Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/HFx1PifvDs95aNvBmYad0shef-Y.roa
File: HFx1PifvDs95aNvBmYad0shef-Y.roa (raw, json)
Hash identifier: A3OoAHVg/rK3uo/gW5BMaGWN+1/ZcB35rdCB4hD3bmo=
Subject key identifier: 1C:5C:75:3E:27:EF:0E:CF:79:68:DB:C1:99:86:9D:D2:C8:5E:7F:E6
Certificate issuer: /CN=6ba3186597742a926cd26504e1ed76f8543fdb26
Certificate serial: 018441C4895E049E2E909BDE5F29D098AA13
Authority key identifier: 6B:A3:18:65:97:74:2A:92:6C:D2:65:04:E1:ED:76:F8:54:3F:DB:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a6MYZZd0KpJs0mUE4e12-FQ_2yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/HFx1PifvDs95aNvBmYad0shef-Y.roa
Signing time: Fri 04 Nov 2022 08:31:49 +0000
ROA not before: Fri 04 Nov 2022 08:31:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204175
IP address blocks: 185.74.195.0/24 maxlen: 24
185.74.194.0/24 maxlen: 24
185.74.193.0/24 maxlen: 24
185.219.216.0/24 maxlen: 24
185.219.219.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:41:c4:89:5e:04:9e:2e:90:9b:de:5f:29:d0:98:aa:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ba3186597742a926cd26504e1ed76f8543fdb26
Validity
Not Before: Nov 4 08:31:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1c5c753e27ef0ecf7968dbc199869dd2c85e7fe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:af:fa:12:e3:e5:ee:64:75:5e:78:03:1c:2f:
2a:c5:d4:da:28:5b:e6:ed:f4:51:1b:6a:27:f0:bc:
19:06:40:89:33:66:14:cc:91:9d:ab:90:a3:0e:02:
91:89:69:f7:30:5f:01:0b:96:a2:3e:f1:8e:ec:ec:
45:b0:ba:e8:cd:1c:05:4d:66:8d:4e:d7:93:df:96:
43:16:a7:89:87:65:a2:51:4f:23:f2:67:37:be:97:
86:9b:dd:d2:57:5e:39:d6:df:49:95:6f:37:ca:6a:
8f:a0:41:d1:6e:cb:89:d0:f9:3a:64:e3:16:f5:b6:
70:cf:6e:29:2f:2b:ee:62:4c:c1:a6:91:27:ab:b1:
60:ea:b4:16:d7:8a:b7:1e:bb:ca:1b:c7:25:03:5e:
c3:d1:65:bf:da:03:f1:7b:60:9a:b0:fa:ae:08:aa:
8a:73:fe:af:5c:07:b7:29:17:32:68:c1:30:4c:3b:
49:db:9f:d3:38:1c:bd:12:fd:b4:ee:f2:45:d1:4f:
21:cc:9a:be:52:39:4b:78:32:81:a0:13:41:4a:f3:
30:dd:b0:de:54:07:e7:de:7e:00:1a:6b:63:51:f6:
96:e7:73:63:60:4c:e0:80:ce:b5:cd:19:dd:1a:e4:
30:9f:e2:09:8a:85:28:e2:0d:8c:a9:26:53:e3:67:
4f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:5C:75:3E:27:EF:0E:CF:79:68:DB:C1:99:86:9D:D2:C8:5E:7F:E6
X509v3 Authority Key Identifier:
keyid:6B:A3:18:65:97:74:2A:92:6C:D2:65:04:E1:ED:76:F8:54:3F:DB:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6MYZZd0KpJs0mUE4e12-FQ_2yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/HFx1PifvDs95aNvBmYad0shef-Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/a6MYZZd0KpJs0mUE4e12-FQ_2yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.74.193.0-185.74.195.255
185.219.216.0/24
185.219.219.0/24
Signature Algorithm: sha256WithRSAEncryption
46:a8:4e:4e:4b:be:04:ff:aa:8f:5c:56:a4:28:13:df:e6:85:
5b:ce:9d:cf:c7:47:0c:0e:29:2c:c5:ae:a7:bc:66:d6:85:9e:
2e:05:31:f3:07:d5:0c:e1:fb:05:7f:04:2a:4b:a8:aa:c8:e5:
78:e4:f6:0f:5d:1a:ff:5e:9b:13:87:92:2a:bc:91:c1:c2:f4:
a2:8d:1c:e2:d6:26:2f:03:b4:2d:cd:df:29:6b:2e:5e:74:2a:
1a:09:40:a2:a8:6b:8b:94:f8:b4:ab:fc:66:4a:8b:7c:5b:dd:
2c:60:70:7a:c0:5b:6e:66:ff:dd:b2:00:06:05:31:d5:82:8c:
1c:15:c4:11:46:50:14:bb:68:24:82:57:e0:9e:6b:db:1d:9b:
fd:d2:d9:af:78:37:63:dc:02:07:7b:07:6b:d5:1e:9d:37:29:
3c:2a:39:4f:56:b5:3b:5e:63:06:29:f5:92:51:99:71:0b:f2:
82:93:52:6b:2f:7f:bb:fe:9e:7f:b1:9c:1d:38:87:52:34:18:
16:89:5b:e2:e9:af:1d:e7:3a:27:2c:c6:7b:d5:dd:d3:c3:24:
40:67:ff:7f:7e:be:90:07:6a:ba:fb:cf:a4:d3:66:0f:75:c9:
04:b5:6f:4f:e6:8d:8f:b6:01:ca:91:85:cb:44:5a:51:61:a3:
a4:d2:02:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:50 2024 by rpki-client on console-ams.rpki-client.org