Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/NsPPgYsn--HFg0BrfQb5nDoCqDs.roa
File: NsPPgYsn--HFg0BrfQb5nDoCqDs.roa (raw, json)
Hash identifier: V4UbvBzBeGlxGPu+cO7T4uB17grWmF8NBbmaJ6kWU90=
Subject key identifier: 36:C3:CF:81:8B:27:FB:E1:C5:83:40:6B:7D:06:F9:9C:3A:02:A8:3B
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 0182B0C6858C6D9A4916246742FE34209FBB
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/NsPPgYsn--HFg0BrfQb5nDoCqDs.roa
Signing time: Thu 18 Aug 2022 11:46:16 +0000
ROA not before: Thu 18 Aug 2022 11:46:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12608
IP address blocks: 185.112.81.0/24 maxlen: 24
2a0f:3380::/29 maxlen: 29
2a0f:2380::/29 maxlen: 29
2a0f:a700::/29 maxlen: 29
2a0d:88c0::/29 maxlen: 29
2a0f:7300::/29 maxlen: 29
2a09:5300::/29 maxlen: 29
2a0d:8340::/29 maxlen: 29
2a0b:a300::/32 maxlen: 32
2a0f:4580::/29 maxlen: 29
2a0c:7440::/29 maxlen: 29
2a0c:74c0::/29 maxlen: 29
2a0f:5580::/29 maxlen: 29
2a0f:1180::/29 maxlen: 29
2a0f:4680::/29 maxlen: 29
2a0c:7540::/29 maxlen: 29
2a0f:a500::/29 maxlen: 29
2a0f:7b80::/29 maxlen: 29
2a0f:7100::/29 maxlen: 29
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:b0:c6:85:8c:6d:9a:49:16:24:67:42:fe:34:20:9f:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Aug 18 11:46:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=36c3cf818b27fbe1c583406b7d06f99c3a02a83b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d7:57:77:80:57:15:8e:9b:6b:8f:d0:92:27:
7f:83:8a:25:66:ed:cb:1f:66:9c:61:a6:df:06:8e:
75:d4:1b:02:51:2e:6b:81:2f:d2:06:df:ca:54:60:
8f:33:2e:ac:2f:65:81:86:6d:22:c7:ef:b6:01:5b:
08:2d:ec:de:71:74:7f:4c:d2:05:3b:81:b0:57:54:
8b:1c:86:f0:85:de:57:2e:61:27:48:3b:2f:18:d1:
47:b4:a0:8a:cf:56:72:77:c2:55:0b:35:ca:86:16:
3e:85:45:ac:e9:3f:34:5e:fd:7f:5e:d2:b1:03:30:
46:2a:f6:c2:41:90:c3:0b:ab:bd:99:97:dc:a7:38:
40:ea:01:44:9f:8d:89:1e:30:59:52:49:6c:55:64:
ae:ad:c1:90:75:c8:45:57:60:f8:ac:0a:34:d2:ca:
f3:dc:8c:75:66:53:f3:01:14:82:84:12:d8:7e:42:
c6:85:df:06:23:1f:28:3f:e4:2e:ba:be:d7:3e:8b:
0c:f3:96:29:82:b5:f6:07:2b:65:f5:18:98:7d:f5:
a8:ed:d6:ee:4d:7d:55:d2:2b:3a:e6:ef:40:24:69:
d9:a5:f7:29:bd:1e:8c:66:4c:90:35:b5:09:91:24:
88:a4:53:50:b8:23:cd:76:31:5c:6c:1c:5b:bf:db:
aa:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:C3:CF:81:8B:27:FB:E1:C5:83:40:6B:7D:06:F9:9C:3A:02:A8:3B
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/NsPPgYsn--HFg0BrfQb5nDoCqDs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.112.81.0/24
IPv6:
2a09:5300::/29
2a0b:a300::/32
2a0c:7440::/29
2a0c:74c0::/29
2a0c:7540::/29
2a0d:8340::/29
2a0d:88c0::/29
2a0f:1180::/29
2a0f:2380::/29
2a0f:3380::/29
2a0f:4580::/29
2a0f:4680::/29
2a0f:5580::/29
2a0f:7100::/29
2a0f:7300::/29
2a0f:7b80::/29
2a0f:a500::/29
2a0f:a700::/29
Signature Algorithm: sha256WithRSAEncryption
19:a0:b1:39:42:c9:74:13:5f:6e:42:08:f9:53:3b:6e:82:cd:
3c:72:c9:91:d3:92:31:29:89:62:f7:36:90:d3:a1:40:f0:ca:
f1:4b:f4:7e:dc:27:22:13:32:77:a6:cd:c1:e8:1f:0a:48:0f:
78:fb:c9:1c:27:39:2c:92:61:6a:93:5b:7f:41:bc:d1:70:e6:
38:dc:d8:e0:4c:e5:c7:b8:66:fa:66:9c:a2:4e:86:cd:78:2c:
71:c4:9c:6a:2e:d9:4a:30:a6:a9:db:1b:e6:54:a3:0f:30:b8:
e3:d1:94:d7:55:f1:f1:ed:1d:7e:1a:37:45:d3:4c:62:a4:eb:
4e:8a:1a:8a:d8:eb:1c:e3:f3:be:81:ab:1d:32:3c:fd:f7:f7:
dd:3d:3d:94:f1:00:26:4a:70:a0:7e:e6:08:88:68:eb:e5:28:
28:8e:38:b2:33:0c:49:c7:2e:d8:d6:18:2b:ed:f5:2d:47:0e:
ee:93:8c:7a:d3:45:dc:e7:2f:97:46:d8:b3:89:1b:e1:c6:66:
ae:d5:e8:99:3e:d6:23:2f:91:61:c1:a8:e0:90:46:29:c8:ae:
6f:c2:ab:f5:29:f1:09:05:fb:1e:f6:85:9d:e2:b9:ba:0d:33:
4b:ae:80:25:4b:29:33:15:d0:1f:92:03:97:04:bb:7b:e8:53:
3d:e0:22:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:10 2024 by rpki-client on console-ams.rpki-client.org