Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/8eddf2-7d7c-44a3-b0fd-110b768bf4c0/1/1-BgALw16ygxaqNmXs6kPLmw-Qy8.roa
File: 1-BgALw16ygxaqNmXs6kPLmw-Qy8.roa (raw, json)
Hash identifier: gMp99nvL7YOpcc9Sum8z5BlVjNLrhSINKxsPAXTPoiU=
Subject key identifier: F8:18:00:2F:0D:7A:CA:0C:5A:A8:D9:97:B3:A9:0F:2E:6C:3E:43:2F
Certificate issuer: /CN=9a26657e6b25449425b748645e7420c76ac2b3a4
Certificate serial: DF80
Authority key identifier: 9A:26:65:7E:6B:25:44:94:25:B7:48:64:5E:74:20:C7:6A:C2:B3:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/miZlfmslRJQlt0hkXnQgx2rCs6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/8eddf2-7d7c-44a3-b0fd-110b768bf4c0/1/1-BgALw16ygxaqNmXs6kPLmw-Qy8.roa
Signing time: Wed 26 Jan 2022 18:27:27 +0000
ROA not before: Wed 26 Jan 2022 18:27:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49392
IP address blocks: 185.207.213.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57216 (0xdf80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a26657e6b25449425b748645e7420c76ac2b3a4
Validity
Not Before: Jan 26 18:27:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f818002f0d7aca0c5aa8d997b3a90f2e6c3e432f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e1:c6:d7:ed:1e:79:67:9a:4d:85:2c:e5:40:
b6:7a:ed:92:3f:b4:ba:d3:ef:70:75:cc:9d:8f:98:
17:28:f4:06:c6:d8:52:ac:d2:ef:96:85:d4:9f:4f:
88:a9:b4:ef:60:87:33:e6:e4:68:d7:75:c2:a0:a2:
63:49:16:5a:b9:3c:33:80:50:54:17:bb:a5:81:c0:
8e:f3:05:9f:c3:b2:98:83:58:13:d4:6d:b9:3d:ac:
be:47:e3:d7:09:08:e6:e0:2b:5c:23:5e:55:fc:99:
96:98:bf:03:34:ba:f5:00:b9:44:9a:d5:82:ec:1b:
64:cf:64:c4:08:a5:28:ca:73:a6:e9:13:6d:eb:bb:
a4:f5:b9:58:e7:38:70:92:26:63:cc:7f:47:f2:78:
21:2f:19:96:03:27:b0:6e:d6:77:e8:b5:40:3f:ca:
b5:18:fc:8f:dc:8e:17:a6:25:6c:81:0d:bf:03:09:
b1:be:5b:ad:c6:13:04:b4:55:35:5e:0a:a7:78:e0:
9c:fa:bc:5d:7a:24:4f:b5:84:98:ed:bb:9d:b6:9b:
54:b4:4a:3f:99:91:8b:7d:54:a3:f7:bd:a4:b1:a4:
b8:16:d7:d3:08:93:1f:e9:53:18:e4:ef:4d:cc:15:
70:5f:27:86:6a:5c:e8:bf:62:88:84:0c:a4:d2:16:
99:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:18:00:2F:0D:7A:CA:0C:5A:A8:D9:97:B3:A9:0F:2E:6C:3E:43:2F
X509v3 Authority Key Identifier:
keyid:9A:26:65:7E:6B:25:44:94:25:B7:48:64:5E:74:20:C7:6A:C2:B3:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/miZlfmslRJQlt0hkXnQgx2rCs6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8eddf2-7d7c-44a3-b0fd-110b768bf4c0/1/1-BgALw16ygxaqNmXs6kPLmw-Qy8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8eddf2-7d7c-44a3-b0fd-110b768bf4c0/1/miZlfmslRJQlt0hkXnQgx2rCs6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.207.213.0/24
Signature Algorithm: sha256WithRSAEncryption
04:94:53:8a:f6:9c:08:39:b8:dd:93:2a:d9:8b:da:aa:84:b1:
41:14:af:cd:73:5b:c4:47:dc:cc:92:6b:f1:69:10:1f:2a:56:
e1:06:cc:de:68:40:d5:33:b1:ae:76:62:3b:bb:db:37:0f:13:
b1:93:b3:6f:0d:d0:52:a2:51:52:ae:18:2c:96:f2:1b:fe:ae:
e0:10:17:4a:b0:03:9f:49:66:a1:0d:66:dc:57:f2:eb:4b:bb:
8c:0d:91:54:ec:5f:8c:77:ec:81:8f:63:0a:d2:11:c1:dc:c6:
ad:28:49:85:b5:bc:28:b2:3b:0d:4c:f1:36:6f:8b:a0:29:0d:
ad:46:82:3a:34:99:4a:d5:66:02:07:34:f5:89:9e:d9:97:1b:
5b:6a:0c:90:84:9f:47:92:c5:4f:8d:3a:40:1b:33:19:9b:53:
2c:62:ec:9a:f2:6f:a7:c3:a7:33:12:bb:23:e6:cd:1c:2b:f9:
65:2d:fa:0d:70:cc:e4:03:6a:3f:70:08:ef:b1:64:41:db:e9:
53:31:04:f0:23:2a:77:21:69:d0:48:e9:4d:48:82:2d:15:83:
45:d8:9b:c7:31:14:ef:fc:eb:78:56:bc:83:42:12:40:a7:18:
d3:60:37:ce:f9:20:36:db:2d:2f:e7:e1:96:e1:86:2a:a6:8c:
d1:2a:d5:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:50:38 2025 by rpki-client