Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/m0MPPcL3YfyDyrNfZB51OnWuz2Y.roa
File: m0MPPcL3YfyDyrNfZB51OnWuz2Y.roa (raw, json)
Hash identifier: 91wzTQVAl1JsTP1hWhsgWk5XPOo6CtoJOpu2Kc8o2kU=
Subject key identifier: 9B:43:0F:3D:C2:F7:61:FC:83:CA:B3:5F:64:1E:75:3A:75:AE:CF:66
Certificate issuer: /CN=6ba3186597742a926cd26504e1ed76f8543fdb26
Certificate serial: 0185A02AD247134F5A514220AF0D8D7649D9
Authority key identifier: 6B:A3:18:65:97:74:2A:92:6C:D2:65:04:E1:ED:76:F8:54:3F:DB:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a6MYZZd0KpJs0mUE4e12-FQ_2yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/m0MPPcL3YfyDyrNfZB51OnWuz2Y.roa
Signing time: Wed 11 Jan 2023 09:30:38 +0000
ROA not before: Wed 11 Jan 2023 09:30:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204175
IP address blocks: 185.74.195.0/24 maxlen: 24
185.74.194.0/24 maxlen: 24
185.74.193.0/24 maxlen: 24
185.194.25.0/24 maxlen: 24
185.219.219.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:a0:2a:d2:47:13:4f:5a:51:42:20:af:0d:8d:76:49:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ba3186597742a926cd26504e1ed76f8543fdb26
Validity
Not Before: Jan 11 09:30:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9b430f3dc2f761fc83cab35f641e753a75aecf66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:88:31:78:a8:b3:f0:e2:40:f8:8e:5a:4d:25:
fd:76:1a:fb:6c:85:52:f4:af:63:02:1a:27:71:af:
d6:13:cd:00:8b:bc:23:13:00:62:b6:62:5d:73:37:
48:2a:7f:a3:e8:8b:a6:44:44:57:34:1a:d8:ea:0c:
20:c1:95:e2:bb:98:11:83:6c:eb:70:b7:8b:5a:8d:
28:33:6f:dd:46:59:38:d8:ee:54:83:17:e2:ee:ca:
b3:9d:52:f2:56:14:ad:12:b2:af:77:98:a5:6b:71:
d4:c1:4d:8f:24:c0:5e:e2:8a:f6:a2:6f:1b:81:67:
ba:9c:95:75:5e:c1:f1:86:25:c2:50:cf:04:0d:f1:
60:aa:61:15:44:b5:36:81:9c:71:78:96:37:be:41:
ab:96:5f:bb:3f:5b:4b:5d:c0:8a:72:e7:25:c4:46:
17:81:05:83:a6:b7:da:6a:7a:17:7c:26:97:de:e0:
41:86:d6:70:24:ef:97:d1:57:dc:22:c7:c3:e0:5b:
ff:26:34:34:db:eb:9d:2b:ac:e8:36:0e:de:fd:cc:
21:43:89:b8:c2:7d:68:f2:c9:46:ce:1f:71:bb:ac:
f6:7c:c6:3b:37:20:ec:83:14:15:cb:91:7d:8d:0b:
32:e3:cf:22:43:95:19:61:e7:d9:bb:8a:b2:ed:a3:
c6:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:43:0F:3D:C2:F7:61:FC:83:CA:B3:5F:64:1E:75:3A:75:AE:CF:66
X509v3 Authority Key Identifier:
keyid:6B:A3:18:65:97:74:2A:92:6C:D2:65:04:E1:ED:76:F8:54:3F:DB:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6MYZZd0KpJs0mUE4e12-FQ_2yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/m0MPPcL3YfyDyrNfZB51OnWuz2Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/a6MYZZd0KpJs0mUE4e12-FQ_2yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.74.193.0-185.74.195.255
185.194.25.0/24
185.219.219.0/24
Signature Algorithm: sha256WithRSAEncryption
31:f9:2e:4c:ca:b1:b0:a4:cd:f8:79:14:9f:5b:a7:bc:bd:2f:
5f:db:62:8b:0a:8f:5d:c4:06:ec:cd:59:1d:ab:f2:fb:20:5b:
9f:85:fa:28:2d:3a:2a:eb:2b:b6:b8:a9:91:13:7e:1b:34:28:
77:e5:dd:e1:25:dd:7b:a0:ba:99:85:73:97:65:98:3d:9a:29:
1e:5f:ce:49:6b:63:2c:98:d0:28:6e:4d:1b:8c:56:7f:51:56:
18:f4:cb:15:5c:cd:87:22:22:4e:ac:7a:a0:80:1a:f0:60:50:
51:11:28:22:8c:77:d6:92:58:83:ca:54:09:85:5e:43:ba:e7:
93:c4:c0:08:33:42:ab:24:37:43:da:c0:d6:80:10:42:f7:20:
4b:1d:8d:3f:66:9d:e8:9a:63:99:c4:80:a2:e4:67:c4:1e:c3:
a4:b0:a7:5e:13:76:05:5e:36:bb:ca:7f:af:05:3a:09:01:02:
31:5d:91:45:e9:72:37:fd:8a:9e:be:d0:31:6e:be:03:ac:e9:
00:b4:09:9d:ee:f1:92:77:c9:90:a3:ba:f7:0a:d1:85:4c:50:
b8:0b:4e:6e:48:3b:85:2a:4f:b4:c5:77:c4:fb:30:10:b7:82:
e3:fd:50:d7:56:ce:f7:59:9f:46:18:9e:4c:8e:3c:c8:9e:5d:
8b:73:19:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:38 2024 by rpki-client on console-fra.rpki-client.org