Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/nOcjinD9-xjOsA2ivVM0V4Az4IE.roa
File: nOcjinD9-xjOsA2ivVM0V4Az4IE.roa (raw, json)
Hash identifier: /+QcgB8TveQQzB6+jo4kwvjF1LGK+edsan5o9JNxMP4=
Subject key identifier: 9C:E7:23:8A:70:FD:FB:18:CE:B0:0D:A2:BD:53:34:57:80:33:E0:81
Certificate issuer: /CN=11dd0ebff5ba38a8758b794d04d62905194a3266
Certificate serial: 0183CA71C2ACC03227F742063E1C603B06BB
Authority key identifier: 11:DD:0E:BF:F5:BA:38:A8:75:8B:79:4D:04:D6:29:05:19:4A:32:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/nOcjinD9-xjOsA2ivVM0V4Az4IE.roa
Signing time: Wed 12 Oct 2022 04:26:36 +0000
ROA not before: Wed 12 Oct 2022 04:26:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205570
IP address blocks: 185.160.195.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:ca:71:c2:ac:c0:32:27:f7:42:06:3e:1c:60:3b:06:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11dd0ebff5ba38a8758b794d04d62905194a3266
Validity
Not Before: Oct 12 04:26:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9ce7238a70fdfb18ceb00da2bd5334578033e081
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a0:ba:96:5b:ef:e7:90:2f:8e:b8:8d:29:77:
f3:ef:69:36:dc:87:2d:b7:4a:3b:45:1b:a5:f4:b1:
81:92:57:34:d3:8e:83:99:ff:88:37:10:15:d2:d4:
e3:49:7d:e9:32:0b:c6:9b:36:ba:09:69:c0:3e:55:
39:fe:61:4f:aa:06:2e:0d:eb:83:2b:c5:96:96:e9:
9f:29:13:0f:c7:de:28:2d:aa:4f:a6:ba:cd:cd:58:
0b:6d:50:88:8d:0f:81:70:46:c6:ad:7c:1e:c2:16:
c0:d6:00:ee:54:63:2b:f1:ff:76:0a:3d:85:07:cf:
27:01:83:d6:f6:42:99:68:56:28:88:d0:20:8a:f6:
6f:ce:7e:1a:db:2f:74:97:75:6c:f1:b0:4e:b5:1a:
20:73:68:b6:61:be:97:37:d6:2a:ce:4f:73:92:f9:
54:e7:f7:ee:83:a3:97:0b:b8:84:dc:64:ee:7a:6e:
1d:a2:a1:d3:a9:43:21:5d:56:fa:a1:33:40:13:1c:
6f:a8:96:40:a2:88:af:b6:eb:00:d6:d2:22:44:fa:
4a:ba:53:0e:77:af:e4:8b:fc:9e:1f:1d:dd:4e:79:
41:24:c4:68:18:ff:57:52:76:cf:84:61:57:7f:7d:
ce:56:23:88:0f:9e:f4:5f:4f:07:cf:53:f3:ad:0b:
cc:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:E7:23:8A:70:FD:FB:18:CE:B0:0D:A2:BD:53:34:57:80:33:E0:81
X509v3 Authority Key Identifier:
keyid:11:DD:0E:BF:F5:BA:38:A8:75:8B:79:4D:04:D6:29:05:19:4A:32:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/nOcjinD9-xjOsA2ivVM0V4Az4IE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.160.195.0/24
Signature Algorithm: sha256WithRSAEncryption
60:65:79:6b:85:42:d8:ca:0d:56:a2:26:a6:e5:3e:d1:bf:23:
8e:45:70:eb:c8:92:4f:57:23:b0:d5:8f:19:2f:69:4e:d2:26:
75:be:90:c5:d6:f5:cc:9e:05:22:5e:e5:e9:15:7d:dc:e3:a7:
b6:78:00:9a:cb:b5:b5:c6:52:dc:da:5c:b3:82:2e:af:e3:39:
a5:d0:8a:85:46:f8:41:5b:1e:a8:22:f4:87:23:8e:99:21:ab:
f7:24:c4:1c:6d:6e:bd:bf:e0:34:29:db:c6:a3:c4:75:96:c2:
a0:98:30:10:70:f3:a6:8a:88:a0:0f:ef:86:ba:c8:65:de:4e:
69:88:ae:05:96:c1:d8:e5:32:05:46:d8:d0:e7:76:44:1f:bf:
a8:bb:0e:c7:33:ba:f7:9a:71:f7:af:d9:d1:61:4a:74:e6:69:
1b:47:38:ec:0b:dd:70:fc:34:ca:9d:6a:b7:f3:17:35:f7:2d:
5b:15:d5:fb:cd:92:94:36:1d:fc:ec:cd:fd:f7:b9:d0:4a:ce:
a9:c6:c7:e1:73:88:52:68:6d:de:59:76:13:87:d4:7f:c6:7f:
1b:96:96:ca:19:46:f1:17:7c:d5:65:e8:da:b0:e6:8e:99:ae:
87:4a:1a:a0:a2:d1:e0:ec:d6:e8:c8:8d:b0:d0:a3:51:d2:5e:
50:d2:54:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:39:53 2025 by rpki-client