Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/kA3mqIrRd01tiEKNFL9nKZUox4Q.roa
File: kA3mqIrRd01tiEKNFL9nKZUox4Q.roa (raw, json)
Hash identifier: B0M84BIRVuANjaMYrC9A5ERGr0FhAE6CRMHj1WrOAzI=
Subject key identifier: 90:0D:E6:A8:8A:D1:77:4D:6D:88:42:8D:14:BF:67:29:95:28:C7:84
Certificate issuer: /CN=6ba3186597742a926cd26504e1ed76f8543fdb26
Certificate serial: 0A80EBF5
Authority key identifier: 6B:A3:18:65:97:74:2A:92:6C:D2:65:04:E1:ED:76:F8:54:3F:DB:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a6MYZZd0KpJs0mUE4e12-FQ_2yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/kA3mqIrRd01tiEKNFL9nKZUox4Q.roa
Signing time: Fri 11 Mar 2022 09:31:25 +0000
ROA not before: Fri 11 Mar 2022 09:31:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204175
IP address blocks: 185.218.191.0/24 maxlen: 24
185.218.190.0/24 maxlen: 24
185.218.189.0/24 maxlen: 24
185.218.188.0/24 maxlen: 24
185.218.188.0/22 maxlen: 22
185.221.188.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 176221173 (0xa80ebf5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ba3186597742a926cd26504e1ed76f8543fdb26
Validity
Not Before: Mar 11 09:31:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=900de6a88ad1774d6d88428d14bf67299528c784
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:34:20:7a:df:f9:04:b6:0c:d1:0b:bc:07:de:
b7:0f:a1:7b:65:a9:7e:ef:88:a8:20:8b:ac:6a:cb:
bb:0d:66:a4:50:43:50:7f:16:2d:04:ff:a6:b0:83:
8b:44:b1:6b:69:4c:d2:81:0f:f9:92:a2:7e:3b:0c:
65:94:e8:cb:52:2a:a5:00:c7:d7:8e:de:b3:1a:0d:
9f:35:30:a7:53:80:8a:1c:49:f5:2c:1e:ce:bc:c5:
40:3d:71:9b:c8:96:71:bb:50:1e:b2:a9:97:3d:57:
a5:55:26:21:4b:b7:1e:27:15:2f:56:7d:d4:b5:6d:
64:17:72:68:69:46:e4:6a:61:a1:ac:12:4d:33:ce:
a8:a6:d0:46:97:8d:d0:8a:d9:04:ef:7d:c7:73:4d:
a3:d1:bd:07:f8:5c:42:79:bc:5f:b3:0e:44:ec:17:
8b:5b:2a:28:1e:1f:24:9b:c6:74:74:eb:2c:2c:ef:
3d:f0:b4:26:52:ff:44:68:6a:8f:f4:e5:76:04:b6:
47:1f:f9:13:b5:43:5d:81:5b:85:6e:fe:33:3a:4e:
11:5c:86:92:05:42:a9:98:c6:11:e0:7f:78:24:d4:
4b:0b:3e:50:25:9d:09:7d:1c:a6:8c:93:55:a6:12:
62:f2:9f:83:b0:9c:df:1e:34:0d:53:9f:92:f0:62:
15:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:0D:E6:A8:8A:D1:77:4D:6D:88:42:8D:14:BF:67:29:95:28:C7:84
X509v3 Authority Key Identifier:
keyid:6B:A3:18:65:97:74:2A:92:6C:D2:65:04:E1:ED:76:F8:54:3F:DB:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6MYZZd0KpJs0mUE4e12-FQ_2yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/kA3mqIrRd01tiEKNFL9nKZUox4Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/a6MYZZd0KpJs0mUE4e12-FQ_2yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.218.188.0/22
185.221.188.0/24
Signature Algorithm: sha256WithRSAEncryption
58:01:b7:2c:30:4c:fc:65:18:c8:9f:0b:f6:08:19:53:23:3c:
47:8a:bc:97:ca:73:04:1d:5e:ec:4e:d9:1b:2b:c3:14:dc:cb:
a5:fa:c2:ef:88:01:f4:3d:bd:ee:69:b7:3e:35:cc:d0:91:a0:
4d:4f:57:02:1c:14:6b:29:48:c2:05:3d:6a:a8:7e:81:0f:79:
14:bf:2b:69:e4:8c:84:4d:97:94:c4:f2:c6:11:b0:19:5b:f6:
b1:f2:b5:d3:df:52:1a:b4:04:38:ff:70:74:ba:5f:df:47:c3:
b5:5f:49:57:9e:78:30:e3:2d:c0:08:9b:13:88:75:3c:96:3a:
d0:1c:7a:8d:8d:b1:2b:9e:c4:fd:a3:cd:03:69:d8:6a:13:7a:
29:04:f9:44:88:bc:38:fa:45:b6:17:86:0e:03:4a:41:f4:9e:
c2:5a:15:ca:36:e8:f3:77:85:95:f9:64:5e:97:99:02:a9:e2:
0a:f2:6d:9a:68:de:b5:9e:d7:ea:04:e2:c3:8a:ed:d4:ac:29:
f9:37:75:d5:93:8e:fd:1c:58:13:2c:65:6d:2c:d7:09:02:21:
49:1f:12:05:a5:e1:c2:dd:07:77:ae:9e:5f:f4:7c:67:f0:37:
4c:08:51:22:a8:5d:15:c4:4c:dc:f5:38:64:92:6b:de:f2:db:
1c:5f:d9:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:38 2024 by rpki-client on console-fra.rpki-client.org