Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/yyWsI5J7MmdZljYaLqPA19AAM3o.roa
File: yyWsI5J7MmdZljYaLqPA19AAM3o.roa (raw, json)
Hash identifier: Kmd4hGlSFYSB6mKSPYvh1qFuoTHZpuZhMhzvvWrP+fk=
Subject key identifier: CB:25:AC:23:92:7B:32:67:59:96:36:1A:2E:A3:C0:D7:D0:00:33:7A
Certificate issuer: /CN=94166b704843d3d9754095c83a91b493828200a2
Certificate serial: 0A643BE6
Authority key identifier: 94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/yyWsI5J7MmdZljYaLqPA19AAM3o.roa
Signing time: Wed 09 Mar 2022 09:48:24 +0000
ROA not before: Wed 09 Mar 2022 09:48:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 40676
IP address blocks: 185.149.14.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 174341094 (0xa643be6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94166b704843d3d9754095c83a91b493828200a2
Validity
Not Before: Mar 9 09:48:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cb25ac23927b32675996361a2ea3c0d7d000337a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:51:ab:3d:f2:f4:3f:57:e2:3f:44:77:98:5e:
ac:1b:22:6b:fb:d8:1d:15:12:8b:8e:40:98:af:1f:
56:a4:e0:1a:a1:f8:bb:09:63:31:2d:d9:cb:db:51:
40:6b:3d:58:18:63:3f:43:05:e1:69:cd:64:fe:47:
29:6b:25:a8:70:6a:b9:94:bd:7e:bd:51:57:9a:ab:
3d:74:09:01:54:29:b8:15:d9:9d:4d:d8:55:67:4f:
93:27:fb:c1:05:e4:f5:e6:49:fa:88:73:eb:51:83:
6e:f9:2d:d3:6a:87:5f:14:4d:0b:13:67:6c:9d:e4:
ab:6c:a4:eb:e6:79:66:02:30:43:85:91:63:ed:63:
6c:64:7f:bc:f0:bd:3c:dc:11:1e:5a:aa:94:73:ce:
2b:d6:52:b9:67:6c:d6:7c:29:49:25:6c:50:1a:06:
ef:0c:45:5e:ff:43:2e:8f:95:2e:17:4f:8b:39:a6:
c6:d0:32:38:64:d7:ab:66:eb:41:86:95:d7:d4:fa:
ff:c6:c1:86:f7:d5:db:0a:33:de:fc:fb:9b:a2:6c:
f8:bb:41:7d:d7:d0:23:43:3f:ee:b2:70:a6:01:18:
32:0e:75:cf:4d:00:7b:fa:00:d2:86:63:ee:df:a7:
4d:7b:98:71:10:a9:4e:a1:c3:3d:94:dc:64:73:d7:
5a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:25:AC:23:92:7B:32:67:59:96:36:1A:2E:A3:C0:D7:D0:00:33:7A
X509v3 Authority Key Identifier:
keyid:94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/yyWsI5J7MmdZljYaLqPA19AAM3o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.149.14.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:61:56:ae:c7:ed:3c:34:a0:f6:b9:58:e3:2a:a9:09:29:8a:
db:a8:d8:e2:4e:4d:1b:79:81:cc:ed:29:22:65:1e:78:46:b5:
51:70:5f:1f:a1:44:9a:47:c7:0f:15:06:ac:fc:fc:e1:78:0b:
5a:e1:ef:08:d8:73:56:41:12:53:d2:88:f1:47:7a:af:e9:eb:
9f:a5:96:78:7f:70:75:f9:c2:d5:51:51:d7:87:92:38:d9:cb:
00:07:fb:0e:3c:6f:05:2e:6f:4c:b6:6f:1e:af:61:eb:1c:48:
84:4d:c1:8d:0c:c2:fc:2b:07:b3:4c:86:ec:21:a7:8c:f3:a4:
8a:e1:dc:01:3e:b1:d7:7c:66:35:83:2a:a5:fb:9f:ad:7b:e5:
04:3e:27:6f:22:1a:27:d8:57:5b:09:60:f7:29:37:c9:28:84:
4f:aa:48:34:7b:ad:7e:2f:87:0f:bf:7c:a8:a5:5c:e1:8f:54:
6b:8a:1e:a4:9c:92:84:2e:2c:d2:72:bb:31:3b:30:a8:62:42:
85:a2:f6:14:e4:ba:11:e5:8d:7e:b6:37:fb:e5:2d:27:4e:22:
b6:6f:0c:2c:ec:d4:51:04:4f:bb:c1:2d:bd:25:5b:7d:4b:65:
b1:3d:6d:ca:b4:69:74:9f:b4:19:56:76:30:2a:01:6b:80:f8:
ee:e5:e1:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:31 2024 by rpki-client on console-fra.rpki-client.org