Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/5OJDuzK0urfGcWcqZrTMDxwaWu4.roa
File: 5OJDuzK0urfGcWcqZrTMDxwaWu4.roa (raw, json)
Hash identifier: gZz4itkeVZJmxnZZe7S53dk/nPitninmQmXo2Qy17Lw=
Subject key identifier: E4:E2:43:BB:32:B4:BA:B7:C6:71:67:2A:66:B4:CC:0F:1C:1A:5A:EE
Certificate issuer: /CN=a849204ca4f0eb4e56e08e099fe3785ce06ffeaa
Certificate serial: 018CC7273676CB9A59E46BFAE0F7994CE976
Authority key identifier: A8:49:20:4C:A4:F0:EB:4E:56:E0:8E:09:9F:E3:78:5C:E0:6F:FE:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qEkgTKTw605W4I4Jn-N4XOBv_qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/5OJDuzK0urfGcWcqZrTMDxwaWu4.roa
Signing time: Mon 01 Jan 2024 22:31:24 +0000
ROA not before: Mon 01 Jan 2024 22:31:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201453
IP address blocks: 185.230.145.0/24 maxlen: 24
185.230.144.0/22 maxlen: 22
185.230.144.0/24 maxlen: 24
185.160.231.0/24 maxlen: 24
185.160.230.0/24 maxlen: 24
185.160.229.0/24 maxlen: 24
185.160.228.0/24 maxlen: 24
185.160.228.0/22 maxlen: 22
185.232.132.0/22 maxlen: 22
185.232.135.0/24 maxlen: 24
185.232.134.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:36:76:cb:9a:59:e4:6b:fa:e0:f7:99:4c:e9:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a849204ca4f0eb4e56e08e099fe3785ce06ffeaa
Validity
Not Before: Jan 1 22:31:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e4e243bb32b4bab7c671672a66b4cc0f1c1a5aee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:96:78:ee:33:0d:80:b4:4f:2f:95:9b:4e:01:
ab:91:60:13:bb:af:1b:d0:b0:d7:18:5d:2c:ed:cd:
c6:e0:26:65:3b:0d:cb:ab:f5:0e:6d:c3:df:81:9b:
30:47:21:3f:b3:4f:2e:51:f0:83:9e:20:83:e3:e7:
84:72:05:76:6e:d0:23:fa:64:70:88:c1:f5:a3:7f:
79:10:6a:6c:e2:29:26:a3:0d:76:55:ee:a9:da:d9:
20:d5:b2:6e:e3:a0:70:4d:d8:49:9c:b3:ca:4e:42:
f2:c0:c0:25:3e:5d:26:1c:35:dd:f5:62:8f:f4:6f:
b7:6b:3a:8d:a2:19:a4:8a:e9:a6:d4:e6:3a:3f:aa:
cc:a8:f7:37:31:83:b0:7e:a1:2a:38:68:61:26:54:
1d:ed:e7:fd:f6:88:e4:ab:d3:dc:8f:04:0b:6f:3b:
e3:c8:43:e2:86:a9:88:c1:2d:09:88:32:45:77:f2:
a1:d9:86:4d:10:fc:c7:e7:45:c8:00:76:de:13:c3:
ed:db:ba:a3:17:7b:96:ad:06:eb:00:80:d6:92:fc:
bb:2f:fb:0f:d8:55:d0:1c:1d:49:85:17:c3:a5:87:
b5:ec:92:65:8d:02:0b:24:b7:44:c9:df:4a:f0:dc:
ab:34:a4:b7:f3:0e:39:ee:d1:42:3c:11:4f:52:4e:
1c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:E2:43:BB:32:B4:BA:B7:C6:71:67:2A:66:B4:CC:0F:1C:1A:5A:EE
X509v3 Authority Key Identifier:
keyid:A8:49:20:4C:A4:F0:EB:4E:56:E0:8E:09:9F:E3:78:5C:E0:6F:FE:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qEkgTKTw605W4I4Jn-N4XOBv_qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/5OJDuzK0urfGcWcqZrTMDxwaWu4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/qEkgTKTw605W4I4Jn-N4XOBv_qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.160.228.0/22
185.230.144.0/22
185.232.132.0/22
Signature Algorithm: sha256WithRSAEncryption
05:8c:bd:6f:2a:95:65:2c:a0:a8:41:d4:26:9d:34:2b:9e:8e:
69:0d:a7:07:4a:e6:3b:04:26:29:09:c1:b3:bb:03:78:9f:38:
c8:55:2b:14:1c:74:9e:48:7f:78:93:9c:eb:4c:94:a9:1a:95:
73:24:54:26:35:24:68:fb:85:31:fd:71:04:19:67:5a:61:3e:
6c:72:16:90:1a:cf:2a:4a:11:0e:ac:b0:99:58:90:e0:b8:23:
99:59:d9:49:91:38:98:6e:c4:89:d2:3e:f0:4f:e2:72:cb:54:
22:ac:f1:cf:96:cd:56:9a:a7:75:6f:40:2a:f9:24:ab:58:7f:
ea:7c:83:f6:6b:d6:db:16:dd:32:1d:12:c2:00:68:5b:9f:66:
1a:5b:38:aa:ee:dd:c1:c1:37:65:43:45:6a:fc:e6:d5:7f:e2:
f2:d1:a5:29:3d:16:30:a3:56:70:0d:af:4d:17:59:df:cc:63:
af:69:12:8c:e3:4a:15:38:f4:83:1e:c3:80:3e:74:86:4b:36:
20:cc:02:e5:a1:c4:e7:4f:fe:39:35:a9:db:7f:34:a4:5c:58:
dc:e5:47:db:c5:03:ba:20:ca:49:db:37:e4:69:4b:9f:ba:7a:
04:7c:e9:cf:75:9d:17:83:28:80:6d:91:15:b9:eb:67:88:0b:
a2:ff:10:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:02 2024 by rpki-client on console-fra.rpki-client.org