Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/L6Ubz4g490wnp42RTBxYuqgQRtc.roa
File: L6Ubz4g490wnp42RTBxYuqgQRtc.roa (raw, json)
Hash identifier: jv6pMQXiB8jzQQq0N/iYy0P6va8jyuFPiPILVRwvK+0=
Subject key identifier: 2F:A5:1B:CF:88:38:F7:4C:27:A7:8D:91:4C:1C:58:BA:A8:10:46:D7
Certificate issuer: /CN=423d93054f063cf8a291861735f90059ab9ec169
Certificate serial: 01878F69110FBB68B118800B74E6DCFA1E79
Authority key identifier: 42:3D:93:05:4F:06:3C:F8:A2:91:86:17:35:F9:00:59:AB:9E:C1:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qj2TBU8GPPiikYYXNfkAWauewWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/L6Ubz4g490wnp42RTBxYuqgQRtc.roa
Signing time: Mon 17 Apr 2023 13:30:40 +0000
ROA not before: Mon 17 Apr 2023 13:30:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206495
IP address blocks: 185.188.112.0/24 maxlen: 24
185.188.113.0/24 maxlen: 24
185.188.115.0/24 maxlen: 24
185.188.114.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:8f:69:11:0f:bb:68:b1:18:80:0b:74:e6:dc:fa:1e:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=423d93054f063cf8a291861735f90059ab9ec169
Validity
Not Before: Apr 17 13:30:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2fa51bcf8838f74c27a78d914c1c58baa81046d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d1:b3:a6:2a:ac:8b:4f:97:bf:7b:e3:79:7f:
7c:03:c3:7e:12:88:76:84:36:bd:09:e5:ed:1c:a4:
48:1d:2e:c2:ef:68:49:d4:9e:90:64:11:7b:dd:35:
13:b2:82:43:51:d4:63:3b:aa:10:8c:51:ce:bc:d2:
df:18:e4:cd:58:ea:9c:e8:b3:38:88:12:86:b8:22:
f1:7d:06:fe:a3:80:e0:d9:f7:9f:01:5a:00:59:56:
99:23:75:fa:8a:c4:c7:80:0f:74:1a:e0:83:1e:c8:
87:81:76:c5:0c:ed:5f:45:1a:91:b6:bb:14:8d:36:
65:70:1e:a7:5e:36:89:df:3f:cb:02:a3:20:bd:2b:
90:a0:26:d4:e7:54:f5:14:8d:92:b0:1b:74:84:b4:
6c:16:e7:25:0b:aa:fd:0e:fe:30:95:19:55:f9:a7:
d1:87:07:d9:6d:d8:82:7a:ee:b9:00:9e:f1:96:62:
f8:d1:13:d2:6b:7d:ec:bd:c8:36:18:73:5a:73:8b:
b2:4c:c8:27:96:6e:be:35:b4:57:75:6e:da:2e:ab:
08:2f:59:24:b7:ef:7a:07:8d:93:b7:b8:d6:c3:24:
cf:73:cd:b2:de:46:a9:78:f8:c3:1d:f4:68:b0:99:
20:a8:ac:6a:40:eb:3e:5e:9f:91:37:75:6b:fe:9f:
36:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:A5:1B:CF:88:38:F7:4C:27:A7:8D:91:4C:1C:58:BA:A8:10:46:D7
X509v3 Authority Key Identifier:
keyid:42:3D:93:05:4F:06:3C:F8:A2:91:86:17:35:F9:00:59:AB:9E:C1:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qj2TBU8GPPiikYYXNfkAWauewWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/L6Ubz4g490wnp42RTBxYuqgQRtc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.188.112.0/22
Signature Algorithm: sha256WithRSAEncryption
