Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/xtBwcCCQAtZG3qCUKRDe1ThRBzI.roa
File: xtBwcCCQAtZG3qCUKRDe1ThRBzI.roa (raw, json)
Hash identifier: axFFcZjE43u85AqUF2gbbER0r68B6zadJFuc/DuQ+WE=
Subject key identifier: C6:D0:70:70:20:90:02:D6:46:DE:A0:94:29:10:DE:D5:38:51:07:32
Certificate issuer: /CN=6ba3186597742a926cd26504e1ed76f8543fdb26
Certificate serial: 018BB3D6C0CA52251DB191B15D0ED47D288C
Authority key identifier: 6B:A3:18:65:97:74:2A:92:6C:D2:65:04:E1:ED:76:F8:54:3F:DB:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a6MYZZd0KpJs0mUE4e12-FQ_2yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/xtBwcCCQAtZG3qCUKRDe1ThRBzI.roa
Signing time: Thu 09 Nov 2023 11:27:57 +0000
ROA not before: Thu 09 Nov 2023 11:27:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213399
IP address blocks: 185.224.93.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b3:d6:c0:ca:52:25:1d:b1:91:b1:5d:0e:d4:7d:28:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ba3186597742a926cd26504e1ed76f8543fdb26
Validity
Not Before: Nov 9 11:27:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c6d07070209002d646dea0942910ded538510732
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:93:6e:3d:27:a2:2b:96:24:cc:66:62:d3:67:
11:5b:35:63:bf:c6:f2:3a:1a:b7:00:2b:4b:ba:71:
a4:29:4d:1d:5a:78:a2:ae:a4:d4:0d:34:c3:38:f7:
f4:57:1e:a7:c8:e2:d6:07:d9:cf:50:ec:c3:51:58:
cf:9a:d5:1b:a1:69:23:04:2e:d2:b7:cb:d7:66:16:
22:8d:9a:a7:ec:7e:5e:f6:ca:dd:e3:5d:88:bd:f8:
3e:2c:4c:f0:83:76:ef:7a:55:cf:cf:54:65:39:59:
76:a9:78:d2:bc:a4:a4:e9:b4:2c:57:26:1e:f2:5e:
25:fe:1c:47:2f:de:7b:24:db:bb:1a:a7:d6:b0:1c:
d3:d4:21:bb:06:fd:89:c7:78:f5:6c:a2:bc:a0:9a:
95:e2:3b:f4:8c:db:71:d9:97:f7:4f:3f:cf:67:52:
e8:d0:09:48:b0:89:5d:0d:e0:b0:64:b1:f2:21:29:
9e:0e:2e:d2:a7:58:d0:f0:02:1d:36:52:49:3c:a5:
89:fd:4c:3d:d4:da:7a:16:34:6e:45:3c:61:bc:6a:
f0:c3:04:77:94:59:48:b4:1f:ea:ad:23:40:45:9a:
37:a5:14:ea:e8:d2:84:d4:bd:bc:d2:5c:54:3f:6f:
7b:5d:ab:20:37:ba:05:0f:b5:5b:8c:ac:7a:cc:28:
1f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:D0:70:70:20:90:02:D6:46:DE:A0:94:29:10:DE:D5:38:51:07:32
X509v3 Authority Key Identifier:
keyid:6B:A3:18:65:97:74:2A:92:6C:D2:65:04:E1:ED:76:F8:54:3F:DB:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6MYZZd0KpJs0mUE4e12-FQ_2yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/xtBwcCCQAtZG3qCUKRDe1ThRBzI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/a6MYZZd0KpJs0mUE4e12-FQ_2yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.224.93.0/24
Signature Algorithm: sha256WithRSAEncryption
02:b8:4f:51:db:f1:ce:9f:19:03:6e:d0:be:b5:0d:41:76:24:
27:93:8c:92:df:ed:09:d3:1a:ed:e7:4b:03:74:a1:d2:e4:42:
dc:3e:d8:0d:e1:c8:a4:f5:15:af:d4:d3:bb:b7:74:4a:13:5f:
10:94:f5:53:a7:58:ec:52:8b:88:04:0d:2c:43:e4:30:d0:bd:
3c:6f:24:52:6f:00:62:be:df:80:31:62:fa:96:34:f3:0c:3b:
c2:c3:d1:37:be:22:ff:50:f4:59:fe:f6:72:92:36:06:05:07:
26:74:56:66:0c:e6:8c:af:ef:e9:65:63:42:42:14:bd:84:c7:
d3:1f:bd:07:40:46:fa:8a:c5:9f:7a:58:40:25:34:6c:d2:3e:
d4:e2:2f:1c:37:a6:e6:7d:29:d6:ea:45:e6:3b:5f:bf:29:3c:
7b:2e:6b:bd:e3:a7:f5:93:05:06:e7:42:2d:6b:d2:49:19:c9:
81:b2:d6:70:f0:b8:85:0e:54:4c:61:8b:57:9e:a1:d3:09:b9:
71:7e:31:9b:b5:63:01:b1:82:11:3b:5f:42:1d:20:0f:bd:1a:
5e:31:14:75:78:4b:aa:92:cb:e2:77:44:bb:5f:0c:ee:f5:c9:
fb:e4:ab:80:84:0b:d8:e8:3c:14:17:32:a3:13:68:1d:f1:85:
13:19:a1:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:50 2024 by rpki-client on console-ams.rpki-client.org