Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/5AAVNEmuh9RR_nhQf79QJkh1LYc.roa
File: 5AAVNEmuh9RR_nhQf79QJkh1LYc.roa (raw, json)
Hash identifier: voloT1+geEs/Ws7vpZJ843Ha4ZQIWB2ttwQ9g1GXUXY=
Subject key identifier: E4:00:15:34:49:AE:87:D4:51:FE:78:50:7F:BF:50:26:48:75:2D:87
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0187483E4C16502EC824F1026DE962FD4CB1
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/5AAVNEmuh9RR_nhQf79QJkh1LYc.roa
Signing time: Mon 03 Apr 2023 17:50:54 +0000
ROA not before: Mon 03 Apr 2023 17:50:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212219
IP address blocks: 185.230.249.0/24 maxlen: 24
185.245.238.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:48:3e:4c:16:50:2e:c8:24:f1:02:6d:e9:62:fd:4c:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Apr 3 17:50:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e400153449ae87d451fe78507fbf502648752d87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:44:80:e2:09:2f:b5:97:3c:4b:76:21:84:dd:
9f:76:01:b5:b7:b4:13:1a:43:fd:7a:d7:dc:65:23:
7e:42:f9:fe:b1:00:c6:47:b8:01:c3:56:54:41:12:
31:2e:06:78:fa:33:39:48:77:bf:26:87:68:13:98:
85:09:81:96:5d:85:1f:b5:c5:c1:b5:b4:57:f9:ef:
be:e3:c1:da:41:1a:58:9f:a5:f5:05:ce:38:1f:7b:
87:9e:3d:6f:3e:34:27:6c:03:ee:20:bc:93:df:02:
d6:fc:50:7d:91:a3:9e:9b:8a:8a:11:ce:ec:84:de:
79:5e:34:42:e4:e8:6a:c3:9a:8f:01:b0:34:76:43:
e8:a3:13:58:40:86:82:75:ca:50:9d:68:69:7b:4c:
34:18:31:24:7b:f8:4b:8f:9c:ae:25:01:bc:4c:7e:
bb:d5:b9:ef:ed:5d:64:15:ba:e0:4f:e8:4e:cd:d8:
d2:9f:7a:2a:b6:b6:9d:b3:67:0d:7d:f6:51:a8:cf:
0a:5e:98:b2:c3:6e:da:55:f3:35:85:f4:c7:4f:2b:
57:78:bc:a8:52:8c:a7:04:53:da:02:dc:e7:cc:93:
3a:43:15:55:f1:7c:d5:e7:65:2e:ec:e1:34:ff:3e:
3b:b2:44:9f:e2:8d:26:49:85:71:79:1b:24:19:40:
63:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:00:15:34:49:AE:87:D4:51:FE:78:50:7F:BF:50:26:48:75:2D:87
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/5AAVNEmuh9RR_nhQf79QJkh1LYc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.230.249.0/24
185.245.238.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:89:41:b1:4d:0a:93:97:be:88:43:2f:43:39:28:6e:1f:5f:
6d:04:90:b4:cf:09:f6:dd:2b:a3:f2:60:58:4e:34:86:d1:18:
35:63:c5:f0:f5:c5:9a:b6:1d:fd:5f:e8:38:f8:59:bf:0d:cf:
74:10:89:8e:9a:91:9e:86:2e:bf:da:5b:27:22:d7:99:0b:e3:
fa:34:2f:ef:17:aa:88:cd:e0:17:0f:6c:75:54:05:9d:51:f4:
0a:3b:13:6d:10:bd:1f:1c:10:12:93:7b:c6:4e:c0:d3:bb:2f:
01:c1:6e:76:d2:1e:8f:3d:6d:30:29:42:ec:02:48:ff:d4:fe:
96:7d:b9:0f:12:71:d2:2d:21:37:8e:a3:61:a9:e7:12:cb:a5:
22:32:0f:12:94:61:de:a5:fa:ae:58:e6:63:02:dc:36:16:db:
f9:13:22:1a:28:12:30:2c:52:8e:9c:7c:d0:6b:02:84:21:f5:
2e:20:3f:dc:aa:a0:87:c7:61:dc:47:aa:c9:3a:60:8e:9f:5c:
b1:db:1e:8e:1e:16:50:13:61:00:05:8c:14:f0:4c:9a:66:14:
45:31:61:84:78:33:ad:eb:bf:c7:b9:4c:70:ea:03:3e:0b:ff:
2c:75:8f:20:b7:93:64:43:97:a8:f7:46:a4:9f:fe:13:a5:b7:
18:d2:00:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:08 2024 by rpki-client on console-ams.rpki-client.org