Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/063fa4-17de-4595-bc86-ce4b6250bb4d/1/6LoQfLpZj6k1K17zXUsBjJBc00U.roa
File: 6LoQfLpZj6k1K17zXUsBjJBc00U.roa (raw, json)
Hash identifier: XRrJqcvV6UNV+tCR6kLM3mhhJUz91lvg5AoRAJAC25k=
Subject key identifier: E8:BA:10:7C:BA:59:8F:A9:35:2B:5E:F3:5D:4B:01:8C:90:5C:D3:45
Certificate issuer: /CN=91dd2314dd9b7c61d71d4dbeda8fa3965c424570
Certificate serial: 03698C48
Authority key identifier: 91:DD:23:14:DD:9B:7C:61:D7:1D:4D:BE:DA:8F:A3:96:5C:42:45:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kd0jFN2bfGHXHU2-2o-jllxCRXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/063fa4-17de-4595-bc86-ce4b6250bb4d/1/6LoQfLpZj6k1K17zXUsBjJBc00U.roa
Signing time: Sat 01 Jan 2022 16:03:41 +0000
ROA not before: Sat 01 Jan 2022 16:03:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39093
IP address blocks: 185.212.184.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57248840 (0x3698c48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91dd2314dd9b7c61d71d4dbeda8fa3965c424570
Validity
Not Before: Jan 1 16:03:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e8ba107cba598fa9352b5ef35d4b018c905cd345
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:2a:80:cf:ab:5e:c9:82:4f:1f:54:eb:b5:73:
68:1c:a1:16:a3:8a:82:9c:f8:d5:d5:9b:64:89:3d:
5c:df:97:44:01:83:3c:36:43:f2:d7:cd:12:03:6c:
9b:41:ec:3f:40:d4:8b:f3:9f:83:40:46:8c:88:a1:
ae:b6:c7:ae:46:11:91:6c:42:42:01:a7:7b:50:e3:
81:c1:1b:a7:1d:ca:52:e2:95:dd:67:7b:21:a3:af:
df:4e:45:a2:f5:36:8c:1c:94:2c:b3:55:00:2d:a5:
1e:95:92:f7:d1:6a:8e:37:41:ae:b6:10:de:eb:85:
39:ee:e0:37:0f:ab:43:dc:9c:f7:51:91:31:1e:d2:
6b:04:86:35:dd:13:02:34:ff:49:3b:88:2e:0d:b1:
da:55:e0:e3:ca:d4:8c:b1:93:c4:fa:9f:9f:cf:b6:
30:9f:20:f8:50:35:04:8b:97:eb:b4:67:cd:e5:80:
e7:37:3a:41:08:af:ce:b5:85:ae:71:8a:b6:b7:69:
f6:a8:06:fd:83:b5:d0:74:bb:fc:63:4b:22:d0:e9:
47:52:cd:06:84:c5:11:7b:bc:a5:5a:77:ad:ab:7f:
20:f4:de:41:b6:0e:4a:ff:08:54:b6:fc:22:e5:80:
b4:79:d6:b3:77:bd:94:2c:d1:58:61:14:65:fb:8d:
b2:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:BA:10:7C:BA:59:8F:A9:35:2B:5E:F3:5D:4B:01:8C:90:5C:D3:45
X509v3 Authority Key Identifier:
keyid:91:DD:23:14:DD:9B:7C:61:D7:1D:4D:BE:DA:8F:A3:96:5C:42:45:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kd0jFN2bfGHXHU2-2o-jllxCRXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/063fa4-17de-4595-bc86-ce4b6250bb4d/1/6LoQfLpZj6k1K17zXUsBjJBc00U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/063fa4-17de-4595-bc86-ce4b6250bb4d/1/kd0jFN2bfGHXHU2-2o-jllxCRXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.212.184.0/22
Signature Algorithm: sha256WithRSAEncryption
1d:46:92:bc:c6:d6:56:c1:4d:91:fb:f7:56:6a:b6:be:43:40:
e2:40:d0:99:c5:47:d3:62:2f:5a:60:20:3a:38:73:d8:a7:8e:
d2:14:42:99:4a:41:af:2e:08:0c:71:e5:fe:d8:c8:91:98:68:
12:25:28:ec:ab:f9:9b:b2:72:0e:d3:e5:9e:bc:90:37:3b:d8:
95:bd:2a:c7:90:fa:21:0c:65:34:b0:4a:e3:65:9b:1c:cc:36:
d7:4a:73:9d:54:21:dd:fa:f8:a0:60:c6:d1:0a:21:c2:76:ca:
ae:5c:34:02:a4:ba:5d:50:5f:45:2a:94:bd:51:23:be:fc:1a:
d4:19:be:ae:88:22:85:0b:69:01:e3:45:d0:5a:d9:11:cf:d6:
8f:4e:f8:03:29:f2:0c:ac:1a:f9:07:52:e9:57:44:59:c9:19:
a2:01:9b:27:3d:4b:19:ed:44:b5:ec:e2:e7:5b:18:76:15:c2:
4a:a3:16:e0:09:5e:e1:b5:d0:7c:1b:ad:d1:64:db:f3:b5:be:
df:b5:de:d8:c8:62:5f:43:78:0e:05:d0:0d:ea:63:e9:6a:37:
c5:8c:d9:63:48:58:e2:8d:54:74:0b:bc:55:b0:fd:84:3d:85:
2d:bb:7a:c5:18:89:99:90:ac:bf:fa:1b:4b:69:2e:bb:3c:51:
b9:3b:25:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:17 2024 by rpki-client on console-ams.rpki-client.org