Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/gkdBh3VSeZhgnp062m3TnPVnPm8.roa
File: gkdBh3VSeZhgnp062m3TnPVnPm8.roa (raw, json)
Hash identifier: YRKWtecW27ftA5tqFZrogjToxwS3GNjIs64/IIQHAdc=
Subject key identifier: 82:47:41:87:75:52:79:98:60:9E:9D:3A:DA:6D:D3:9C:F5:67:3E:6F
Certificate issuer: /CN=6bc5de7d7255b7d58260c65a120b164ef10ef903
Certificate serial: 0628B1D8
Authority key identifier: 6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/gkdBh3VSeZhgnp062m3TnPVnPm8.roa
Signing time: Tue 15 Feb 2022 10:10:32 +0000
ROA not before: Tue 15 Feb 2022 10:10:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200845
IP address blocks: 185.204.64.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 103330264 (0x628b1d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bc5de7d7255b7d58260c65a120b164ef10ef903
Validity
Not Before: Feb 15 10:10:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8247418775527998609e9d3ada6dd39cf5673e6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e1:4f:bb:40:7d:db:63:4a:30:9e:3b:e6:14:
05:07:a4:88:3e:9f:55:4b:21:f6:05:d4:8e:78:51:
73:07:8e:ff:d2:c2:c2:0b:14:04:e0:4b:e3:29:86:
78:ba:eb:e1:35:56:11:cd:47:e6:66:20:4c:bd:8b:
e9:ee:4d:bb:93:06:70:61:bc:d8:b1:1e:f9:bf:10:
15:3a:03:72:dc:7a:94:26:80:6b:ea:ad:d6:8e:e5:
f5:8e:47:7b:80:17:91:d2:cd:94:2f:41:50:ce:74:
92:32:72:7a:8a:f8:43:33:0d:1a:c7:fb:b0:00:54:
7d:43:63:a9:41:c9:95:e7:7f:e0:f3:f9:2e:92:0e:
1a:f3:32:97:d3:73:cc:1d:c9:68:e5:1d:e3:95:b9:
84:66:aa:03:fb:81:71:51:9f:3d:32:e4:e8:1b:7a:
f8:61:71:07:1c:03:0d:76:b9:0a:05:92:12:59:e3:
dc:b9:e5:ec:52:93:83:25:ee:81:23:7c:f1:8a:12:
5f:ce:b6:36:d4:95:97:53:cf:8e:b0:38:7a:00:61:
a6:2d:8d:64:97:e3:60:ce:44:1c:5f:df:b1:d5:42:
b9:06:7d:57:60:48:7d:b7:c7:4c:9c:18:c6:2d:4f:
8e:8a:de:f6:e2:a1:28:13:50:25:a0:53:13:b9:5a:
e6:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:47:41:87:75:52:79:98:60:9E:9D:3A:DA:6D:D3:9C:F5:67:3E:6F
X509v3 Authority Key Identifier:
keyid:6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/gkdBh3VSeZhgnp062m3TnPVnPm8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.204.64.0/24
Signature Algorithm: sha256WithRSAEncryption
99:be:6c:a3:b5:ec:55:04:7b:e1:a6:18:ba:a5:2c:d4:2a:1c:
03:d0:8f:f9:35:2a:64:96:5a:0f:c1:7a:fe:99:ed:12:52:01:
03:77:5c:c0:2f:6b:b4:42:4d:20:88:9a:3d:0e:0d:1a:fd:90:
eb:03:5e:59:8d:87:58:9f:24:ba:ca:05:91:c2:fa:6c:96:6e:
6f:dd:bd:7e:ff:ba:fb:cd:e9:45:ab:74:fe:f1:d5:a0:d4:0e:
0a:90:d0:da:d2:6b:17:e5:f4:1a:a7:34:13:60:58:ec:44:6f:
df:05:a1:9c:9d:68:a4:10:e3:6a:47:b6:94:95:d9:94:24:59:
69:34:77:97:ce:e0:11:c5:7d:a4:9f:f0:aa:b4:8f:5d:47:2e:
fa:2a:e9:6f:42:68:68:a3:68:25:24:a4:62:05:ee:8a:f3:05:
09:46:56:49:16:8c:2a:85:9c:42:a6:dd:36:1d:f5:12:84:e5:
4e:68:f7:06:2a:3b:14:6d:d2:d5:3c:f4:3c:7f:a9:a1:d2:15:
03:e1:82:15:11:9e:88:03:f4:ec:a1:81:01:a8:b8:c9:fe:8a:
5d:2d:23:8c:b0:6c:1c:5f:fa:65:9c:f5:3a:57:17:9e:9a:60:
6d:fe:8a:87:7f:0d:be:41:38:02:dc:a2:c2:4c:49:f4:f9:9f:
44:4c:85:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:54 2024 by rpki-client on console-ams.rpki-client.org