Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/uSRjxLlSPnP_HEx4WFlHatwwcBw.roa
File: uSRjxLlSPnP_HEx4WFlHatwwcBw.roa (raw, json)
Hash identifier: pV9MbPr5n1Z3PtlYqpTOsPBQLhCI5C5Iuszcevc4jGA=
Subject key identifier: B9:24:63:C4:B9:52:3E:73:FF:1C:4C:78:58:59:47:6A:DC:30:70:1C
Certificate issuer: /CN=11dd0ebff5ba38a8758b794d04d62905194a3266
Certificate serial: 01856D2F2EBE59CCFB9AB932C40E12AAF82B
Authority key identifier: 11:DD:0E:BF:F5:BA:38:A8:75:8B:79:4D:04:D6:29:05:19:4A:32:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/uSRjxLlSPnP_HEx4WFlHatwwcBw.roa
Signing time: Sun 01 Jan 2023 11:54:46 +0000
ROA not before: Sun 01 Jan 2023 11:54:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 185.160.193.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:2f:2e:be:59:cc:fb:9a:b9:32:c4:0e:12:aa:f8:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11dd0ebff5ba38a8758b794d04d62905194a3266
Validity
Not Before: Jan 1 11:54:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b92463c4b9523e73ff1c4c785859476adc30701c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ea:7e:67:28:b3:ed:1b:13:57:f6:0f:5b:e0:
09:ac:44:12:1b:9a:b5:4c:6f:82:0a:ff:c5:2a:b7:
91:d5:a2:5d:65:be:56:06:21:3a:20:2e:5e:f8:91:
15:ed:11:a3:67:a5:c5:e7:83:c2:1c:c4:fc:b2:99:
ba:28:40:13:b5:78:f4:f9:dd:a4:dc:d6:84:36:43:
61:34:b7:87:4c:b0:18:c7:df:a7:41:c2:82:68:08:
3c:1f:7a:fe:14:7e:9d:2a:05:08:72:d1:71:4c:fa:
33:89:57:ea:e1:a1:5c:8e:10:f3:fd:7c:bf:c5:2a:
16:fe:9a:6a:9b:73:6f:97:e6:c4:6a:2d:de:1f:1d:
9c:89:5d:f6:fe:eb:9a:59:a7:fa:96:6e:3d:21:f8:
7d:86:a5:8e:d8:fa:70:42:27:f1:37:f6:3b:d8:75:
60:79:6d:8f:78:5a:a7:12:17:f4:19:da:c6:05:d3:
8d:f4:67:ee:6b:73:3d:68:3a:71:81:0f:91:a6:d4:
c0:8b:9c:17:83:ea:8a:6e:e8:2e:b7:fc:66:d4:1e:
32:3c:84:1c:b6:6a:d6:d0:73:4a:5b:ce:df:14:f9:
a8:0e:21:af:24:97:bc:51:13:ae:e8:fd:ba:f3:47:
bd:31:2c:e4:bf:ae:77:c1:87:c1:4f:7c:9f:ca:4b:
a9:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:24:63:C4:B9:52:3E:73:FF:1C:4C:78:58:59:47:6A:DC:30:70:1C
X509v3 Authority Key Identifier:
keyid:11:DD:0E:BF:F5:BA:38:A8:75:8B:79:4D:04:D6:29:05:19:4A:32:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/uSRjxLlSPnP_HEx4WFlHatwwcBw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.160.193.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:fd:78:3f:3e:39:57:2b:8c:d0:05:7b:f5:69:df:89:cb:cd:
be:1d:b0:77:75:46:82:99:87:6d:44:1b:81:ea:c2:08:6a:2e:
13:da:4b:30:a8:57:75:38:df:36:04:93:a6:80:f1:ca:6c:12:
aa:e5:fd:4f:0f:77:5a:a1:4d:8a:6f:11:62:17:e3:97:cb:21:
ce:51:5e:50:65:01:c2:cf:4f:d7:22:4d:b6:fa:d6:06:cd:4e:
e1:ca:13:b2:f4:57:41:3e:89:e1:95:1b:b2:71:54:c5:8c:03:
f8:ac:c5:f5:f9:2c:d1:4d:67:ba:30:73:c1:58:19:a8:a4:52:
43:00:de:ee:ab:57:a3:b3:fa:2b:75:48:81:53:7f:21:34:1a:
00:83:3a:e3:e9:01:3a:55:9d:84:74:0d:fc:d3:f8:c5:65:4e:
84:46:63:c3:2c:1d:30:f5:cd:e0:89:fa:f5:b7:b3:cb:d5:53:
9e:10:43:c1:bf:fd:e6:96:81:17:af:b4:17:0f:ac:7b:2e:7b:
a3:64:a4:ce:b0:9a:9b:66:b8:43:e4:b4:49:ef:3b:5f:31:ba:
d3:b5:52:7d:52:73:72:a2:4c:36:9f:7a:31:b3:e0:31:55:39:
63:6d:16:0d:6e:7b:bd:df:c6:43:c0:f8:01:43:d0:db:aa:9d:
c2:ee:20:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:16 2023 by rpki-client on console-ams.rpki-client.org