Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/g11IQ-0V1Vq6f9lY2zAgo1AlZu0.roa
File: g11IQ-0V1Vq6f9lY2zAgo1AlZu0.roa (raw, json)
Hash identifier: gdKTdKE5DFLTLc/s+gkkPEx4EzqBuEeOln6yH+yrZXM=
Subject key identifier: 83:5D:48:43:ED:15:D5:5A:BA:7F:D9:58:DB:30:20:A3:50:25:66:ED
Certificate issuer: /CN=94166b704843d3d9754095c83a91b493828200a2
Certificate serial: 0186F5C2290D8BDBF650FF7F5268A81F1D97
Authority key identifier: 94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/g11IQ-0V1Vq6f9lY2zAgo1AlZu0.roa
Signing time: Sat 18 Mar 2023 17:26:27 +0000
ROA not before: Sat 18 Mar 2023 17:26:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211826
IP address blocks: 185.149.13.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:f5:c2:29:0d:8b:db:f6:50:ff:7f:52:68:a8:1f:1d:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94166b704843d3d9754095c83a91b493828200a2
Validity
Not Before: Mar 18 17:26:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=835d4843ed15d55aba7fd958db3020a3502566ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:2f:dc:88:b4:0c:99:65:0c:70:af:70:58:e8:
cf:d4:06:3f:ba:e9:bb:ab:3e:a1:54:8f:8c:ef:31:
b6:0e:35:54:9f:21:6f:4f:4c:96:a6:0e:6e:de:63:
7d:48:d0:f2:96:48:b2:8a:fb:06:28:bd:61:0e:e3:
f9:8b:30:a8:80:e7:e9:8f:4f:7a:e2:51:e5:b6:43:
58:d0:6a:21:03:1a:41:fe:ea:37:2f:a1:ea:e5:30:
46:e8:6d:f6:29:b6:eb:75:cd:e1:ca:eb:8d:d8:79:
70:e7:db:f8:89:36:4c:d0:90:ab:d7:0d:42:5c:bf:
d0:c2:f3:c5:76:80:ba:9f:97:1d:45:b1:cf:12:53:
d9:48:65:b7:01:3e:5c:88:f4:de:a8:ec:aa:fa:db:
c9:05:aa:7b:3b:7f:31:da:40:a3:bc:bd:6f:ea:a9:
78:f3:79:25:5b:bc:53:68:99:1f:95:ec:fa:08:b4:
dc:fa:0c:48:47:87:26:ac:c9:70:62:7c:cb:ed:5e:
37:cd:fb:38:3c:37:84:5b:29:e3:c5:60:51:4e:d1:
28:5c:6d:1c:16:45:49:d4:43:9e:47:f1:66:10:c4:
b3:7f:f6:e5:c7:be:c9:93:1e:e3:1f:d5:84:78:78:
d0:0a:4b:63:d9:da:69:9d:57:91:cf:83:a2:f3:5c:
04:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:5D:48:43:ED:15:D5:5A:BA:7F:D9:58:DB:30:20:A3:50:25:66:ED
X509v3 Authority Key Identifier:
keyid:94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/g11IQ-0V1Vq6f9lY2zAgo1AlZu0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.149.13.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:41:20:91:bb:6c:0c:f2:da:2c:94:dd:40:88:35:d9:d8:21:
54:68:4d:0e:18:f3:2a:6d:ec:43:fc:16:6e:cf:d7:98:b0:3b:
9a:dd:25:10:cd:68:fd:5c:a0:d7:f8:e5:55:2e:7d:46:b2:bb:
75:3a:6e:8d:e8:81:d4:b1:ed:91:ac:d9:86:89:79:f6:2f:d3:
48:84:5d:3c:5d:e6:7b:94:4e:61:70:ef:d5:af:b1:da:ff:11:
4c:27:61:df:ab:b4:72:c2:0a:b5:14:fa:47:1a:2e:32:e0:b4:
9d:28:b5:d2:96:3b:c0:f3:f6:95:02:5c:5a:ef:2f:8f:26:ef:
1e:88:05:83:7b:a1:0b:c7:fb:c4:4c:9b:a3:0f:f7:a1:72:66:
a7:85:52:b6:d4:81:db:2f:fc:6a:18:e5:7c:9f:32:6a:91:d3:
65:09:6f:f5:e3:bd:b5:e8:25:32:e5:a6:7e:ba:65:05:e2:3f:
d4:85:48:2e:e0:01:4b:40:4f:0a:84:e4:6b:c4:2d:15:f3:33:
ef:70:b2:2c:cf:4e:16:db:40:1c:b1:29:a0:a5:1f:f0:7d:7b:
4a:22:d7:7d:45:25:cb:39:5b:b2:9c:33:5b:69:d2:1a:f2:dd:
f6:c8:26:22:3c:68:13:c0:a0:97:8d:7d:18:5f:70:82:ac:bb:
ff:c0:b0:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:31 2024 by rpki-client on console-fra.rpki-client.org