Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/4IFbJl4CNpPsXNELV-nmIzbrdIs.roa
File: 4IFbJl4CNpPsXNELV-nmIzbrdIs.roa (raw, json)
Hash identifier: u6yeW5gbsGYfltP7xcnzWiSyuUdnWXdPoHeCRn7jwSY=
Subject key identifier: E0:81:5B:26:5E:02:36:93:EC:5C:D1:0B:57:E9:E6:23:36:EB:74:8B
Certificate issuer: /CN=6bc5de7d7255b7d58260c65a120b164ef10ef903
Certificate serial: 0627C282
Authority key identifier: 6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/4IFbJl4CNpPsXNELV-nmIzbrdIs.roa
Signing time: Tue 15 Feb 2022 10:08:57 +0000
ROA not before: Tue 15 Feb 2022 10:08:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50129
IP address blocks: 185.204.64.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 103268994 (0x627c282)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bc5de7d7255b7d58260c65a120b164ef10ef903
Validity
Not Before: Feb 15 10:08:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e0815b265e023693ec5cd10b57e9e62336eb748b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:56:0d:1d:0a:cf:e7:97:98:3e:0f:cc:94:59:
dd:90:cb:f8:e1:33:77:72:c1:e6:e7:61:ea:c9:a2:
aa:f8:c7:c2:87:64:74:5b:35:47:4c:e3:53:08:95:
0a:df:10:7d:21:de:ff:33:08:4f:3e:92:89:86:77:
dc:39:ec:1b:14:5e:7d:12:c0:14:98:25:47:86:3d:
6c:62:7c:a5:c7:c2:0f:41:7c:d0:d8:6a:3d:82:7c:
64:d4:c8:bd:9e:4b:b6:e3:b3:2e:a2:3e:ae:41:77:
9e:c6:b3:2c:db:2f:52:00:1b:09:5a:b7:28:49:d9:
1f:8e:5b:43:42:f3:68:51:95:2c:f5:61:4a:9b:7f:
16:cb:0f:89:16:4d:a6:fa:19:84:7c:2f:7a:86:e9:
61:2f:1d:b0:9f:1f:6a:5f:18:df:d6:59:f0:0e:fa:
0c:c9:b1:ab:00:df:3e:96:59:b8:33:b4:13:53:32:
3f:ff:2a:b3:0c:b5:28:c7:a1:07:4f:80:73:13:85:
eb:9e:f3:2c:7d:84:a4:14:0f:65:69:0e:38:e5:8c:
fb:fd:b1:ae:05:37:af:5f:9c:5d:03:2c:b9:2b:cb:
57:73:ed:13:16:34:ed:03:a1:ff:f1:78:2e:2f:e7:
f6:b0:0f:0f:02:92:0e:e3:94:38:15:57:a4:31:60:
cc:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:81:5B:26:5E:02:36:93:EC:5C:D1:0B:57:E9:E6:23:36:EB:74:8B
X509v3 Authority Key Identifier:
keyid:6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/4IFbJl4CNpPsXNELV-nmIzbrdIs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.204.64.0/24
Signature Algorithm: sha256WithRSAEncryption
11:40:91:b1:a4:f7:ea:f4:56:a1:ec:82:15:8e:93:a4:ce:66:
5d:aa:b1:ac:f8:34:40:cc:88:6e:a1:ef:b0:fe:66:59:05:b3:
e7:ed:b6:d5:25:66:9c:da:55:a4:1d:a2:cf:1a:39:b8:1b:9d:
dd:f3:a9:45:81:e0:db:51:64:e4:d7:1c:b5:fc:dd:c1:1d:a7:
aa:71:74:2d:2a:9d:e2:84:75:bb:76:d1:d4:b5:c8:3a:ad:fe:
d9:14:74:5c:21:fe:e8:07:81:af:28:a7:b0:ed:93:06:7f:40:
b1:ac:16:67:06:cd:21:56:ad:74:05:18:36:ef:d4:dd:c9:ad:
0f:cb:e0:1c:69:eb:56:e9:3a:4a:75:12:24:a0:1c:68:a1:82:
28:b1:62:e8:8b:3b:32:61:68:8d:19:0b:72:b8:71:d2:fb:b9:
3a:27:ef:ea:0c:ec:f6:b3:72:94:d3:24:cb:7b:6d:1a:f5:cd:
80:d6:c4:ae:d6:ee:2e:e1:d5:5e:e4:71:e6:ec:8a:63:4e:85:
01:ad:f6:57:6b:ed:79:42:8e:0b:8e:c9:58:79:8a:33:32:da:
48:a8:37:8a:f0:8b:ac:63:57:5b:cc:48:85:b6:63:b6:33:c5:
b3:ac:07:d2:46:df:ee:c0:ca:a3:78:cc:c9:94:58:2d:52:44:
fb:ed:50:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:34 2024 by rpki-client on console-fra.rpki-client.org