Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/f-iHh5_B4d1SqZCTDT-6XjsrCNw.roa
File: f-iHh5_B4d1SqZCTDT-6XjsrCNw.roa (raw, json)
Hash identifier: 03AeC8ZNuepUgUqDsJ/rI8nb9YhuLMzUqmO5mP4CUCQ=
Subject key identifier: 7F:E8:87:87:9F:C1:E1:DD:52:A9:90:93:0D:3F:BA:5E:3B:2B:08:DC
Certificate issuer: /CN=2c96946c501ddf48696da2cf110fdceb286fac98
Certificate serial: 38181D16
Authority key identifier: 2C:96:94:6C:50:1D:DF:48:69:6D:A2:CF:11:0F:DC:EB:28:6F:AC:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LJaUbFAd30hpbaLPEQ_c6yhvrJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/f-iHh5_B4d1SqZCTDT-6XjsrCNw.roa
Signing time: Thu 20 Jan 2022 08:59:14 +0000
ROA not before: Thu 20 Jan 2022 08:59:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47543
IP address blocks: 185.234.97.0/24 maxlen: 24
185.234.96.0/24 maxlen: 24
185.234.98.0/24 maxlen: 24
185.27.18.0/24 maxlen: 24
2a00:1188:10::/48 maxlen: 64
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 941104406 (0x38181d16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c96946c501ddf48696da2cf110fdceb286fac98
Validity
Not Before: Jan 20 08:59:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7fe887879fc1e1dd52a990930d3fba5e3b2b08dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:83:96:8d:72:9e:68:0e:c9:c0:cf:31:f4:e0:
73:ec:5d:76:f8:f1:31:8a:2e:3f:9f:13:25:b8:64:
00:a8:11:39:32:f0:22:d4:bc:71:1e:06:96:66:fd:
20:f1:0d:a5:ef:8d:b8:69:bc:3f:d4:fa:96:15:c0:
dc:88:fe:ae:cd:48:04:89:e3:22:cb:11:6b:4c:dd:
c2:ab:d2:d1:c6:e0:c5:06:66:e3:da:31:50:01:85:
34:9f:e5:f5:e5:2d:70:d1:63:be:81:82:9a:a0:d1:
e2:4a:36:dd:b3:1e:bf:96:e0:70:2a:40:0e:01:db:
74:39:42:fe:a3:fe:1a:f2:56:17:a0:2c:f5:2d:f6:
c9:b9:0a:f6:1c:bf:65:ce:e3:4f:ae:7f:ac:55:ec:
27:59:67:f3:b8:fa:b4:f0:49:8f:22:81:f0:33:75:
b8:97:36:94:64:56:99:e9:93:ff:cd:fc:13:bf:c3:
75:d2:85:50:d3:6e:86:d1:71:81:b2:06:ba:f0:32:
bf:3b:e5:b6:34:d2:94:14:c8:55:d4:d4:1d:5b:1b:
23:2b:ba:3a:0e:1a:90:70:a1:ff:21:51:0a:03:c4:
0c:7e:0c:1a:96:b2:6b:55:31:00:6d:06:ad:7d:e0:
d8:b3:8a:65:29:81:b9:d1:5b:41:88:08:5d:23:f9:
13:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:E8:87:87:9F:C1:E1:DD:52:A9:90:93:0D:3F:BA:5E:3B:2B:08:DC
X509v3 Authority Key Identifier:
keyid:2C:96:94:6C:50:1D:DF:48:69:6D:A2:CF:11:0F:DC:EB:28:6F:AC:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LJaUbFAd30hpbaLPEQ_c6yhvrJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/f-iHh5_B4d1SqZCTDT-6XjsrCNw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/LJaUbFAd30hpbaLPEQ_c6yhvrJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.27.18.0/24
185.234.96.0-185.234.98.255
IPv6:
2a00:1188:10::/48
Signature Algorithm: sha256WithRSAEncryption
6a:d3:aa:32:8c:0a:a3:31:44:00:51:1d:52:2b:e8:17:d0:d8:
b7:12:eb:60:21:b0:15:97:89:1d:3c:3f:a5:a6:9f:ca:68:7f:
71:92:b5:c8:7e:92:e6:75:1f:8d:1f:3b:96:4b:4f:1c:89:3f:
e9:92:38:64:7f:d2:82:52:24:f5:de:71:92:c3:8a:28:66:5b:
3b:05:5c:3d:dd:dd:00:ff:0e:2b:06:b8:65:e9:d0:d5:16:4a:
c1:ed:ff:49:b8:8d:78:8a:4d:96:6e:df:f2:6d:d5:81:52:17:
55:6c:91:e2:43:c4:ae:ed:cd:66:ff:ea:c4:e2:0e:0a:7f:0f:
f1:a8:55:5b:19:29:a6:a7:e2:8b:d6:d7:2f:21:7f:08:39:81:
0d:e7:c7:9b:56:7b:a0:59:73:f3:81:46:cb:8f:73:75:7a:f2:
48:6d:da:fb:87:03:47:8c:e3:cd:35:1b:bb:db:a0:89:d8:1c:
17:cc:ff:ff:f4:e6:1d:42:ae:93:db:0d:2b:59:20:47:3f:28:
3a:7b:dd:fb:88:23:73:eb:38:e6:31:17:90:54:1c:77:b4:bf:
fb:eb:9e:09:a2:0c:d8:21:5d:5f:47:d7:48:a7:24:7d:17:5e:
fb:cf:b5:c7:ab:cf:93:6b:f1:c3:7e:70:43:cf:99:b0:54:d8:
95:97:5a:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:03 2024 by rpki-client on console-ams.rpki-client.org