Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/79kP6QHtJYIvzzDZp-8arzQnELU.roa
File: 79kP6QHtJYIvzzDZp-8arzQnELU.roa (raw, json)
Hash identifier: OBiYnAcgC2qesyg/2Cke1w48dnbiC912L9EAc2R5c5k=
Subject key identifier: EF:D9:0F:E9:01:ED:25:82:2F:CF:30:D9:A7:EF:1A:AF:34:27:10:B5
Certificate issuer: /CN=6ba3186597742a926cd26504e1ed76f8543fdb26
Certificate serial: 018572FA7346C064B0CE9807828B7E50E336
Authority key identifier: 6B:A3:18:65:97:74:2A:92:6C:D2:65:04:E1:ED:76:F8:54:3F:DB:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a6MYZZd0KpJs0mUE4e12-FQ_2yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/79kP6QHtJYIvzzDZp-8arzQnELU.roa
Signing time: Mon 02 Jan 2023 14:54:54 +0000
ROA not before: Mon 02 Jan 2023 14:54:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213399
IP address blocks: 185.224.92.0/24 maxlen: 24
185.224.93.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:fa:73:46:c0:64:b0:ce:98:07:82:8b:7e:50:e3:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ba3186597742a926cd26504e1ed76f8543fdb26
Validity
Not Before: Jan 2 14:54:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=efd90fe901ed25822fcf30d9a7ef1aaf342710b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:66:8c:60:db:c1:08:20:9b:c4:65:01:e6:2c:
57:69:46:77:c8:62:c7:de:93:bd:f2:ac:dd:d7:2e:
d3:b9:5a:bd:ce:84:ea:13:ed:55:fb:c0:cc:a8:ce:
2a:52:87:cc:1c:c0:00:b5:a8:fc:18:d7:14:38:f1:
c8:eb:e5:e0:3b:c0:6e:43:73:5d:6f:cc:ed:9c:f1:
59:c4:bd:ac:62:79:10:80:3a:92:73:6c:47:06:a3:
5f:b2:1e:98:fd:60:2a:95:de:70:e9:9c:52:e4:7f:
ea:f8:91:7a:d4:11:db:d4:b6:4d:d5:da:25:d7:f2:
9b:cb:57:a0:b9:39:dc:46:0c:30:d7:4a:cb:32:ba:
1d:98:bf:57:06:d2:24:01:72:bc:dd:90:9f:19:9b:
19:79:68:17:68:10:1b:4b:a9:e6:ba:ad:88:99:35:
ff:a7:45:d9:cb:aa:1d:71:07:26:9a:da:1b:e5:dc:
e8:4a:58:ae:89:21:32:fc:2a:52:cf:51:c1:ff:47:
ad:d5:15:9d:50:97:f7:96:93:e3:7d:0d:43:23:de:
fd:8c:20:52:be:bd:f0:a7:22:2d:06:f7:f2:95:57:
c6:24:11:58:da:fc:31:78:37:17:a6:8f:ee:ee:f9:
e2:22:b1:d4:89:f0:c7:53:a9:98:69:20:9d:3b:5e:
52:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:D9:0F:E9:01:ED:25:82:2F:CF:30:D9:A7:EF:1A:AF:34:27:10:B5
X509v3 Authority Key Identifier:
keyid:6B:A3:18:65:97:74:2A:92:6C:D2:65:04:E1:ED:76:F8:54:3F:DB:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6MYZZd0KpJs0mUE4e12-FQ_2yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/79kP6QHtJYIvzzDZp-8arzQnELU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/a6MYZZd0KpJs0mUE4e12-FQ_2yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.224.92.0/23
Signature Algorithm: sha256WithRSAEncryption
5a:3c:e9:08:82:0f:a7:e3:dd:2c:d4:05:86:c4:d2:5e:84:35:
7e:38:e0:85:be:db:48:90:51:32:17:52:e0:b2:7a:7d:54:dc:
14:0d:e9:8d:d8:ea:ed:13:f5:6c:2a:7f:39:03:b3:de:7b:4e:
52:c0:38:6e:9d:ea:63:6e:f2:05:d8:cc:49:56:09:c1:14:4e:
62:20:6c:f6:33:c1:ac:dc:d8:65:26:72:22:90:28:04:db:a0:
1e:a4:ea:08:f3:44:03:2a:00:d4:00:2d:21:f9:9d:50:66:22:
8e:c8:eb:56:22:a0:ba:cb:d1:52:25:d8:fb:ce:c9:67:67:e5:
f5:ed:b1:de:87:99:b4:7a:79:f8:b7:36:27:b6:21:87:84:17:
33:c1:f9:be:6b:da:d6:fb:e2:d1:2f:52:4f:47:c2:68:0e:1f:
2e:1d:1f:80:ad:d0:86:c1:87:87:67:6e:13:25:50:5b:c8:76:
df:c2:89:69:f2:c6:b7:42:2b:d9:2e:7e:a7:7a:02:96:6f:19:
a5:7e:fd:18:e4:37:66:8b:9a:9b:86:f5:25:ed:98:06:0c:24:
68:10:13:65:f0:85:26:57:a3:4c:5f:61:17:d0:dd:a1:a9:3d:
5e:3e:39:a9:6e:19:f8:c5:8b:13:3f:e6:a0:f5:55:7c:42:13:
de:83:5c:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:38 2024 by rpki-client on console-fra.rpki-client.org