Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/ec583d-1aba-4798-8817-d6c9c6e86923/1/DptNPS6Ryqu3P4rv8ph5Rt7mNXU.roa
File: DptNPS6Ryqu3P4rv8ph5Rt7mNXU.roa (raw, json)
Hash identifier: wnNccfSdFTrarJDqwoRBT3kzWTp4w66VAhN504FQUuI=
Subject key identifier: 0E:9B:4D:3D:2E:91:CA:AB:B7:3F:8A:EF:F2:98:79:46:DE:E6:35:75
Certificate issuer: /CN=83286fa6da7d252e7828f84923f55919142b007f
Certificate serial: 16A5D4DB
Authority key identifier: 83:28:6F:A6:DA:7D:25:2E:78:28:F8:49:23:F5:59:19:14:2B:00:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gyhvptp9JS54KPhJI_VZGRQrAH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/ec583d-1aba-4798-8817-d6c9c6e86923/1/DptNPS6Ryqu3P4rv8ph5Rt7mNXU.roa
Signing time: Sat 01 Jan 2022 09:59:50 +0000
ROA not before: Sat 01 Jan 2022 09:59:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202329
IP address blocks: 185.65.241.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 379966683 (0x16a5d4db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83286fa6da7d252e7828f84923f55919142b007f
Validity
Not Before: Jan 1 09:59:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0e9b4d3d2e91caabb73f8aeff2987946dee63575
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:fd:18:6c:7b:05:f0:ff:0b:eb:8c:19:bd:81:
ca:89:7a:43:4a:95:c2:9f:c8:0a:b3:56:08:d5:60:
c2:96:7b:35:98:83:35:65:28:a4:49:42:2c:a0:ca:
df:96:4b:6a:b9:38:7a:2b:50:15:ca:18:d4:bf:91:
bf:e9:d0:1a:eb:25:c8:3b:66:3f:37:e9:89:e9:5d:
22:8f:87:eb:a1:0f:0a:c1:b2:e9:cc:26:08:96:d2:
48:cf:83:73:e2:f8:3d:2d:b5:fa:38:2d:01:39:da:
bb:1f:dc:00:93:01:40:cf:af:c2:85:3b:3c:d3:29:
d5:88:45:99:db:d8:2b:8f:6a:c8:8d:b1:6a:1c:71:
61:ea:ae:c8:dc:22:bb:35:2b:bd:cb:2f:db:9e:89:
bf:ed:3c:49:a8:08:d0:04:56:91:6b:17:e1:23:2a:
cd:73:c2:61:7b:76:84:62:b0:69:2f:dc:c4:39:7c:
7e:f3:cc:00:d1:1b:15:4c:6e:f7:75:cf:3b:d7:2e:
c0:62:d4:8e:e9:78:ca:ac:e5:9b:83:88:b3:d4:62:
4b:bc:ac:05:ec:19:58:74:9e:53:c7:31:62:d9:b3:
0a:55:3f:3a:e4:94:74:5f:a6:b3:12:fa:0d:8c:5d:
a8:46:34:86:c0:27:56:13:0f:c2:a3:fb:94:e9:19:
5c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:9B:4D:3D:2E:91:CA:AB:B7:3F:8A:EF:F2:98:79:46:DE:E6:35:75
X509v3 Authority Key Identifier:
keyid:83:28:6F:A6:DA:7D:25:2E:78:28:F8:49:23:F5:59:19:14:2B:00:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gyhvptp9JS54KPhJI_VZGRQrAH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ec583d-1aba-4798-8817-d6c9c6e86923/1/DptNPS6Ryqu3P4rv8ph5Rt7mNXU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ec583d-1aba-4798-8817-d6c9c6e86923/1/gyhvptp9JS54KPhJI_VZGRQrAH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.65.241.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:ee:f7:04:1e:d2:07:d8:d3:6c:9f:c3:fb:4b:5c:2c:90:3f:
