Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/6hCCEDtHPKFxBNO-X2NIvpULeoI.roa
File: 6hCCEDtHPKFxBNO-X2NIvpULeoI.roa (raw, json)
Hash identifier: StDqHRx/kYBwi1nWOzsyd9bgSqG12pvRM8Fxy2/nLmc=
Subject key identifier: EA:10:82:10:3B:47:3C:A1:71:04:D3:BE:5F:63:48:BE:95:0B:7A:82
Certificate issuer: /CN=6ba3186597742a926cd26504e1ed76f8543fdb26
Certificate serial: 0A9BC9B7
Authority key identifier: 6B:A3:18:65:97:74:2A:92:6C:D2:65:04:E1:ED:76:F8:54:3F:DB:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a6MYZZd0KpJs0mUE4e12-FQ_2yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/6hCCEDtHPKFxBNO-X2NIvpULeoI.roa
Signing time: Tue 22 Mar 2022 11:59:04 +0000
ROA not before: Tue 22 Mar 2022 11:59:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201453
IP address blocks: 185.221.191.0/24 maxlen: 24
185.221.190.0/24 maxlen: 24
185.221.189.0/24 maxlen: 24
185.221.188.0/22 maxlen: 22
185.183.17.0/24 maxlen: 24
185.183.16.0/24 maxlen: 24
185.183.16.0/22 maxlen: 22
185.183.19.0/24 maxlen: 24
185.183.18.0/24 maxlen: 24
185.219.218.0/24 maxlen: 24
185.219.216.0/22 maxlen: 22
185.219.219.0/24 maxlen: 24
185.178.83.0/24 maxlen: 24
185.178.82.0/24 maxlen: 24
185.178.80.0/22 maxlen: 22
185.178.81.0/24 maxlen: 24
185.178.80.0/24 maxlen: 24
185.225.148.0/22 maxlen: 22
185.225.148.0/24 maxlen: 24
185.163.166.0/24 maxlen: 24
185.163.165.0/24 maxlen: 24
185.163.164.0/24 maxlen: 24
185.163.164.0/22 maxlen: 22
185.163.167.0/24 maxlen: 24
185.224.95.0/24 maxlen: 24
185.224.94.0/24 maxlen: 24
185.194.24.0/22 maxlen: 22
185.194.24.0/24 maxlen: 24
185.74.192.0/24 maxlen: 24
185.74.192.0/22 maxlen: 22
185.192.183.0/24 maxlen: 24
185.192.182.0/24 maxlen: 24
185.192.180.0/22 maxlen: 22
185.192.181.0/24 maxlen: 24
185.192.180.0/24 maxlen: 24
185.194.25.0/24 maxlen: 24
185.194.27.0/24 maxlen: 24
185.194.26.0/24 maxlen: 24
2a05:4ac0::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 177981879 (0xa9bc9b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ba3186597742a926cd26504e1ed76f8543fdb26
Validity
Not Before: Mar 22 11:59:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ea1082103b473ca17104d3be5f6348be950b7a82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:77:fb:ce:76:81:7a:3c:16:96:a1:90:db:5c:
09:fc:de:29:52:f6:2f:77:4b:7c:62:2f:f7:c0:60:
39:f8:e4:8f:19:94:2c:87:3d:eb:83:91:93:2e:d9:
84:d7:2f:f5:2c:02:cc:d8:0e:fc:76:41:b4:f8:ec:
5f:01:67:3b:33:b0:4f:b8:9b:8f:ef:00:01:34:c0:
d1:1f:fe:8a:83:b6:4c:f2:57:71:76:e3:85:c8:63:
69:9b:c6:d5:8a:c1:c1:5c:9e:c9:63:d7:e9:d2:42:
5b:d7:3e:f1:ec:3a:57:e6:08:dd:5e:25:5d:da:72:
ef:9e:0f:60:b5:a0:92:76:7b:b4:92:aa:d9:bf:84:
94:ac:09:66:03:27:a1:46:fd:25:e7:2e:bd:69:c9:
cb:ba:98:bb:59:32:23:78:84:bf:dc:85:14:13:a1:
dd:bb:af:d3:63:b6:2a:0e:75:b0:c9:aa:38:ce:df:
27:6a:06:5f:07:c7:ed:ae:10:81:e5:ec:ae:74:f1:
e1:2c:1f:97:f6:90:48:de:bb:96:3e:2e:d8:a3:70:
e2:a0:8e:8d:4f:be:32:21:4d:30:5e:75:77:58:c4:
42:1d:e5:de:3e:f4:47:49:c6:45:15:9d:40:8b:90:
3b:6e:9e:31:4f:55:ec:b2:df:0c:7a:ec:58:29:b4:
0f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:10:82:10:3B:47:3C:A1:71:04:D3:BE:5F:63:48:BE:95:0B:7A:82
X509v3 Authority Key Identifier:
keyid:6B:A3:18:65:97:74:2A:92:6C:D2:65:04:E1:ED:76:F8:54:3F:DB:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6MYZZd0KpJs0mUE4e12-FQ_2yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/6hCCEDtHPKFxBNO-X2NIvpULeoI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/a6MYZZd0KpJs0mUE4e12-FQ_2yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.74.192.0/22
185.163.164.0/22
185.178.80.0/22
185.183.16.0/22
185.192.180.0/22
185.194.24.0/22
185.219.216.0/22
185.221.188.0/22
185.224.94.0/23
185.225.148.0/22
IPv6:
2a05:4ac0::/32
Signature Algorithm: sha256WithRSAEncryption
36:87:5b:9d:54:cc:11:53:38:79:86:f4:3a:3f:0d:16:71:77:
70:ea:bd:fe:22:be:8e:22:25:9b:24:ec:fa:8c:15:91:37:80:
60:a0:af:9c:36:d3:63:35:ae:0c:2e:f8:c8:54:a7:65:38:94:
53:44:c0:47:e4:b6:ad:90:c8:7e:62:ff:2e:49:39:0e:7c:3e:
e2:2b:3f:50:ad:c2:0a:92:2f:8b:82:78:99:00:b6:80:e2:26:
a5:3d:d0:0f:ae:21:8f:3e:89:f9:96:32:c4:ab:06:c2:b7:69:
12:1e:79:6e:54:6c:31:3e:8d:e6:08:57:a0:9e:5e:f9:c2:76:
aa:95:c2:7b:92:ed:08:33:06:b7:b2:5d:7f:70:dd:2b:63:0a:
41:75:8e:02:c2:04:92:b7:e7:1b:3e:e6:d9:0e:35:96:8e:b9:
b2:3d:58:a1:a0:0f:b6:fe:55:78:71:52:64:fc:0e:d2:77:a4:
bf:eb:cf:37:d0:47:0b:ad:f8:90:32:69:be:51:08:9d:94:ea:
61:2a:45:89:6f:7a:c8:3e:0d:9b:50:96:a8:ba:9b:d1:a5:98:
9b:ec:e7:66:9a:41:1a:ad:1b:72:a7:3a:00:bf:ad:83:3c:f9:
59:50:f4:8a:ed:8e:99:5b:c4:ab:c5:3d:8c:ab:64:78:e0:8e:
01:d8:0a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:38 2024 by rpki-client on console-fra.rpki-client.org