Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/TCODOVZQhaTb6PUYhqNoIxZ2ujw.roa
File: TCODOVZQhaTb6PUYhqNoIxZ2ujw.roa (raw, json)
Hash identifier: WACskYXCTxP+o7xJ76o6oAWjxmhy968x7dVKzA6tHqk=
Subject key identifier: 4C:23:83:39:56:50:85:A4:DB:E8:F5:18:86:A3:68:23:16:76:BA:3C
Certificate issuer: /CN=6ba3186597742a926cd26504e1ed76f8543fdb26
Certificate serial: 0183E9F773C54097644A8064395D3E2455C6
Authority key identifier: 6B:A3:18:65:97:74:2A:92:6C:D2:65:04:E1:ED:76:F8:54:3F:DB:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a6MYZZd0KpJs0mUE4e12-FQ_2yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/TCODOVZQhaTb6PUYhqNoIxZ2ujw.roa
Signing time: Tue 18 Oct 2022 07:20:51 +0000
ROA not before: Tue 18 Oct 2022 07:20:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212988
IP address blocks: 185.221.190.0/24 maxlen: 24
185.221.191.0/24 maxlen: 24
185.221.188.0/24 maxlen: 24
185.221.189.0/24 maxlen: 24
185.194.26.0/24 maxlen: 24
185.194.27.0/24 maxlen: 24
185.219.216.0/24 maxlen: 24
185.219.219.0/24 maxlen: 24
185.219.218.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:e9:f7:73:c5:40:97:64:4a:80:64:39:5d:3e:24:55:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ba3186597742a926cd26504e1ed76f8543fdb26
Validity
Not Before: Oct 18 07:20:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4c238339565085a4dbe8f51886a368231676ba3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:20:9b:03:ab:76:99:af:55:fa:29:99:27:54:
26:25:7e:88:d3:39:78:08:0e:68:8d:18:7b:20:8d:
34:de:f4:f6:e1:49:97:9c:b9:59:9d:2a:0f:2d:92:
e7:ad:71:3a:37:83:3f:fd:1a:14:00:15:e9:51:55:
44:2a:d7:15:d5:48:3d:80:86:fa:b0:f7:8a:c1:dc:
c8:9e:6a:74:ae:03:47:2e:15:5f:73:d0:14:a7:9e:
a3:26:eb:35:c9:d3:47:a6:1c:17:c6:d5:2d:60:25:
d3:40:20:0a:b3:10:76:1d:33:60:3e:54:09:e3:a8:
fe:99:7f:fa:7d:a5:e9:0e:51:9e:2d:f9:c5:0e:0d:
b1:c5:49:86:3d:34:fb:22:af:11:7a:3d:bd:5f:81:
05:03:eb:34:ec:10:79:aa:55:2b:3d:eb:d0:3f:f6:
1a:32:7f:8b:88:32:fd:7e:ce:c2:25:22:24:40:c1:
4a:37:2e:08:3d:b8:09:b5:e2:fd:01:df:4b:80:5b:
f6:cc:03:22:5f:6f:e4:18:61:d8:bf:5a:f0:05:52:
ae:bc:5d:9b:95:69:d3:22:08:69:5f:bb:30:ac:9c:
3f:53:94:b4:30:82:e4:c1:58:0d:ce:21:31:f6:62:
d1:f7:8f:e3:c9:c9:22:d9:0c:66:ae:a1:3b:f9:95:
94:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:23:83:39:56:50:85:A4:DB:E8:F5:18:86:A3:68:23:16:76:BA:3C
X509v3 Authority Key Identifier:
keyid:6B:A3:18:65:97:74:2A:92:6C:D2:65:04:E1:ED:76:F8:54:3F:DB:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6MYZZd0KpJs0mUE4e12-FQ_2yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/TCODOVZQhaTb6PUYhqNoIxZ2ujw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/a6MYZZd0KpJs0mUE4e12-FQ_2yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.194.26.0/23
185.219.216.0/24
185.219.218.0/23
185.221.188.0/22
Signature Algorithm: sha256WithRSAEncryption
26:2e:a5:4a:bb:f5:e7:15:06:d1:9f:a1:86:59:ae:4e:14:26:
60:07:2a:57:de:7b:53:30:8f:b2:1e:18:94:9f:80:68:f0:5a:
f5:63:9d:4b:6c:8f:c3:1c:55:9e:dd:4a:d1:b5:17:60:93:48:
c2:03:ec:e8:db:dc:ca:59:89:c0:72:71:d5:6d:cb:52:e7:d7:
b4:fc:b4:aa:32:09:02:bc:d6:c1:25:b9:f4:7e:f6:f0:3f:ee:
7d:cf:82:fb:0d:fa:14:e7:76:2f:d2:91:bd:ef:42:dc:38:2b:
4b:a4:1d:a1:0a:4a:5a:55:b4:61:f6:a4:22:d1:2e:fc:97:f4:
a8:9a:33:c1:14:6a:13:18:e6:ae:7e:94:d1:30:b9:bc:98:43:
9b:e6:c2:74:89:de:16:f5:9f:ad:65:60:f5:7b:a6:1d:a0:32:
74:51:b4:1a:a9:8b:a8:68:4b:52:20:40:43:54:be:9b:0a:d5:
3e:ac:ba:89:eb:40:ec:d0:97:0a:0b:66:f5:43:79:4b:64:3f:
1b:12:e0:01:c3:a8:eb:26:3a:f1:ba:3f:2d:a7:35:a3:00:a6:
57:fd:64:47:84:8a:3d:85:f6:8e:77:a9:c2:23:7f:e5:82:53:
6d:3a:ef:32:bc:e1:23:ef:1c:60:52:1d:0e:51:34:9d:32:82:
dd:9f:af:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:47:04 2025 by rpki-client