Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/c06a23-0163-47a5-8608-30c0a111cd55/1/fc9prPOZr659dNZgjdOcMa2ascw.roa
File: fc9prPOZr659dNZgjdOcMa2ascw.roa (raw, json)
Hash identifier: pN2G6zBmajh6QnB62Iy9qn98yHqpzg8XJv+ImDuHlNE=
Subject key identifier: 7D:CF:69:AC:F3:99:AF:AE:7D:74:D6:60:8D:D3:9C:31:AD:9A:B1:CC
Certificate issuer: /CN=5ea8790a08c8e0d84588d94d1a51bca9abe7581d
Certificate serial: 01856BCA2FC3C6105439CB7B066831699A2E
Authority key identifier: 5E:A8:79:0A:08:C8:E0:D8:45:88:D9:4D:1A:51:BC:A9:AB:E7:58:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xqh5CgjI4NhFiNlNGlG8qavnWB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/c06a23-0163-47a5-8608-30c0a111cd55/1/fc9prPOZr659dNZgjdOcMa2ascw.roa
Signing time: Sun 01 Jan 2023 05:24:50 +0000
ROA not before: Sun 01 Jan 2023 05:24:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205009
IP address blocks: 185.232.228.0/24 maxlen: 24
185.232.229.0/24 maxlen: 24
185.232.230.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:ca:2f:c3:c6:10:54:39:cb:7b:06:68:31:69:9a:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ea8790a08c8e0d84588d94d1a51bca9abe7581d
Validity
Not Before: Jan 1 05:24:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7dcf69acf399afae7d74d6608dd39c31ad9ab1cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:ec:00:02:46:06:c8:1d:ab:2e:d9:c1:4d:11:
20:0e:76:b2:e4:60:75:76:b9:ce:61:a1:59:29:d3:
de:b6:7d:68:06:01:c1:b0:1d:e2:8b:7f:69:fc:db:
2f:c1:58:e3:db:48:49:e9:4a:02:f4:a8:23:0f:4d:
78:21:16:be:fc:ed:4d:89:f0:74:79:f4:cd:f2:53:
c2:f0:f9:69:44:53:e4:e7:56:e0:6b:d9:de:3a:a0:
d9:c9:7f:26:d1:a7:cf:28:47:51:8d:c8:b1:7d:b3:
8c:26:5d:86:f5:b4:98:3d:ab:e2:d0:5b:b6:8e:55:
3b:88:96:61:6e:ef:8c:e9:35:50:bb:52:ef:cd:ec:
aa:1b:3a:5b:c4:0c:a9:5b:36:ed:64:3e:8b:2b:73:
3c:9a:ae:8e:44:bf:4a:68:5a:64:49:4f:3d:a6:5f:
be:9e:30:86:2a:89:f1:b4:56:4e:d6:e8:50:e4:dc:
b9:44:cd:58:e2:83:a4:0a:0c:34:12:82:4e:be:27:
89:63:a1:47:08:6c:14:61:90:47:63:00:b0:97:ce:
15:13:e0:dc:e4:0e:ac:da:4f:eb:fe:b5:a4:df:da:
df:cc:cb:ca:a7:e6:e7:5c:fd:03:af:8a:0e:bb:0a:
7f:eb:57:6b:e1:2b:35:04:d6:3a:66:b6:c2:0e:12:
f1:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:CF:69:AC:F3:99:AF:AE:7D:74:D6:60:8D:D3:9C:31:AD:9A:B1:CC
X509v3 Authority Key Identifier:
keyid:5E:A8:79:0A:08:C8:E0:D8:45:88:D9:4D:1A:51:BC:A9:AB:E7:58:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xqh5CgjI4NhFiNlNGlG8qavnWB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c06a23-0163-47a5-8608-30c0a111cd55/1/fc9prPOZr659dNZgjdOcMa2ascw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c06a23-0163-47a5-8608-30c0a111cd55/1/Xqh5CgjI4NhFiNlNGlG8qavnWB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.232.228.0-185.232.230.255
Signature Algorithm: sha256WithRSAEncryption
a2:cd:e4:36:3a:53:54:8d:5e:52:09:a2:66:9f:10:c3:4e:88:
19:05:55:ba:17:61:f4:70:66:cc:1d:2d:81:01:92:3d:f8:98:
ff:8c:12:59:d1:ec:7b:f9:b6:44:39:44:ea:7f:6c:de:b3:a0:
1e:e2:18:a6:75:ea:38:f7:dd:a5:9b:de:b5:4b:3b:82:f6:71:
26:01:0b:23:dd:4c:35:3b:10:99:d0:14:b9:d5:9d:d9:6d:95:
1b:ff:ee:67:88:18:c6:be:66:59:85:34:c8:83:10:f7:e0:37:
17:70:92:ea:a3:97:64:c6:ce:14:79:da:bc:bd:cf:c6:5e:e2:
9b:13:24:5a:43:5c:7c:57:5e:17:4e:e9:ce:6f:6e:93:e4:81:
2e:c4:d0:f6:df:46:26:0a:4a:e5:da:61:67:ac:ff:38:76:de:
43:1e:1d:21:d9:d8:52:a8:b3:09:78:34:59:0b:b4:d1:c8:db:
0f:02:ae:04:42:2d:44:2a:72:03:72:93:e0:33:fb:bc:fc:09:
dc:c7:f8:83:2c:3a:c2:ee:bf:97:b0:8c:81:e5:f3:99:d8:11:
8b:2b:26:81:02:25:96:24:cf:58:3f:49:cf:4a:41:05:ee:0b:
54:6b:36:c3:00:46:e2:f9:6b:5c:d3:3c:7d:cd:68:ac:38:52:
8f:cf:bc:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:54:25 2025 by rpki-client