Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/ZrWtWxIvMXMQww9y3pS4Gd08NQU.roa
File: ZrWtWxIvMXMQww9y3pS4Gd08NQU.roa (raw, json)
Hash identifier: EgxxtZAPv0xy4dnk55ANbhZ4DqVnwSRPtJc3HFXBSJw=
Subject key identifier: 66:B5:AD:5B:12:2F:31:73:10:C3:0F:72:DE:94:B8:19:DD:3C:35:05
Certificate issuer: /CN=6ba3186597742a926cd26504e1ed76f8543fdb26
Certificate serial: 0A9CA66E
Authority key identifier: 6B:A3:18:65:97:74:2A:92:6C:D2:65:04:E1:ED:76:F8:54:3F:DB:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a6MYZZd0KpJs0mUE4e12-FQ_2yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/ZrWtWxIvMXMQww9y3pS4Gd08NQU.roa
Signing time: Tue 22 Mar 2022 11:59:04 +0000
ROA not before: Tue 22 Mar 2022 11:59:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204175
IP address blocks: 185.218.191.0/24 maxlen: 24
185.218.190.0/24 maxlen: 24
185.218.189.0/24 maxlen: 24
185.218.188.0/24 maxlen: 24
185.218.188.0/22 maxlen: 22
185.74.195.0/24 maxlen: 24
185.74.194.0/24 maxlen: 24
185.74.193.0/24 maxlen: 24
185.221.188.0/24 maxlen: 24
185.225.151.0/24 maxlen: 24
185.225.150.0/24 maxlen: 24
185.225.149.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 178038382 (0xa9ca66e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ba3186597742a926cd26504e1ed76f8543fdb26
Validity
Not Before: Mar 22 11:59:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=66b5ad5b122f317310c30f72de94b819dd3c3505
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:0d:3d:fd:c9:ef:c3:c6:f4:36:73:e7:0b:94:
ee:ab:bc:0d:ad:4f:0e:c4:de:19:fa:4e:19:a1:f6:
e8:b8:5a:c4:de:1e:54:3c:61:4d:48:5d:8a:9b:09:
02:ff:de:ab:c1:45:23:75:36:0c:48:7c:24:26:0f:
a7:87:a6:8f:92:dd:2f:a1:5a:d1:5e:2c:35:1d:d5:
fd:d7:f6:55:cf:57:76:8b:75:ae:12:2c:e6:dd:a2:
ce:d1:bb:b4:8c:46:84:27:59:0e:6d:a4:ba:cd:e4:
31:60:1c:94:f0:bb:ff:72:ca:94:f9:3a:c2:20:9c:
95:ec:a7:f8:ae:47:70:ea:13:82:d1:45:57:43:10:
05:4d:e6:2b:b9:7c:a7:66:65:90:0c:f2:ae:da:20:
46:c0:c9:6b:2b:06:6b:21:0b:02:8e:e0:f4:fd:3b:
bf:87:82:79:8d:16:18:30:02:1b:0c:91:49:fb:59:
b8:55:82:07:27:57:bb:16:74:a3:44:ff:5c:25:56:
72:46:26:35:66:1b:9f:58:e3:d8:4b:1c:b5:8d:68:
50:b2:12:67:f3:e1:26:15:db:a0:ae:0e:de:7e:e1:
39:a2:9f:4f:40:c3:21:2b:31:b6:dc:0c:a7:4d:bd:
cd:fe:75:5a:66:67:69:81:76:fe:b7:a9:28:63:47:
a6:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:B5:AD:5B:12:2F:31:73:10:C3:0F:72:DE:94:B8:19:DD:3C:35:05
X509v3 Authority Key Identifier:
keyid:6B:A3:18:65:97:74:2A:92:6C:D2:65:04:E1:ED:76:F8:54:3F:DB:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6MYZZd0KpJs0mUE4e12-FQ_2yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/ZrWtWxIvMXMQww9y3pS4Gd08NQU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/a6MYZZd0KpJs0mUE4e12-FQ_2yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.74.193.0-185.74.195.255
185.218.188.0/22
185.221.188.0/24
185.225.149.0-185.225.151.255
Signature Algorithm: sha256WithRSAEncryption
52:37:17:cc:97:51:64:e5:0e:09:4b:7f:f2:d4:54:79:a7:28:
33:94:e2:4b:eb:23:a3:24:83:28:c8:10:10:45:91:ef:2c:f2:
e3:ba:d5:92:5e:17:2f:e6:0c:a0:37:b6:15:2d:96:04:f3:1f:
f9:1e:57:05:45:e7:3b:38:08:62:8a:12:13:0b:6f:2c:63:bb:
34:98:fc:e6:0d:7b:24:0a:6a:72:ef:0a:32:46:1d:8e:6e:e4:
4c:b5:7a:19:ae:a7:ed:aa:5b:7a:b3:96:3a:13:7c:46:6e:c9:
30:fc:80:fe:9c:44:4a:02:8a:0c:2c:c4:4a:2d:4f:d6:ad:f9:
a1:1f:5b:f7:78:52:50:16:d3:30:57:6d:a9:37:cd:9b:a1:cc:
f9:e1:06:fe:bc:58:96:22:54:88:d7:31:2f:50:95:e5:32:b5:
97:d8:2e:15:1c:87:08:b1:9d:fe:46:f5:47:d9:a5:40:0f:8f:
2e:1f:cc:5b:56:cb:0e:a5:ab:a2:b1:e5:bf:2d:9e:e6:71:fd:
74:5f:0e:d5:f5:c1:6a:c6:b1:fd:f2:9a:a2:3e:4a:32:d6:72:
14:e2:63:33:df:bf:98:77:7d:04:ec:44:14:86:9b:bd:15:dc:
9c:32:2b:96:10:1f:3c:36:a1:a7:cd:78:94:f5:4b:67:7d:75:
f0:d1:ca:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:38 2024 by rpki-client on console-fra.rpki-client.org