Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/5d3a83-ea9f-4d83-b06b-a35b1bb3dfbd/1/zNW0fXef4sJql2q-ZRkHasnyIn0.roa
File: zNW0fXef4sJql2q-ZRkHasnyIn0.roa (raw, json)
Hash identifier: xao2h6PO39K2br3xfZk3ZP8PmuEMYT95ci0BR2hJt8w=
Subject key identifier: CC:D5:B4:7D:77:9F:E2:C2:6A:97:6A:BE:65:19:07:6A:C9:F2:22:7D
Certificate issuer: /CN=dd6e9afc93183338022c7d8f186af71973aef5ba
Certificate serial: 019DE5BB
Authority key identifier: DD:6E:9A:FC:93:18:33:38:02:2C:7D:8F:18:6A:F7:19:73:AE:F5:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3W6a_JMYMzgCLH2PGGr3GXOu9bo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/5d3a83-ea9f-4d83-b06b-a35b1bb3dfbd/1/zNW0fXef4sJql2q-ZRkHasnyIn0.roa
Signing time: Sat 01 Jan 2022 03:52:32 +0000
ROA not before: Sat 01 Jan 2022 03:52:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207616
IP address blocks: 185.190.26.0/24 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27125179 (0x19de5bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd6e9afc93183338022c7d8f186af71973aef5ba
Validity
Not Before: Jan 1 03:52:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ccd5b47d779fe2c26a976abe6519076ac9f2227d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1b:73:dc:cd:a2:68:52:d2:00:88:75:45:ab:
ba:68:69:5e:29:d6:30:f9:00:ea:d2:bc:85:65:b0:
65:34:57:c5:62:7a:6b:c8:e8:ea:d1:64:96:0c:84:
5f:dd:d4:5c:5b:62:8c:9f:6c:5c:1d:5a:8e:b4:6b:
fc:07:24:b0:e9:f2:fc:bc:e0:06:02:2d:fd:ce:70:
97:55:cc:e9:5c:34:61:7c:bf:6b:29:eb:68:a9:50:
19:c8:45:07:11:1f:c0:13:99:3e:4a:4d:71:c7:b1:
63:a3:4b:37:97:63:85:90:15:ea:b0:51:74:4a:d4:
f8:8f:e6:d6:9b:10:0a:94:34:00:0d:9a:ed:bc:0b:
29:b9:3f:d8:12:f2:17:a6:32:da:81:47:a7:f7:6c:
fa:f4:97:28:75:ba:9d:69:02:f3:db:d8:e2:38:2a:
22:97:2a:e0:bf:53:36:cc:2b:e9:b4:89:1f:5d:ff:
ea:2e:af:81:96:a2:8c:7b:5d:fe:4b:24:9a:c6:2c:
ff:8b:83:db:a0:0d:90:c6:c4:e6:b9:93:09:b5:64:
f2:75:b5:b4:a0:06:3a:11:af:42:60:e4:3a:e3:31:
43:cb:8e:c9:1b:29:cc:ac:9d:12:38:ea:32:5d:ff:
a6:b8:cb:38:49:14:6b:4b:6b:42:e4:13:75:a0:9d:
0c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:D5:B4:7D:77:9F:E2:C2:6A:97:6A:BE:65:19:07:6A:C9:F2:22:7D
X509v3 Authority Key Identifier:
keyid:DD:6E:9A:FC:93:18:33:38:02:2C:7D:8F:18:6A:F7:19:73:AE:F5:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3W6a_JMYMzgCLH2PGGr3GXOu9bo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/5d3a83-ea9f-4d83-b06b-a35b1bb3dfbd/1/zNW0fXef4sJql2q-ZRkHasnyIn0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/5d3a83-ea9f-4d83-b06b-a35b1bb3dfbd/1/3W6a_JMYMzgCLH2PGGr3GXOu9bo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.190.26.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:3e:4b:4c:71:0a:3d:09:e3:44:f7:ff:24:8a:2e:e4:56:e9:
43:55:ed:b4:e5:ab:81:61:ef:a5:1e:34:57:28:c8:d2:05:62:
b4:a3:cb:72:e0:f5:c7:3c:84:c0:46:69:3a:2f:70:82:15:1a:
8b:c2:9d:76:35:a1:fe:98:46:6e:07:a8:af:85:87:91:40:8b:
60:7a:17:e0:eb:38:3a:e3:86:63:8d:c5:ee:02:a8:8e:08:f9:
b4:e1:cb:55:b4:90:59:a3:d2:16:1a:38:ab:c9:b6:6a:7b:c2:
5a:b2:ce:83:e5:ce:7c:b1:bd:a0:27:ef:6b:e0:56:f5:ea:a3:
8b:64:bd:d5:7e:d4:e4:c6:e1:8d:14:f3:b1:e4:1c:e6:f3:31:
54:3f:18:6c:7c:02:59:e8:65:ec:77:a2:15:42:64:93:a5:cf:
2e:3b:83:b7:34:1b:9e:3c:c9:42:ce:a6:e4:b9:05:7c:98:0d:
98:8a:90:a7:db:10:d9:1e:f5:8d:a4:8b:83:1e:b6:1c:67:69:
98:0e:53:c8:43:c7:61:f0:8d:e2:8e:d7:36:e5:e4:85:4d:98:
13:33:5b:25:48:b3:f3:17:e4:4e:00:43:67:35:3c:fa:48:95:
41:e4:68:e4:10:35:5a:1a:ba:d9:11:fd:22:55:14:13:54:fd:
96:f4:9c:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:11 2024 by rpki-client on console-ams.rpki-client.org