Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/ace3FWWpSZ4If2Z3-soqksKfDCk.roa
File: ace3FWWpSZ4If2Z3-soqksKfDCk.roa (raw, json)
Hash identifier: ienSHTYrZrHIHEZOW6bYSKiuYhaX66uRS67klD+m0mg=
Subject key identifier: 69:C7:B7:15:65:A9:49:9E:08:7F:66:77:FA:CA:2A:92:C2:9F:0C:29
Certificate issuer: /CN=6bc5de7d7255b7d58260c65a120b164ef10ef903
Certificate serial: 064103A3
Authority key identifier: 6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/ace3FWWpSZ4If2Z3-soqksKfDCk.roa
Signing time: Sun 27 Feb 2022 19:38:16 +0000
ROA not before: Sun 27 Feb 2022 19:38:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50129
IP address blocks: 185.89.28.0/24 maxlen: 24
185.84.44.0/24 maxlen: 24
185.84.45.0/24 maxlen: 24
185.84.46.0/24 maxlen: 24
185.84.47.0/24 maxlen: 24
185.204.64.0/24 maxlen: 24
185.86.211.0/24 maxlen: 24
185.76.78.0/24 maxlen: 24
185.76.79.0/24 maxlen: 24
185.75.20.0/24 maxlen: 24
185.75.21.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104924067 (0x64103a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bc5de7d7255b7d58260c65a120b164ef10ef903
Validity
Not Before: Feb 27 19:38:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=69c7b71565a9499e087f6677faca2a92c29f0c29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:65:f7:6b:4a:68:9b:92:13:0b:65:f0:9b:98:
ff:59:7f:d4:8e:ea:f5:02:b9:4f:7d:ac:0a:ca:5f:
b3:58:aa:45:27:c9:54:7b:df:cb:34:9a:6c:39:74:
81:60:8b:39:49:25:69:4c:43:f9:2b:0e:48:c6:f9:
7d:86:3e:98:9c:11:77:53:c1:4e:01:d2:5c:cc:38:
fa:d3:43:25:e0:75:3e:7b:0c:50:50:56:42:6e:f2:
e9:8d:9c:2f:9c:92:38:78:32:51:64:e0:82:c0:60:
87:f7:ea:00:80:0c:2e:d7:73:58:d2:76:24:ef:37:
ba:16:19:0f:4f:92:66:6a:13:de:6d:75:e8:7c:e2:
d5:28:b0:26:e1:ee:c1:c8:fb:ac:51:2c:74:91:07:
5f:3e:93:d0:1b:21:5e:0c:98:c4:0e:29:13:f7:49:
6f:ad:42:14:12:f6:9b:3e:8d:14:c9:bb:0d:ec:38:
50:67:49:cf:4d:19:30:89:d5:1c:15:f5:69:17:b2:
b9:e7:50:36:81:82:04:cd:25:e0:ba:b1:c3:29:7a:
04:9b:57:6d:70:7f:27:be:e7:7b:72:19:95:c0:c8:
8e:cf:0e:4f:68:17:cf:eb:c2:ec:cf:d4:7a:4c:f9:
f4:64:1d:69:20:32:84:dd:54:83:59:fe:31:4e:f8:
b5:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:C7:B7:15:65:A9:49:9E:08:7F:66:77:FA:CA:2A:92:C2:9F:0C:29
X509v3 Authority Key Identifier:
keyid:6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/ace3FWWpSZ4If2Z3-soqksKfDCk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.75.20.0/23
185.76.78.0/23
185.84.44.0/22
185.86.211.0/24
185.89.28.0/24
185.204.64.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:00:b0:29:e9:e2:3c:00:4c:dc:12:98:0d:c8:b1:5f:19:51:
3b:d6:ea:d8:e5:9b:c5:f4:07:d0:ec:eb:f5:10:e6:70:fd:85:
7a:da:25:31:59:f7:d3:48:65:89:44:b8:3e:9f:6f:97:04:e2:
78:80:d6:d7:57:04:62:44:c0:02:b6:a0:6f:5e:e0:2c:8b:e5:
dd:70:78:51:01:a1:30:b2:c3:69:ab:8d:67:e7:35:f9:f3:a6:
9e:3c:91:d3:79:3d:28:96:d2:2a:c2:c1:50:28:5c:fb:4a:72:
73:2d:80:63:bd:17:74:bf:41:24:6b:c1:f7:4e:1a:4c:48:11:
a0:61:fe:a2:cb:98:61:c8:ec:1c:9d:81:97:1d:6f:6e:96:70:
04:7c:74:de:a9:1d:ce:bb:48:7a:0d:63:66:35:56:1c:51:87:
4d:b2:47:45:79:71:5e:94:3c:f7:d6:c2:90:26:cf:c7:58:6f:
40:fc:59:4a:d3:15:89:21:e1:f4:6b:cf:5f:e7:9c:37:5d:fe:
da:99:53:0a:74:2b:b7:f0:61:e9:eb:14:17:82:da:34:8b:3c:
1b:5f:2b:13:78:dd:5b:ac:1a:d7:ca:37:c7:c0:c3:03:9a:82:
1d:7a:d4:97:2d:ee:6c:6a:10:5d:2a:17:d7:18:c6:1a:d3:9a:
2a:45:14:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:34 2024 by rpki-client on console-fra.rpki-client.org