05:da:ac:51:30:cd:83:9a:66:84:2f:68:09:59:71:d6:5c:f0:
e4:9a:37:93:9a:6f:35:ea:cf:de:19:59:a1:60:c5:68:21:94:
92:0e:9e:c7:2a:ce:15:d6:34:20:d6:78:30:08:af:02:29:23:
f6:a6:2b:24:d9:1e:a4:33:45:8a:48:04:15:63:68:5b:95:42:
53:58:9a:99:34:78:0a:37:a0:41:ea:f2:15:ff:f7:dc:f3:0a:
87:4f:ca:3c:e6:ed:ad:fc:bb:77:6d:14:0a:a7:74:96:89:2e:
cb:b9:18:d8:d8:d0:a8:19:70:f9:5b:9c:2b:c1:1b:00:6a:1d:
e7:b9:02:d1:8d:3f:dc:cb:a2:34:77:67:f4:1b:b1:cc:6d:ca:
78:d7:85:73:26:67:bd:8c:fd:a8:63:af:4a:ea:46:76:62:78:
62:4b:9a:b3:85:c5:0a:35:25:c2:f5:67:c3:98:0c:33:71:ed:
68:c1:fd:21:5e:f4:d3:38:db:0f:9e:33:fa:e4:d5:93:b7:03:
65:2a:48:32:cb:49:6d:64:7b:c8:af:80:12:37:39:e6:22:df:
d6:6c:18:94:14:54:4f:33:ab:ff:86:f9:a8:81:96:f3:bb:01:
64:e0:ee:1d:62:ed:99:66:c0:a6:f0:35:b4:29:52:04:e2:8e:
40:23:05:6a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYePaREPu2ixGIALdObc+h55MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyM2Q5MzA1NGYwNjNjZjhhMjkxODYxNzM1ZjkwMDU5YWI5
ZWMxNjkwHhcNMjMwNDE3MTMzMDQwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZmE1MWJjZjg4MzhmNzRjMjdhNzhkOTE0YzFjNThiYWE4MTA0NmQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0dGzpiqsi0+Xv3vjeX98A8N+Eoh2
hDa9CeXtHKRIHS7C72hJ1J6QZBF73TUTsoJDUdRjO6oQjFHOvNLfGOTNWOqc6LM4
iBKGuCLxfQb+o4Dg2fefAVoAWVaZI3X6isTHgA90GuCDHsiHgXbFDO1fRRqRtrsU
jTZlcB6nXjaJ3z/LAqMgvSuQoCbU51T1FI2SsBt0hLRsFuclC6r9Dv4wlRlV+afR
hwfZbdiCeu65AJ7xlmL40RPSa33svcg2GHNac4uyTMgnlm6+NbRXdW7aLqsIL1kk
t+96B42Tt7jWwyTPc82y3kapePjDHfRosJkgqKxqQOs+Xp+RN3Vr/p82QwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFC+lG8+IOPdMJ6eNkUwcWLqoEEbXMB8GA1UdIwQY
MBaAFEI9kwVPBjz4opGGFzX5AFmrnsFpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWoyVEJVOEdQUGlpa1lZWE5ma0FXYXVld1drLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS8wYzJlYzMtMzg0NC00YjVmLTlmNTgt
NWYxYjY5MDQ4ZmUyLzEvTDZVYno0ZzQ5MHducDQyUlRCeFl1cWdRUnRjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS8wYzJlYzMtMzg0NC00YjVmLTlmNTgtNWYxYjY5MDQ4ZmUy
LzEvUWoyVEJVOEdQUGlpa1lZWE5ma0FXYXVld1drLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCubxwMA0G
CSqGSIb3DQEBCwUAA4IBAQAF2qxRMM2DmmaEL2gJWXHWXPDkmjeTmm816s/eGVmh
YMVoIZSSDp7HKs4V1jQg1ngwCK8CKSP2pisk2R6kM0WKSAQVY2hblUJTWJqZNHgK
N6BB6vIV//fc8wqHT8o85u2t/Lt3bRQKp3SWiS7LuRjY2NCoGXD5W5wrwRsAah3n
uQLRjT/cy6I0d2f0G7HMbcp414VzJme9jP2oY69K6kZ2YnhiS5qzhcUKNSXC9WfD
mAwzce1owf0hXvTTONsPnjP65NWTtwNlKkgyy0ltZHvIr4ASNznmIt/WbBiUFFRP
M6v/hvmogZbzuwFk4O4dYu2ZZsCm8DW0KVIE4o5AIwVq
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:45 2024 by rpki-client on console-ams.rpki-client.org