Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/dfb03e-cb87-4ba4-8836-2f13abdd205f/1/dwBNLLfSe4-mw4ZxSqEF5OGSXQ0.roa
File: dwBNLLfSe4-mw4ZxSqEF5OGSXQ0.roa (raw, json)
Hash identifier: aXg/LDJ0lShZR05gvMwyD6SGZgPzmhu0/kWVRXzav2E=
Subject key identifier: 77:00:4D:2C:B7:D2:7B:8F:A6:C3:86:71:4A:A1:05:E4:E1:92:5D:0D
Certificate issuer: /CN=77d01100407f553f0fb131be72b32e4981237efc
Certificate serial: 018CC7943960B4159FA8F80C68DC302C98AF
Authority key identifier: 77:D0:11:00:40:7F:55:3F:0F:B1:31:BE:72:B3:2E:49:81:23:7E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d9ARAEB_VT8PsTG-crMuSYEjfvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/dfb03e-cb87-4ba4-8836-2f13abdd205f/1/dwBNLLfSe4-mw4ZxSqEF5OGSXQ0.roa
Signing time: Tue 02 Jan 2024 00:30:29 +0000
ROA not before: Tue 02 Jan 2024 00:30:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48655
IP address blocks: 185.226.208.0/22 maxlen: 22
185.224.208.0/22 maxlen: 22
185.226.156.0/22 maxlen: 22
2a0c:6200::/29 maxlen: 29
2a0c:6200::/34 maxlen: 34
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:39:60:b4:15:9f:a8:f8:0c:68:dc:30:2c:98:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77d01100407f553f0fb131be72b32e4981237efc
Validity
Not Before: Jan 2 00:30:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=77004d2cb7d27b8fa6c386714aa105e4e1925d0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:75:9f:b1:c7:f8:52:0b:8e:35:63:b4:62:8d:
31:97:f2:2b:4f:d2:fe:9c:ea:87:07:74:af:28:df:
89:ce:2e:b1:32:60:59:e9:2e:ed:e7:b3:ad:01:7f:
83:73:b3:e7:94:cf:d8:b3:33:28:8a:5b:70:0f:f2:
69:72:33:94:23:91:95:e8:bf:ff:7a:29:c2:0a:7f:
c9:e3:cc:f4:bc:4d:04:5e:76:a9:b8:48:44:ef:21:
bf:7a:66:14:22:9d:0c:06:93:77:03:5a:6b:46:e2:
24:76:23:ff:15:90:47:e0:f8:7d:3b:22:0d:d5:28:
50:ea:bd:f5:23:3c:88:0e:4d:3d:b4:47:a3:88:bf:
a2:12:60:ad:34:3a:70:69:1c:83:9b:c6:2b:41:75:
c8:f8:21:c0:32:66:f4:c6:eb:be:f7:44:39:2c:82:
27:a7:5f:e7:40:8a:d6:96:5a:79:43:54:e7:12:ef:
ed:11:36:9a:5f:4a:09:1c:f3:a3:10:cd:79:b2:df:
e5:eb:4d:51:0f:3b:51:a3:21:43:8c:e9:bf:e6:06:
97:df:f1:38:40:92:2a:5c:a2:db:75:18:14:05:31:
5b:10:87:ff:67:db:26:0d:82:d2:d2:99:b5:1c:3c:
3e:52:22:c1:0c:e3:33:e4:dc:a4:fa:91:4b:03:2b:
51:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:00:4D:2C:B7:D2:7B:8F:A6:C3:86:71:4A:A1:05:E4:E1:92:5D:0D
X509v3 Authority Key Identifier:
keyid:77:D0:11:00:40:7F:55:3F:0F:B1:31:BE:72:B3:2E:49:81:23:7E:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9ARAEB_VT8PsTG-crMuSYEjfvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/dfb03e-cb87-4ba4-8836-2f13abdd205f/1/dwBNLLfSe4-mw4ZxSqEF5OGSXQ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/dfb03e-cb87-4ba4-8836-2f13abdd205f/1/d9ARAEB_VT8PsTG-crMuSYEjfvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.224.208.0/22
185.226.156.0/22
185.226.208.0/22
IPv6:
2a0c:6200::/29
Signature Algorithm: sha256WithRSAEncryption
dc:35:a3:f8:d0:38:c6:50:2f:10:be:ce:ca:f7:53:c3:42:26:
21:c9:d5:79:b4:ef:33:d9:ab:f7:b1:d1:03:21:f4:5f:50:27:
2a:58:fe:c6:89:4a:d2:20:b2:bd:ce:64:bf:23:ba:93:e4:bd:
0b:dd:9c:4f:a1:ed:4e:59:59:65:14:fb:15:bf:17:a2:b8:c8:
5d:e6:ee:80:90:33:75:98:a0:93:c8:06:e1:94:1b:65:68:8c:
7f:2a:b6:0c:79:a0:04:f4:56:45:6c:ac:b1:3c:82:9e:44:e2:
0f:4a:9c:c5:ee:33:69:34:a8:0d:0f:fd:4d:51:47:fb:95:83:
da:2b:f7:e8:d5:dd:8b:a8:55:f3:60:36:e7:9f:0d:3d:97:22:
a4:03:f3:01:f5:68:26:d3:5c:97:f0:26:45:e0:74:85:98:46:
0b:78:45:d4:e4:79:08:65:c7:33:cc:4a:be:4c:72:50:b7:5d:
e4:58:43:9d:e8:b5:f5:01:c5:ac:aa:a5:82:e8:90:e9:32:d1:
2d:e9:ac:b2:f3:ce:44:43:f0:ca:24:84:a3:f4:bd:e5:3f:54:
8d:dd:56:eb:0b:4e:28:54:db:28:e7:48:48:5a:b8:09:b4:9c:
e6:45:de:f1:89:dd:9b:92:91:b8:dc:7d:06:ca:3f:c2:4c:de:
6f:09:1e:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 18:22:52 2024 by rpki-client on console-ams.rpki-client.org