A0:7E:0D:35:F5:BE:B3:BC:61:B7:ED:EE:A4:66
Certificate issuer: /CN=94166b704843d3d9754095c83a91b493828200a2
Certificate serial: 01867B979575A7421D770025BC17BC3DF74A
Authority key identifier: 94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/0cIZTvgsoH4NNfW-s7xht-3upGY.roa
Signing time: Thu 23 Feb 2023 00:06:17 +0000
ROA not before: Thu 23 Feb 2023 00:06:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 185.149.14.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:7b:97:95:75:a7:42:1d:77:00:25:bc:17:bc:3d:f7:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94166b704843d3d9754095c83a91b493828200a2
Validity
Not Before: Feb 23 00:06:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d1c2194ef82ca07e0d35f5beb3bc61b7edeea466
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:58:5f:f7:ae:91:ed:5d:b4:e5:78:a7:39:8f:
54:71:05:6a:10:a6:43:86:6f:87:b9:b1:55:ef:0a:
65:2e:22:e6:37:5f:17:1b:fe:ba:f0:12:46:dc:ff:
b6:40:76:f6:dc:ff:0f:c3:e2:46:50:2f:b1:44:33:
9c:c2:f0:68:44:68:5a:79:bb:77:74:44:9d:0b:6b:
99:eb:f1:6c:96:ca:66:0b:64:34:24:3f:0d:0c:25:
45:78:93:f8:79:f2:7c:63:f6:66:8a:0d:a3:69:28:
8e:68:9c:2e:25:75:a9:dd:74:a4:63:d5:8f:68:37:
f2:93:9a:a8:24:99:37:79:f8:38:77:f4:58:0c:34:
08:ef:8d:82:b3:1b:69:4e:6c:14:92:b6:4f:19:63:
ca:4b:8f:92:97:c6:9b:b7:f7:0f:61:35:a6:55:c5:
ce:94:f3:c9:33:0b:c5:d4:2f:3c:06:57:5a:69:2c:
99:ee:d2:51:94:59:8a:72:7a:17:5d:87:9c:ba:4c:
30:ee:f2:d3:b2:80:02:00:d6:4f:f6:bf:5d:40:42:
5b:8f:cd:3a:db:01:8e:0a:1d:4d:01:0f:56:c1:fa:
c3:31:83:52:a4:89:7a:80:ab:da:a3:c3:54:be:73:
b3:4c:e5:db:2c:dc:25:cc:72:61:34:d9:7a:db:fc:
72:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:C2:19:4E:F8:2C:A0:7E:0D:35:F5:BE:B3:BC:61:B7:ED:EE:A4:66
X509v3 Authority Key Identifier:
keyid:94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/0cIZTvgsoH4NNfW-s7xht-3upGY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.149.14.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:5f:a8:47:da:ab:87:0a:e9:fa:5f:e9:39:26:17:88:99:8c:
62:d5:cc:0a:08:8c:06:89:5a:ef:45:c0:59:36:db:93:a7:90:
05:1d:9b:cc:61:49:0a:da:68:7c:60:40:c1:eb:c6:38:ea:05:
18:f6:c1:2d:7a:6d:63:f5:39:ec:4a:69:77:1e:87:56:2d:b5:
d5:b3:de:c2:d4:b2:b6:8f:8c:11:be:9d:c6:d5:67:5c:90:d9:
21:ee:09:34:fb:f6:87:59:09:57:78:96:8e:96:0b:a2:eb:45:
31:15:e8:e3:ab:20:43:a6:7c:31:fa:9b:62:92:6d:9f:08:41:
97:f2:0a:fa:3d:df:bc:08:20:77:6f:bd:27:51:96:65:0c:03:
ce:d2:7d:37:b4:c8:de:b2:ae:0b:69:9f:75:d3:5a:81:29:57:
29:ee:b3:ab:dd:26:f4:a3:72:9a:d1:a5:33:38:ec:63:2e:4c:
05:5c:fd:00:16:71:65:cb:40:76:07:fe:1a:35:2c:b5:fb:92:
f5:5a:d2:f8:5d:b0:ed:95:68:cb:f6:af:97:2f:e6:c7:16:69:
19:f1:8a:f8:d9:36:c1:fe:9b:5d:7e:8c:7b:92:08:19:6a:bf:
cc:58:77:89:b0:37:8f:aa:10:4c:73:a5:3a:a2:4b:c6:93:a9:
f9:9b:b3:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:31 2024 by rpki-client on console-fra.rpki-client.org