Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/uYRyW8ybRCvsGXmFKOTYtZGyiUY.roa
File: uYRyW8ybRCvsGXmFKOTYtZGyiUY.roa (raw, json)
Hash identifier: LVm1Qt7Eq/HuhjcNV26HDG93fLvZ2p5oP/t8XxKW4AE=
Subject key identifier: B9:84:72:5B:CC:9B:44:2B:EC:19:79:85:28:E4:D8:B5:91:B2:89:46
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 01857246F33E9A5500725EAE53C857D7B63B
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/uYRyW8ybRCvsGXmFKOTYtZGyiUY.roa
Signing time: Mon 02 Jan 2023 11:38:50 +0000
ROA not before: Mon 02 Jan 2023 11:38:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209564
IP address blocks: 185.240.182.0/24 maxlen: 24
185.240.183.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:46:f3:3e:9a:55:00:72:5e:ae:53:c8:57:d7:b6:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Jan 2 11:38:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b984725bcc9b442bec19798528e4d8b591b28946
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:5e:1b:4b:11:55:6d:c2:85:4b:4d:9d:00:3f:
3c:f6:e7:ab:86:84:af:4b:ad:c9:a6:dd:f3:1d:70:
1c:1b:8c:70:42:2c:ca:08:6b:e8:2f:e6:6c:c0:c0:
84:1c:fb:e4:c9:0d:0f:99:4c:bf:48:81:cf:90:5a:
55:9a:3a:b9:ec:2c:01:db:80:42:e0:cd:25:6b:05:
1b:96:b5:0b:cd:bb:7d:ec:7e:36:2f:2e:98:e0:6a:
1c:0f:33:b2:5a:04:cd:6d:c6:f5:52:1c:7b:03:ea:
01:f7:03:62:62:d3:3c:d4:f7:32:90:5d:89:41:8f:
dd:86:5e:b5:90:32:76:86:00:28:13:5b:94:66:59:
7e:78:a4:be:a3:da:c4:c7:72:6f:26:81:96:ab:88:
cf:b7:76:bc:19:f5:e5:42:0a:d3:c2:dd:5f:35:b5:
cc:e4:57:98:12:fd:09:f4:0f:73:69:16:71:4a:14:
41:3b:1a:f7:01:3b:8e:ef:cc:8d:a4:52:92:fe:0c:
06:1d:94:56:d1:fd:0d:6c:60:24:fa:ad:67:60:30:
31:6f:f5:60:0d:68:54:d6:f5:2d:6e:ab:b7:b1:97:
c1:af:69:7d:8e:67:55:fb:95:9b:39:67:65:c4:c8:
48:5b:e8:20:a2:24:a3:27:4c:ba:22:fa:9e:c4:f1:
61:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:84:72:5B:CC:9B:44:2B:EC:19:79:85:28:E4:D8:B5:91:B2:89:46
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/uYRyW8ybRCvsGXmFKOTYtZGyiUY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.240.182.0/23
Signature Algorithm: sha256WithRSAEncryption
3e:cd:da:d9:75:d3:91:56:0a:47:8b:d1:e2:56:55:6d:90:a0:
07:d5:6f:f3:db:b1:38:16:5c:91:2c:e0:ec:40:ef:43:9d:36:
9e:44:a8:9b:7c:d5:52:80:29:0a:dd:42:a8:22:b2:db:ee:7e:
a7:a5:3f:b4:af:66:82:42:9d:0a:14:b9:a0:96:ce:01:67:3b:
64:a3:ec:3e:f8:b4:09:e1:9e:65:a9:85:50:7f:49:a4:ba:77:
3a:be:41:ac:34:05:17:90:16:7d:7d:14:9d:60:07:88:cb:e0:
53:a1:97:32:cb:91:d0:96:9b:d5:03:9e:46:f0:ac:d1:fc:c0:
b9:ce:d5:00:b1:54:85:e2:82:d4:93:f8:bc:fe:f1:79:8c:db:
2a:7e:9d:c7:64:33:f7:98:43:a9:66:4e:e3:f4:47:ad:27:23:
a6:ba:01:1d:06:c4:01:99:36:5f:4e:79:e0:05:32:d2:be:bc:
a4:41:9e:62:28:2c:5d:83:23:7b:2a:40:cb:55:c4:38:76:12:
7f:6c:61:0e:b2:9d:44:8b:b5:f3:ec:c9:54:d5:5a:aa:e3:6c:
8f:5b:96:0e:5c:a2:7f:68:6e:cb:df:06:01:3d:f0:0e:d0:f9:
70:00:3b:8b:81:94:41:24:8f:69:e5:ae:bd:89:20:7f:d2:ca:
b4:6f:e5:5e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVyRvM+mlUAcl6uU8hX17Y7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlYmYzMDIwMWYxMmEwNDBkMzg2ZDJiNGVlZDQ0ODQ2MjNl
NGQxMWIwHhcNMjMwMTAyMTEzODUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOTg0NzI1YmNjOWI0NDJiZWMxOTc5ODUyOGU0ZDhiNTkxYjI4OTQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjl4bSxFVbcKFS02dAD889uerhoSv
S63Jpt3zHXAcG4xwQizKCGvoL+ZswMCEHPvkyQ0PmUy/SIHPkFpVmjq57CwB24BC
4M0lawUblrULzbt97H42Ly6Y4GocDzOyWgTNbcb1Uhx7A+oB9wNiYtM81PcykF2J
QY/dhl61kDJ2hgAoE1uUZll+eKS+o9rEx3JvJoGWq4jPt3a8GfXlQgrTwt1fNbXM
5FeYEv0J9A9zaRZxShRBOxr3ATuO78yNpFKS/gwGHZRW0f0NbGAk+q1nYDAxb/Vg
DWhU1vUtbqu3sZfBr2l9jmdV+5WbOWdlxMhIW+ggoiSjJ0y6IvqexPFh1QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLmEclvMm0Qr7Bl5hSjk2LWRsolGMB8GA1UdIwQY
MBaAFP6/MCAfEqBA04bStO7USEYj5NEbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUt
YTk3YzBkYzBhNzQ5LzEvdVlSeVc4eWJSQ3ZzR1htRktPVFl0Wkd5aVVZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUtYTk3YzBkYzBhNzQ5
LzEvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBufC2MA0G
CSqGSIb3DQEBCwUAA4IBAQA+zdrZddORVgpHi9HiVlVtkKAH1W/z27E4FlyRLODs
QO9DnTaeRKibfNVSgCkK3UKoIrLb7n6npT+0r2aCQp0KFLmgls4BZztko+w++LQJ
4Z5lqYVQf0mkunc6vkGsNAUXkBZ9fRSdYAeIy+BToZcyy5HQlpvVA55G8KzR/MC5
ztUAsVSF4oLUk/i8/vF5jNsqfp3HZDP3mEOpZk7j9EetJyOmugEdBsQBmTZfTnng
BTLSvrykQZ5iKCxdgyN7KkDLVcQ4dhJ/bGEOsp1Ei7Xz7MlU1Vqq42yPW5YOXKJ/
aG7L3wYBPfAO0PlwADuLgZRBJI9p5a69iSB/0sq0b+Ve
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:41 2024 by rpki-client on console-ams.rpki-client.org