Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/105981-5524-4745-a8fc-884c4d4db657/1/J-G-HWBqXavnyT2SIxIK9z240Io.roa
File: J-G-HWBqXavnyT2SIxIK9z240Io.roa (raw, json)
Hash identifier: LzirddXSYfvDtcY6Bkvv9moUXQ7Si+MsBUpB2ngFjgs=
Subject key identifier: 27:E1:BE:1D:60:6A:5D:AB:E7:C9:3D:92:23:12:0A:F7:3D:B8:D0:8A
Certificate issuer: /CN=3cac6a681f6d3289e1c4502a1f15c7bae31f92dc
Certificate serial: 01856F9DDFD820F892B5D2E53BBE079F847E
Authority key identifier: 3C:AC:6A:68:1F:6D:32:89:E1:C4:50:2A:1F:15:C7:BA:E3:1F:92:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PKxqaB9tMonhxFAqHxXHuuMfktw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/105981-5524-4745-a8fc-884c4d4db657/1/J-G-HWBqXavnyT2SIxIK9z240Io.roa
Signing time: Sun 01 Jan 2023 23:14:55 +0000
ROA not before: Sun 01 Jan 2023 23:14:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3214
IP address blocks: 185.166.180.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:9d:df:d8:20:f8:92:b5:d2:e5:3b:be:07:9f:84:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cac6a681f6d3289e1c4502a1f15c7bae31f92dc
Validity
Not Before: Jan 1 23:14:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=27e1be1d606a5dabe7c93d9223120af73db8d08a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f1:6a:98:85:6d:0b:6f:94:e8:c6:96:b8:40:
05:77:d7:bb:74:94:6d:ee:51:a1:e9:55:ea:d5:a9:
c3:0d:3b:b1:45:b2:60:c8:49:4b:84:6d:ec:86:92:
93:16:22:ae:76:f5:0e:fc:c6:8f:1f:3f:ba:cd:ed:
a6:51:ac:fe:98:0e:59:3c:3e:d4:78:2e:2c:df:fa:
72:15:1f:84:12:d5:fe:4e:61:94:53:d9:13:80:f6:
62:11:f3:ed:4f:7e:39:52:4c:a8:7c:17:6d:80:f7:
78:c4:b3:e8:cf:40:84:d4:8c:40:f2:f3:73:3a:4d:
c0:41:ce:f3:f7:a3:01:53:ad:ce:5e:b0:d8:50:51:
5d:d0:72:23:de:d1:70:c7:df:1f:dd:b7:13:b4:f3:
5c:16:23:d1:a4:79:f8:92:8d:75:5e:bf:ae:b3:6c:
4c:62:73:e7:f1:24:f6:3a:00:41:fa:91:f9:6c:c0:
e6:40:31:48:26:c6:a1:f9:36:f6:32:08:5a:29:d4:
d3:45:a6:cf:bb:f1:1d:5e:f6:c3:51:25:aa:8b:a1:
3a:f3:07:74:f4:3f:bd:66:c5:17:79:bc:0e:9a:92:
31:a1:44:12:85:6a:b7:de:a1:b9:a7:9d:bc:39:1b:
bf:b6:23:57:9b:de:62:42:4d:81:fc:ad:cb:ba:e3:
df:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:E1:BE:1D:60:6A:5D:AB:E7:C9:3D:92:23:12:0A:F7:3D:B8:D0:8A
X509v3 Authority Key Identifier:
keyid:3C:AC:6A:68:1F:6D:32:89:E1:C4:50:2A:1F:15:C7:BA:E3:1F:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PKxqaB9tMonhxFAqHxXHuuMfktw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/105981-5524-4745-a8fc-884c4d4db657/1/J-G-HWBqXavnyT2SIxIK9z240Io.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/105981-5524-4745-a8fc-884c4d4db657/1/PKxqaB9tMonhxFAqHxXHuuMfktw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.166.180.0/22
Signature Algorithm: sha256WithRSAEncryption
36:20:f6:11:ee:e3:0b:82:fc:97:5b:40:4e:d8:4c:bd:17:60:
6d:30:e3:c0:d3:30:14:04:02:9e:2a:50:1e:c4:05:49:93:57:
f9:b0:82:a9:aa:8f:2a:0e:6a:09:58:b5:67:3a:a4:19:14:28:
9e:7f:d9:e3:9a:b2:77:59:2c:7a:4e:01:f8:d9:2d:43:0b:8f:
cd:a3:f5:c4:e9:af:c7:bc:7b:e2:94:66:77:bc:5a:0e:ad:f3:
35:2e:1b:b0:56:65:e7:f4:6e:7e:4d:ff:dc:6b:88:9d:b9:2e:
6f:94:81:37:eb:01:29:d3:bb:ea:5a:ab:fe:e7:8e:f2:ae:5f:
63:07:04:f7:4c:d0:4a:97:9b:49:3f:60:74:62:8e:c6:15:ff:
2d:9e:df:19:40:9b:74:cb:85:c7:4e:32:33:78:cf:ca:ef:e2:
d9:01:95:76:56:d6:24:07:cb:8f:8a:3a:e4:42:83:2e:89:0f:
db:6b:88:01:0e:2c:12:bc:8b:a9:73:75:20:6b:27:f7:84:76:
97:a4:da:11:62:73:f3:26:8d:10:b4:fd:d3:5d:a5:6a:e8:e9:
e0:1c:75:c1:54:4b:aa:42:68:a7:dd:83:e3:09:9a:d5:d1:e8:
3f:79:8d:7c:af:6c:27:93:1e:3f:4b:93:a5:fc:21:34:b5:54:
b0:fa:e4:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:29 2024 by rpki-client on console-fra.rpki-client.org