20:b4:30:6c:e4:58:37:fc:b9:2b:46:40:19:d3:ed:8f:dd:4e:
99:a7:19:cd:bc:92:5e:bf:17:d3:02:74:13:5b:75:84:5d:7f:
2e:84:81:af:62:0c:fa:eb:48:7d:f9:45:d8:9d:75:1a:79:2f:
42:4d:3d:57:c5:87:c8:f6:1e:50:86:1f:c2:f7:b5:73:f8:b1:
d8:55:40:82:24:36:18:d3:ac:60:fe:93:63:52:79:5d:65:4c:
ff:42:00:30:52:04:75:12:32:e7:d4:64:38:b5:5c:68:cd:92:
db:4c:b0:e1:85:fc:10:10:17:e4:13:f6:4f:98:79:6c:aa:9f:
b7:bf:36:93:0c:62:b1:d4:23:80:19:51:0e:c0:cc:f9:30:19:
9c:79:51:1c:64:75:80:6d:a3:c3:56:a8:f5:ab:0b:27:95:e1:
bf:44:b8:1e:94:19:f1:7a:84:23:ef:ce:06:08:fe:7e:01:4c:
30:71:31:77:60:3e:6a:c9:2e:4d:b0:2c:ce:94:58:bd:76:70:
89:86:d3:34:0a:bc:6b:78:44:00:11:39:cd:69:ce:1d:b8:25:
c6:64:f0:41:a8:b3:46:0f:20:18:1b:1a:cf:0a:c0:73:83:c1:
16:40:47:c8
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEFqXU2zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
MzI4NmZhNmRhN2QyNTJlNzgyOGY4NDkyM2Y1NTkxOTE0MmIwMDdmMB4XDTIyMDEw
MTA5NTk1MFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMGU5YjRkM2QyZTkx
Y2FhYmI3M2Y4YWVmZjI5ODc5NDZkZWU2MzU3NTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJj9GGx7BfD/C+uMGb2Byol6Q0qVwp/ICrNWCNVgwpZ7NZiD
NWUopElCLKDK35ZLark4eitQFcoY1L+Rv+nQGuslyDtmPzfpieldIo+H66EPCsGy
6cwmCJbSSM+Dc+L4PS21+jgtATnaux/cAJMBQM+vwoU7PNMp1YhFmdvYK49qyI2x
ahxxYequyNwiuzUrvcsv256Jv+08SagI0ARWkWsX4SMqzXPCYXt2hGKwaS/cxDl8
fvPMANEbFUxu93XPO9cuwGLUjul4yqzlm4OIs9RiS7ysBewZWHSeU8cxYtmzClU/
OuSUdF+msxL6DYxdqEY0hsAnVhMPwqP7lOkZXL8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQOm009LpHKq7c/iu/ymHlG3uY1dTAfBgNVHSMEGDAWgBSDKG+m2n0lLngo
+Ekj9VkZFCsAfzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2d5aHZwdHA5SlM1NEtQaEpJX1ZaR1JRckFIOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDkvZWM1ODNkLTFhYmEtNDc5OC04ODE3LWQ2YzljNmU4NjkyMy8x
L0RwdE5QUzZSeXF1M1A0cnY4cGg1UnQ3bU5YVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDkv
ZWM1ODNkLTFhYmEtNDc5OC04ODE3LWQ2YzljNmU4NjkyMy8xL2d5aHZwdHA5SlM1
NEtQaEpJX1ZaR1JRckFIOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALlB8TANBgkqhkiG9w0BAQsFAAOC
AQEAse73BB7SB9jTbJ/D+0tcLJA/ILQwbORYN/y5K0ZAGdPtj91OmacZzbySXr8X
0wJ0E1t1hF1/LoSBr2IM+utIfflF2J11GnkvQk09V8WHyPYeUIYfwve1c/ix2FVA
giQ2GNOsYP6TY1J5XWVM/0IAMFIEdRIy59RkOLVcaM2S20yw4YX8EBAX5BP2T5h5
bKqft782kwxisdQjgBlRDsDM+TAZnHlRHGR1gG2jw1ao9asLJ5Xhv0S4HpQZ8XqE
I+/OBgj+fgFMMHExd2A+askuTbAszpRYvXZwiYbTNAq8a3hEABE5zWnOHbglxmTw
QaizRg8gGBsazwrAc4PBFkBHyA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:14 2024 by rpki-client on console-ams.rpki-client.org