Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/a9399b-f867-4802-8c67-dbf2b3769445/1/lsOq0NU0Srxvo5Vk53gyG-bIdW4.roa
File: lsOq0NU0Srxvo5Vk53gyG-bIdW4.roa (raw, json)
Hash identifier: vMJbRaA1xmcDJjMlIJ+zZZVy/BORQwALx7Ovs5u43jY=
Subject key identifier: 96:C3:AA:D0:D5:34:4A:BC:6F:A3:95:64:E7:78:32:1B:E6:C8:75:6E
Certificate issuer: /CN=0a97c0c818868373c4014715053adaf61af1da1d
Certificate serial: 0C1E15D3
Authority key identifier: 0A:97:C0:C8:18:86:83:73:C4:01:47:15:05:3A:DA:F6:1A:F1:DA:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CpfAyBiGg3PEAUcVBTra9hrx2h0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/a9399b-f867-4802-8c67-dbf2b3769445/1/lsOq0NU0Srxvo5Vk53gyG-bIdW4.roa
Signing time: Sat 01 Jan 2022 15:54:47 +0000
ROA not before: Sat 01 Jan 2022 15:54:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60068
IP address blocks: 185.180.13.0/24 maxlen: 24
185.180.14.0/23 maxlen: 23
185.180.12.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 203298259 (0xc1e15d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a97c0c818868373c4014715053adaf61af1da1d
Validity
Not Before: Jan 1 15:54:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=96c3aad0d5344abc6fa39564e778321be6c8756e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e9:e2:1b:c0:3a:9e:c9:ad:fb:d7:f5:ce:36:
9a:fc:6b:39:dd:9c:37:62:83:1b:de:75:11:92:4c:
56:86:93:6a:06:87:0a:8a:21:45:5e:38:18:26:8e:
ba:08:8e:80:3c:d8:32:d0:b9:ba:c0:5c:83:fc:95:
98:24:9c:17:2e:1c:9c:d4:57:d5:cb:80:9f:71:e2:
42:2e:4f:77:b5:3f:f6:6a:bb:02:cb:28:54:a2:72:
3c:a7:82:f7:59:e0:a4:37:bb:03:a8:80:ff:92:93:
a7:d6:9b:ef:7b:e5:a3:77:6c:7d:83:a1:9a:6c:bb:
31:e1:02:f0:1d:99:60:17:e0:69:93:db:c3:3c:3a:
12:20:8d:46:71:37:a8:7d:d3:d7:a0:86:72:a6:1d:
e2:9b:45:27:e0:e4:c0:43:58:30:24:8b:3f:25:2a:
8a:dc:6a:20:e4:60:46:1b:df:00:22:a3:78:35:64:
48:31:7c:5a:3c:ff:8c:7b:5a:16:77:86:af:cb:82:
f2:76:38:74:dd:fe:3d:b2:d6:84:a7:18:4a:a7:bc:
4b:76:1d:3e:91:ef:5e:eb:fa:8e:8e:fe:6a:67:a9:
24:de:7d:ae:ba:34:9c:ea:3b:14:be:72:37:79:b5:
eb:44:3c:47:b6:fe:08:a2:60:75:9b:1c:a9:0a:f0:
d6:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:C3:AA:D0:D5:34:4A:BC:6F:A3:95:64:E7:78:32:1B:E6:C8:75:6E
X509v3 Authority Key Identifier:
keyid:0A:97:C0:C8:18:86:83:73:C4:01:47:15:05:3A:DA:F6:1A:F1:DA:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CpfAyBiGg3PEAUcVBTra9hrx2h0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a9399b-f867-4802-8c67-dbf2b3769445/1/lsOq0NU0Srxvo5Vk53gyG-bIdW4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a9399b-f867-4802-8c67-dbf2b3769445/1/CpfAyBiGg3PEAUcVBTra9hrx2h0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.180.12.0/22
Signature Algorithm: sha256WithRSAEncryption
0f:a5:ce:e1:85:8d:5a:86:94:68:0d:6a:54:4f:df:4f:42:6c:
24:76:2b:bb:92:c0:5d:c1:fc:8e:56:9a:4f:06:c5:01:50:e5:
10:52:3b:24:4a:40:5f:7f:8c:6b:9c:4b:01:8b:8f:d4:c9:d6:
f9:e4:89:9d:54:ed:8f:96:96:70:5b:0c:f3:a8:fb:4d:72:b4:
b5:fb:ad:f1:b4:2b:62:e8:2d:ce:32:1d:d7:37:f0:7b:d4:51:
aa:77:26:63:4e:be:5e:4c:1a:3a:9b:6b:ff:17:fc:ef:fd:5e:
2a:97:0e:2b:28:6a:93:b4:84:98:40:53:32:65:f3:11:aa:78:
5b:c3:bb:5a:4b:77:ff:e5:d2:8c:20:8a:e4:cd:6e:b0:52:cc:
37:ca:c0:0d:c7:33:fd:7b:86:12:be:ed:60:1d:d6:d9:42:1c:
05:98:d5:4d:1d:c9:7b:d1:12:0c:46:6b:ba:94:ee:48:96:c6:
69:e5:7d:7c:78:98:61:ff:0e:01:c8:c7:60:63:fa:72:05:7f:
03:b2:4e:e6:4c:4f:97:5a:ed:b6:c8:f9:95:97:4f:40:2e:74:
76:d6:4e:06:a2:f6:48:c4:72:98:2b:6b:b9:a2:e6:91:30:a3:
5e:8b:a7:51:db:5f:d9:e7:e7:a3:b7:9c:ad:73:79:0e:35:c6:
29:be:03:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:03 2023 by rpki-client on console-fra.rpki-client.org