Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/NDtrNnUDzJG9OWO6hgPicVnWUqY.roa
File: NDtrNnUDzJG9OWO6hgPicVnWUqY.roa (raw, json)
Hash identifier: ATLv7BBGc+EKtxGmBgrycKcwpEdm0Lx19n00Ihs458g=
Subject key identifier: 34:3B:6B:36:75:03:CC:91:BD:39:63:BA:86:03:E2:71:59:D6:52:A6
Certificate issuer: /CN=465eba5c1a80f86a4589278edd9304b3f5169f83
Certificate serial: 0543070A
Authority key identifier: 46:5E:BA:5C:1A:80:F8:6A:45:89:27:8E:DD:93:04:B3:F5:16:9F:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/NDtrNnUDzJG9OWO6hgPicVnWUqY.roa
Signing time: Sat 01 Jan 2022 11:58:47 +0000
ROA not before: Sat 01 Jan 2022 11:58:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202580
IP address blocks: 185.233.185.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88278794 (0x543070a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=465eba5c1a80f86a4589278edd9304b3f5169f83
Validity
Not Before: Jan 1 11:58:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=343b6b367503cc91bd3963ba8603e27159d652a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:bc:59:60:0d:50:b1:b4:5f:7a:bc:0b:a9:50:
51:ab:1e:51:30:60:7b:05:3d:33:76:45:c7:04:43:
f4:a9:2f:d2:56:68:86:84:4b:02:2e:31:af:1b:9b:
36:52:ec:da:f9:10:cb:22:db:fe:d2:36:26:ed:99:
d0:b4:0c:c8:ea:7e:ef:a8:d5:01:b9:e5:3b:b0:d6:
4b:53:bb:bd:1e:1e:20:8b:5e:79:ff:e8:44:14:6d:
3e:23:1c:12:54:1a:d9:f5:eb:e3:96:44:b4:ba:cf:
7d:22:d1:f1:fd:22:b9:b9:0d:be:f1:7b:16:95:34:
6f:7b:fc:cf:0c:02:ed:a1:cd:4c:95:c0:0e:22:52:
f8:20:e9:13:5f:ea:7e:3e:e3:6f:16:57:c7:b0:58:
21:80:d0:25:49:c6:d2:01:1b:36:54:99:4b:f4:e5:
c3:2d:d1:b9:a8:e0:a3:ed:e1:58:44:85:ff:db:5c:
de:b9:6c:2c:65:c8:cd:02:d0:8f:c0:a1:90:51:38:
0f:3c:45:57:61:49:47:c5:4b:d3:5e:82:c8:4f:47:
cc:17:20:49:13:63:84:f8:ee:cf:5d:72:69:db:93:
e8:e2:72:49:a2:aa:aa:4c:c9:5b:a4:1e:fe:ff:43:
fb:df:5a:b5:6d:72:32:05:f8:56:a5:33:f3:6d:32:
56:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:3B:6B:36:75:03:CC:91:BD:39:63:BA:86:03:E2:71:59:D6:52:A6
X509v3 Authority Key Identifier:
keyid:46:5E:BA:5C:1A:80:F8:6A:45:89:27:8E:DD:93:04:B3:F5:16:9F:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/NDtrNnUDzJG9OWO6hgPicVnWUqY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.233.185.0/24
Signature Algorithm: sha256WithRSAEncryption
00:56:b8:34:be:78:6e:3c:87:da:8d:06:9e:e9:12:23:0e:03:
77:82:60:25:c4:aa:1b:15:ac:db:45:f5:50:4d:b3:68:71:fb:
c8:6c:f2:c3:ff:c7:87:4e:d5:cf:49:d9:b0:ce:b2:10:55:24:
f7:16:dc:73:e9:15:32:42:1a:b6:6f:21:22:1c:d8:81:97:98:
20:78:53:16:ed:b7:ae:2c:c8:7f:01:d1:cc:93:4c:1c:a0:d8:
cf:b6:ca:a9:0a:21:17:5e:fd:7d:45:21:97:81:8a:b8:c5:00:
cb:20:b4:01:24:3c:b9:59:63:8d:db:13:bf:20:ff:83:d9:3a:
a2:e1:e6:4b:fa:73:8a:99:43:bb:27:30:6c:9a:29:88:7b:c8:
cc:c3:f6:38:f0:d7:fb:2d:56:68:2e:73:c6:e7:59:71:b9:e7:
a4:65:36:eb:0a:07:88:76:8a:de:c6:03:37:3d:b7:42:31:79:
bb:af:18:22:e5:5c:d9:39:1c:10:85:f1:b8:20:b6:40:4c:be:
b0:4b:73:7b:9b:b6:4e:3a:e1:ca:ec:88:95:e0:6c:73:c8:0d:
54:64:77:99:fc:0d:c3:1f:33:1b:e2:9c:14:45:9b:d0:05:5d:
51:e9:96:e6:0d:be:bf:ba:28:0b:82:ca:83:54:55:cb:18:d9:
70:fc:62:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:10 2024 by rpki-client on console-ams.rpki-client.org