Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/gUY3knTo_CdthZ0cFAfaWIpG9N8.roa
File: gUY3knTo_CdthZ0cFAfaWIpG9N8.roa (raw, json)
Hash identifier: uwDyIpwcOKocpmDxCR/R8BRULdZGLfYyqs/DDACeMoE=
Subject key identifier: 81:46:37:92:74:E8:FC:27:6D:85:9D:1C:14:07:DA:58:8A:46:F4:DF
Certificate issuer: /CN=6ba3186597742a926cd26504e1ed76f8543fdb26
Certificate serial: 0ABD6FE1
Authority key identifier: 6B:A3:18:65:97:74:2A:92:6C:D2:65:04:E1:ED:76:F8:54:3F:DB:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a6MYZZd0KpJs0mUE4e12-FQ_2yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/gUY3knTo_CdthZ0cFAfaWIpG9N8.roa
Signing time: Mon 04 Apr 2022 20:51:47 +0000
ROA not before: Mon 04 Apr 2022 20:51:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201453
IP address blocks: 185.183.17.0/24 maxlen: 24
185.183.16.0/24 maxlen: 24
185.183.16.0/22 maxlen: 22
185.183.19.0/24 maxlen: 24
185.183.18.0/24 maxlen: 24
185.219.216.0/22 maxlen: 22
185.178.83.0/24 maxlen: 24
185.178.82.0/24 maxlen: 24
185.178.80.0/22 maxlen: 22
185.178.81.0/24 maxlen: 24
185.178.80.0/24 maxlen: 24
185.225.148.0/22 maxlen: 22
185.225.148.0/24 maxlen: 24
185.163.166.0/24 maxlen: 24
185.163.165.0/24 maxlen: 24
185.163.164.0/24 maxlen: 24
185.163.164.0/22 maxlen: 22
185.163.167.0/24 maxlen: 24
185.224.95.0/24 maxlen: 24
185.224.94.0/24 maxlen: 24
185.194.24.0/22 maxlen: 22
185.194.24.0/24 maxlen: 24
185.74.192.0/24 maxlen: 24
185.74.192.0/22 maxlen: 22
185.192.183.0/24 maxlen: 24
185.192.182.0/24 maxlen: 24
185.192.180.0/22 maxlen: 22
185.192.181.0/24 maxlen: 24
185.192.180.0/24 maxlen: 24
185.194.25.0/24 maxlen: 24
185.194.27.0/24 maxlen: 24
185.194.26.0/24 maxlen: 24
2a05:4ac0::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 180187105 (0xabd6fe1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ba3186597742a926cd26504e1ed76f8543fdb26
Validity
Not Before: Apr 4 20:51:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8146379274e8fc276d859d1c1407da588a46f4df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:a6:cf:c6:6e:c7:da:1d:ce:e1:cc:e6:81:62:
3e:ce:3d:c0:d3:33:f9:9b:84:bc:13:af:b7:ce:4b:
81:24:05:a5:57:aa:3c:74:c5:68:49:04:a9:14:39:
c5:87:9c:bb:69:95:9d:7f:8e:6a:fe:a8:db:aa:60:
d2:95:17:a7:73:82:a3:3d:aa:30:7e:42:76:12:38:
27:02:38:b4:fd:9d:77:07:34:44:8b:ae:07:ac:ed:
fa:ee:20:bd:3c:81:54:91:c0:3a:a6:cd:e6:5b:a7:
15:cc:87:27:ad:05:e8:e2:00:f3:e5:bc:72:d1:da:
3b:fa:9a:d5:65:dd:b1:76:64:13:c7:fd:86:7a:db:
e2:a1:1d:eb:84:71:6f:0d:c0:3f:89:b6:e6:16:29:
44:24:e6:40:4a:31:31:6a:44:02:dd:bf:8c:a2:32:
3a:3a:28:f5:cb:23:97:6b:1f:85:a6:04:68:d0:f8:
8d:d4:84:6b:b9:dc:78:34:60:31:1a:b3:31:33:9e:
f3:da:1f:4e:a1:5c:ca:54:22:ec:7a:b6:8a:f0:01:
98:18:d9:2c:f3:77:7c:2b:60:1c:3e:f0:13:d2:56:
67:4b:85:c8:a0:00:c7:28:47:dd:1d:af:d1:fc:03:
13:84:bd:c5:52:90:79:bd:23:67:d8:37:18:a0:9c:
07:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:46:37:92:74:E8:FC:27:6D:85:9D:1C:14:07:DA:58:8A:46:F4:DF
X509v3 Authority Key Identifier:
keyid:6B:A3:18:65:97:74:2A:92:6C:D2:65:04:E1:ED:76:F8:54:3F:DB:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6MYZZd0KpJs0mUE4e12-FQ_2yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/gUY3knTo_CdthZ0cFAfaWIpG9N8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/a6MYZZd0KpJs0mUE4e12-FQ_2yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.74.192.0/22
185.163.164.0/22
185.178.80.0/22
185.183.16.0/22
185.192.180.0/22
185.194.24.0/22
185.219.216.0/22
185.224.94.0/23
185.225.148.0/22
IPv6:
2a05:4ac0::/32
Signature Algorithm: sha256WithRSAEncryption
14:79:46:91:db:24:10:e5:c3:f2:ac:dd:b5:43:44:65:24:ec:
4c:63:ce:30:b8:c9:22:45:bd:54:ad:5d:db:de:27:e3:72:55:
a6:f4:6a:2f:09:2d:ab:46:59:f7:4f:10:32:ae:18:b0:68:02:
8f:7c:70:e0:98:ef:8a:0c:4f:7c:dc:4d:65:5c:6e:71:85:90:
93:45:9c:1b:75:e5:4f:93:01:b1:19:5a:cc:70:4a:25:29:79:
2a:1b:44:46:20:b5:6b:49:4d:e1:ba:23:59:eb:6c:07:75:3e:
9b:ba:dc:46:2b:08:d0:8f:1d:19:fd:58:4d:51:ed:9f:b2:3b:
21:cd:83:5e:2f:da:6c:f2:2f:33:ef:0c:e6:62:ee:ec:10:82:
a4:7e:d3:f3:4e:b4:5a:a4:33:8a:23:51:2a:36:84:6a:0d:89:
81:af:5a:a8:69:9d:7f:57:09:d6:8a:bf:c1:08:8b:57:98:26:
1f:eb:ef:14:14:df:a5:d1:71:6a:ec:c9:ad:3b:e7:1a:09:80:
7d:56:f9:91:0d:d3:9c:90:0a:22:cc:7f:6e:e6:84:5a:3f:8b:
03:49:8c:c1:78:e9:19:73:c5:b0:62:1e:fc:cd:ca:a4:30:e9:
1d:ec:a2:62:0e:89:59:1b:49:61:28:c7:c8:e6:e0:a5:73:57:
0f:89:50:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:50 2024 by rpki-client on console-ams.rpki-client.org