Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/OW3PN-XOnmMn9gXBChUk2Vvxr6U.roa
File: OW3PN-XOnmMn9gXBChUk2Vvxr6U.roa (raw, json)
Hash identifier: 7V8a6ZXpw7p96z2t2wE99OWTVOgNLxQFBjTygK7v2Po=
Subject key identifier: 39:6D:CF:37:E5:CE:9E:63:27:F6:05:C1:0A:15:24:D9:5B:F1:AF:A5
Certificate issuer: /CN=a849204ca4f0eb4e56e08e099fe3785ce06ffeaa
Certificate serial: 0A99227E
Authority key identifier: A8:49:20:4C:A4:F0:EB:4E:56:E0:8E:09:9F:E3:78:5C:E0:6F:FE:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qEkgTKTw605W4I4Jn-N4XOBv_qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/OW3PN-XOnmMn9gXBChUk2Vvxr6U.roa
Signing time: Tue 08 Mar 2022 13:12:38 +0000
ROA not before: Tue 08 Mar 2022 13:12:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204175
IP address blocks: 185.228.118.0/24 maxlen: 24
185.228.117.0/24 maxlen: 24
185.228.116.0/24 maxlen: 24
185.228.116.0/22 maxlen: 22
185.228.119.0/24 maxlen: 24
185.177.43.0/24 maxlen: 24
185.177.42.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 177807998 (0xa99227e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a849204ca4f0eb4e56e08e099fe3785ce06ffeaa
Validity
Not Before: Mar 8 13:12:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=396dcf37e5ce9e6327f605c10a1524d95bf1afa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:84:44:77:13:c3:92:e0:5c:37:49:2e:6c:18:
53:97:bd:cb:26:8b:3f:7a:ae:55:21:d3:be:8d:39:
69:62:0b:83:c8:d5:36:c1:93:9c:6a:50:21:fb:ed:
6c:fb:f4:5f:1d:49:32:ad:c4:34:14:f1:29:33:79:
cd:69:1c:58:fb:c9:ec:6b:b2:92:99:32:de:bb:5e:
bd:52:cb:d0:13:5e:6b:2e:23:98:74:46:a8:04:20:
62:46:f6:07:c5:a5:8c:3c:c3:ca:5b:dd:a2:ba:02:
1f:ef:db:53:91:a6:12:5e:8b:d4:33:4a:2e:48:8d:
98:56:c4:e5:ee:fc:eb:e8:8d:1e:ec:af:a5:4b:14:
9d:1f:fd:5a:24:08:89:54:36:50:ba:be:4c:6f:bd:
ae:66:be:85:1d:ba:8c:55:c4:d1:5e:00:f4:3c:ec:
44:ab:11:1b:0b:22:1d:93:8e:02:8a:28:60:29:e5:
1e:27:bb:ba:d6:32:ad:a2:19:8e:64:e3:db:6e:1a:
30:1b:14:4c:93:0a:9a:3a:7d:06:8b:5a:c3:8c:71:
29:c0:c6:75:04:ff:2f:ab:8f:fe:2b:d9:fe:26:18:
f4:a6:ec:42:8e:96:c9:d9:e9:35:1e:c9:ed:56:d0:
ea:45:29:52:2c:9a:70:c7:de:a0:96:1d:7a:ea:28:
96:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:6D:CF:37:E5:CE:9E:63:27:F6:05:C1:0A:15:24:D9:5B:F1:AF:A5
X509v3 Authority Key Identifier:
keyid:A8:49:20:4C:A4:F0:EB:4E:56:E0:8E:09:9F:E3:78:5C:E0:6F:FE:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qEkgTKTw605W4I4Jn-N4XOBv_qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/OW3PN-XOnmMn9gXBChUk2Vvxr6U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/qEkgTKTw605W4I4Jn-N4XOBv_qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.177.42.0/23
185.228.116.0/22
Signature Algorithm: sha256WithRSAEncryption
6a:cd:aa:d1:68:b1:34:bf:9f:38:da:20:cd:1d:17:a1:06:7e:
25:d4:ed:9c:be:1d:8a:95:0b:65:71:08:07:f3:6a:40:72:c0:
2f:ff:58:b2:e5:4b:a4:f0:63:64:35:5f:9f:d2:16:2b:47:db:
82:78:d2:e7:0a:45:b1:a1:1f:30:28:77:d3:8e:0d:7e:73:8a:
a2:58:97:ab:43:6f:ab:d8:76:b3:22:66:0a:65:17:aa:95:41:
1e:d0:5d:31:ca:80:42:32:78:08:97:28:7f:30:62:2c:f9:bf:
11:84:94:eb:0c:2b:41:29:89:77:e4:de:6e:d8:9f:1c:8f:d8:
81:8e:9a:35:fd:c0:7a:22:f9:1e:2e:84:be:22:a4:d8:7b:d4:
b2:54:2e:aa:92:58:2f:24:78:54:40:07:52:5d:c6:e8:e3:53:
d5:c5:0f:bc:51:b7:ac:e9:24:74:ab:e3:11:07:31:4a:e9:99:
a9:6d:53:52:89:7b:c3:82:ee:14:ff:a6:ef:49:0c:b8:37:19:
43:14:5c:52:6b:7d:04:22:4c:8d:cf:b8:a2:a0:68:f2:bd:3a:
f3:b0:4b:f7:f7:90:3c:ea:45:0a:66:ee:e1:68:e7:7d:05:0e:
0d:56:65:4e:2f:d5:74:1f:0f:8a:09:50:78:ee:11:2a:87:f1:
e8:98:12:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:02 2024 by rpki-client on console-fra.rpki-client.org