Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/9a7iNUrZA1iVDdRRy38mN9zlOrA.roa
File: 9a7iNUrZA1iVDdRRy38mN9zlOrA.roa (raw, json)
Hash identifier: Rbr1fhSg68xDNGO8wRWSvoHxkELqyg305g/SJ9mZ7zw=
Subject key identifier: F5:AE:E2:35:4A:D9:03:58:95:0D:D4:51:CB:7F:26:37:DC:E5:3A:B0
Certificate issuer: /CN=ae736cafddb6ebb8d7c76943f4a271e038510aa9
Certificate serial: 01856C9CE9C476C7487E9B37C5E8BC6726C5
Authority key identifier: AE:73:6C:AF:DD:B6:EB:B8:D7:C7:69:43:F4:A2:71:E0:38:51:0A:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rnNsr92267jXx2lD9KJx4DhRCqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/9a7iNUrZA1iVDdRRy38mN9zlOrA.roa
Signing time: Sun 01 Jan 2023 09:15:00 +0000
ROA not before: Sun 01 Jan 2023 09:15:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29119
IP address blocks: 185.137.56.0/22 maxlen: 22
185.143.140.0/22 maxlen: 22
185.174.212.0/23 maxlen: 23
185.137.100.0/23 maxlen: 23
185.137.100.0/24 maxlen: 24
185.137.102.0/23 maxlen: 23
185.137.101.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:9c:e9:c4:76:c7:48:7e:9b:37:c5:e8:bc:67:26:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae736cafddb6ebb8d7c76943f4a271e038510aa9
Validity
Not Before: Jan 1 09:15:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f5aee2354ad90358950dd451cb7f2637dce53ab0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:13:6a:6c:fe:69:5c:9b:00:86:b6:53:07:54:
5e:49:e4:20:4b:3b:8b:0e:4a:7f:b4:00:0b:3a:3f:
2a:1b:ff:78:a8:93:01:ea:d1:e1:f1:a6:b6:90:8f:
47:5c:ce:83:9e:7d:60:07:68:44:1d:fb:3b:c1:04:
4b:53:7d:1b:de:a6:49:51:02:6a:ff:06:6d:ee:68:
4b:87:bf:d2:68:45:66:5c:d2:bd:3d:fb:cf:28:7e:
08:f2:ba:93:18:01:e9:da:f5:43:47:c4:d1:0f:f1:
d8:a4:18:df:c9:55:5a:0f:fb:2c:6a:60:b5:fa:f1:
69:db:a3:4a:c3:31:8b:cd:c4:9b:5a:ed:55:59:54:
e6:bc:ed:53:7f:fd:74:7b:e5:02:2e:bb:10:2d:78:
23:51:07:f7:10:a5:5e:1a:3f:bf:b2:79:07:fd:b5:
9c:a9:e2:75:ec:a6:6b:c2:0d:76:1b:fc:5e:a6:ac:
ce:f6:af:80:fe:8a:4d:9d:72:8c:96:19:9b:e1:dd:
9c:f1:d8:83:d4:ab:09:d3:14:33:9e:48:5f:95:35:
9b:b5:b6:d5:a8:6f:f0:c8:ca:a0:18:06:46:35:38:
3e:2d:f1:ba:35:8f:fb:8c:48:0c:4d:fb:04:b6:67:
c9:f6:6f:be:e9:a9:0f:44:d9:c5:c3:85:e4:d6:67:
d4:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:AE:E2:35:4A:D9:03:58:95:0D:D4:51:CB:7F:26:37:DC:E5:3A:B0
X509v3 Authority Key Identifier:
keyid:AE:73:6C:AF:DD:B6:EB:B8:D7:C7:69:43:F4:A2:71:E0:38:51:0A:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rnNsr92267jXx2lD9KJx4DhRCqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/9a7iNUrZA1iVDdRRy38mN9zlOrA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.137.56.0/22
185.137.100.0/22
185.143.140.0/22
185.174.212.0/23
Signature Algorithm: sha256WithRSAEncryption
77:3e:aa:d4:87:7d:c6:ec:65:0e:74:ad:f6:60:85:6b:8a:6b:
ba:15:da:be:47:f5:ef:92:69:92:83:e4:af:36:2f:d4:95:c7:
0c:f7:99:db:e2:72:66:94:72:9c:78:2d:6a:29:7b:0c:3f:68:
9a:10:43:86:43:f9:0b:29:e7:41:99:ad:6a:29:80:ae:4d:e5:
fd:32:10:b6:93:73:02:da:9e:c5:1b:33:d7:c4:4e:bb:26:c0:
ed:11:2c:9f:ea:4c:ac:59:66:a0:4c:0d:58:c8:dd:ee:33:3b:
f8:b7:4b:53:19:3e:24:73:c0:83:37:e6:81:c6:72:e3:21:1a:
d2:ae:53:61:8f:ce:59:60:be:75:8a:14:27:04:67:4a:4d:54:
7e:85:de:a5:81:20:e1:3c:e6:5b:14:db:cf:4a:a4:1b:3a:5d:
6d:05:8f:f5:40:37:06:e6:27:77:8e:58:9c:29:86:8e:2a:17:
8c:76:74:13:cd:10:32:6f:d3:2c:d8:0e:42:d3:8d:ec:59:da:
01:34:25:ae:76:54:2e:96:7d:c5:73:f9:9c:bb:02:7a:39:10:
a4:f9:76:14:12:21:ab:35:ca:f5:a5:e1:fe:b4:54:0d:36:9f:
93:41:7f:0d:17:e7:07:36:10:a4:45:af:51:14:4a:8a:51:82:
6c:93:8e:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:29 2024 by rpki-client on console-ams.rpki-client.org