Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/P8-zPWLkE0-EA_FcxV2ayauRxcg.roa
File: P8-zPWLkE0-EA_FcxV2ayauRxcg.roa (raw, json)
Hash identifier: lz54WyTUCNgOTgpKfECJKkw6GU3hGbS57vYRGJ0pU3E=
Subject key identifier: 3F:CF:B3:3D:62:E4:13:4F:84:03:F1:5C:C5:5D:9A:C9:AB:91:C5:C8
Certificate issuer: /CN=6ba3186597742a926cd26504e1ed76f8543fdb26
Certificate serial: 09E70C38
Authority key identifier: 6B:A3:18:65:97:74:2A:92:6C:D2:65:04:E1:ED:76:F8:54:3F:DB:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a6MYZZd0KpJs0mUE4e12-FQ_2yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/P8-zPWLkE0-EA_FcxV2ayauRxcg.roa
Signing time: Sat 01 Jan 2022 10:03:01 +0000
ROA not before: Sat 01 Jan 2022 10:03:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213399
IP address blocks: 185.224.92.0/24 maxlen: 24
185.224.93.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 166136888 (0x9e70c38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ba3186597742a926cd26504e1ed76f8543fdb26
Validity
Not Before: Jan 1 10:03:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3fcfb33d62e4134f8403f15cc55d9ac9ab91c5c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e7:cd:2f:af:b0:ad:78:b9:c0:bb:b9:22:16:
e1:50:7e:f6:f7:84:b3:da:3a:b8:95:df:22:cb:92:
c3:94:3b:91:99:8c:2a:52:2f:3c:dc:ed:f2:da:f0:
91:5f:f1:28:67:6d:82:4a:9d:a1:0d:c1:56:59:77:
89:df:22:32:03:d8:fe:7c:08:9d:f4:da:ff:69:eb:
17:88:01:0b:18:bb:4f:51:95:47:1a:92:80:12:f7:
2f:92:dc:d0:8b:e8:c0:d4:81:24:71:4a:c2:f3:11:
e7:a2:6f:d3:7a:2c:7c:81:59:50:1b:98:a0:f0:eb:
2e:8a:60:55:e3:fb:18:2f:a3:ca:de:6a:f0:4c:69:
95:da:3d:4f:16:66:f9:eb:24:21:53:05:f1:8f:47:
d1:52:d2:7e:f8:4f:66:81:5e:18:dc:e6:86:c2:eb:
81:4b:32:a0:59:2f:07:08:d4:2e:f1:30:2d:29:31:
b6:4a:42:f0:8f:b5:31:cd:72:27:16:e3:a0:85:87:
de:fc:3b:53:c4:9a:47:5a:16:c1:dd:5d:1c:1f:fc:
3a:ac:fc:5f:a5:ec:c9:a7:3a:c2:39:03:7b:62:62:
b9:7b:51:f0:9a:c2:6f:fd:65:db:89:12:21:0a:f3:
bc:2e:4d:af:22:49:3f:8d:4a:a8:90:f5:bd:d2:b3:
ac:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:CF:B3:3D:62:E4:13:4F:84:03:F1:5C:C5:5D:9A:C9:AB:91:C5:C8
X509v3 Authority Key Identifier:
keyid:6B:A3:18:65:97:74:2A:92:6C:D2:65:04:E1:ED:76:F8:54:3F:DB:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6MYZZd0KpJs0mUE4e12-FQ_2yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/P8-zPWLkE0-EA_FcxV2ayauRxcg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/a6MYZZd0KpJs0mUE4e12-FQ_2yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.224.92.0/23
Signature Algorithm: sha256WithRSAEncryption
36:12:f8:89:98:63:4b:2a:7b:77:6d:ec:07:10:bc:2b:42:3b:
f9:13:03:11:55:8c:cc:43:57:55:b9:37:bd:a5:96:ec:7d:2f:
a0:72:ba:1a:f2:c7:db:78:ae:46:ae:b9:af:d0:26:b1:86:f3:
32:a1:9b:64:bc:99:e8:98:8c:6e:40:8d:da:93:cf:bc:46:bd:
89:91:50:1b:82:64:1f:50:7a:2c:5e:5f:df:04:b2:47:f9:20:
ed:47:94:cc:17:61:6e:9a:79:68:5d:33:bb:02:13:8d:c7:a3:
c0:4e:1f:f5:73:a8:93:47:14:96:62:23:ad:11:e5:46:29:a2:
56:f7:89:35:c1:83:38:78:6f:79:88:79:1c:e4:b2:9e:37:99:
b3:44:30:ea:3f:d3:c2:2e:1c:c1:83:9c:f6:88:0d:a9:bf:e0:
7b:45:3f:5b:ff:fe:d8:0a:b1:db:a5:08:fe:62:6e:20:b7:a1:
0c:3f:25:8b:c0:d3:86:28:70:9e:07:8d:fe:b6:ac:3c:3a:c8:
83:9d:a5:4f:29:04:63:e0:15:15:a9:fe:5d:f7:d6:e1:b2:96:
71:30:07:27:34:ae:28:a1:b9:7c:a6:90:bd:12:0b:35:de:56:
40:27:6e:05:46:d8:79:91:0e:1a:de:4a:5d:0c:7d:31:42:16:
c8:e7:07:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:38 2024 by rpki-client on console-fra.rpki-client.org