Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/Z6KDZKow3NOyv9GVvGEjOieUveA.roa
File: Z6KDZKow3NOyv9GVvGEjOieUveA.roa (raw, json)
Hash identifier: lA4Ajakrn8FXmDfwKFkbHl68W3YfoUQM0JAE+Rm/WtY=
Subject key identifier: 67:A2:83:64:AA:30:DC:D3:B2:BF:D1:95:BC:61:23:3A:27:94:BD:E0
Certificate issuer: /CN=94166b704843d3d9754095c83a91b493828200a2
Certificate serial: 0188D845AA63ABBA51CD30853C79C6651B44
Authority key identifier: 94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/Z6KDZKow3NOyv9GVvGEjOieUveA.roa
Signing time: Tue 20 Jun 2023 10:07:04 +0000
ROA not before: Tue 20 Jun 2023 10:07:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49434
IP address blocks: 185.149.15.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:d8:45:aa:63:ab:ba:51:cd:30:85:3c:79:c6:65:1b:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94166b704843d3d9754095c83a91b493828200a2
Validity
Not Before: Jun 20 10:07:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=67a28364aa30dcd3b2bfd195bc61233a2794bde0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:86:fa:27:24:01:d9:4e:a1:d2:84:c5:a1:e2:
01:f1:29:75:fa:b4:4d:50:07:71:73:19:7c:84:42:
0e:c2:00:04:6e:5d:93:4e:c1:d3:91:0a:a5:77:59:
1d:73:c0:8f:25:1d:44:de:b1:aa:a1:3f:40:12:d2:
d9:cc:7c:10:7d:90:99:c6:58:e3:7a:c5:1d:25:8a:
67:0e:93:89:2e:f8:a8:8e:11:06:de:ca:a6:90:a7:
f2:38:35:af:b9:a0:90:28:09:a8:41:d3:28:19:e6:
7c:32:27:0b:27:52:7a:6c:0e:39:9f:d0:34:95:1e:
43:04:16:57:d2:a7:cc:d3:30:9f:f9:91:98:6e:0e:
a0:2a:ba:27:3c:37:25:e2:b9:d0:a7:fa:ac:52:e3:
93:b7:d7:6c:9b:14:34:6f:7b:7f:70:8b:ce:bf:36:
30:e8:d8:45:72:09:1e:96:55:3b:98:be:30:c3:42:
d3:db:17:05:96:fc:c0:be:21:a0:d2:76:dd:a2:1f:
33:0e:a0:fc:55:b3:f0:54:44:4e:1a:08:5e:d8:f0:
8e:07:fb:6f:3d:98:69:d8:29:0b:86:a7:01:a1:48:
44:66:91:36:e0:a6:80:79:5f:41:b1:f7:e0:b6:d3:
35:ed:81:43:c2:e6:7b:66:69:15:ac:01:88:99:bd:
97:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:A2:83:64:AA:30:DC:D3:B2:BF:D1:95:BC:61:23:3A:27:94:BD:E0
X509v3 Authority Key Identifier:
keyid:94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/Z6KDZKow3NOyv9GVvGEjOieUveA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.149.15.0/24
Signature Algorithm: sha256WithRSAEncryption
87:b2:74:36:55:27:30:2b:bc:55:80:c5:d3:2c:92:36:0f:18:
e9:fa:55:1b:34:30:02:36:e8:87:88:26:85:ac:ad:99:7f:45:
a0:bd:45:95:51:d4:bb:fb:dd:5c:64:64:86:ab:82:25:5c:0e:
bb:46:4d:8d:fd:5a:cf:38:ef:93:06:4f:ac:2a:d4:b4:e2:0d:
26:a2:b2:57:e5:a0:9c:b7:7d:b2:37:26:00:0c:94:0c:19:b1:
2c:39:55:6f:a6:bb:8c:55:bf:1a:f4:ee:18:c4:b3:37:1b:a3:
5c:f5:8b:6c:f8:fc:81:98:fb:0d:86:9f:ec:9d:bd:06:a1:b9:
d0:bb:6c:60:de:9a:7d:ac:b5:4b:04:01:bb:d9:cd:3d:4a:a7:
d3:f2:95:d8:b3:cf:14:52:8c:eb:0c:f6:e0:71:a6:05:e9:3f:
34:74:f6:75:a1:82:87:8b:e6:b1:78:c5:4f:86:f2:e1:8f:ab:
93:71:39:b4:60:8c:75:3d:b3:2d:94:7e:05:4f:90:8d:6f:6f:
46:3e:61:8f:0b:15:fb:72:5f:fa:c5:d4:25:9e:0d:b2:d8:2d:
c0:8c:23:73:79:7a:9d:b2:f0:c0:3d:0c:9a:d2:74:26:68:43:
f2:4e:14:47:54:8a:58:2f:87:c6:03:b9:38:ba:56:47:ef:02:
38:e8:34:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:31 2024 by rpki-client on console-fra.rpki-client.org