Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/QRUHCDzL5D3jlDfDFZimKg4lPg4.roa
File: QRUHCDzL5D3jlDfDFZimKg4lPg4.roa (raw, json)
Hash identifier: DXKb4c5DOw05ZUmtq3tv+mhyjx38hiwCXO2I7rzfPro=
Subject key identifier: 41:15:07:08:3C:CB:E4:3D:E3:94:37:C3:15:98:A6:2A:0E:25:3E:0E
Certificate issuer: /CN=09e2af08cf6e12e2304fb3bdec64cfbcedaa8522
Certificate serial: 02CA835E
Authority key identifier: 09:E2:AF:08:CF:6E:12:E2:30:4F:B3:BD:EC:64:CF:BC:ED:AA:85:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CeKvCM9uEuIwT7O97GTPvO2qhSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/QRUHCDzL5D3jlDfDFZimKg4lPg4.roa
Signing time: Fri 29 Apr 2022 11:38:13 +0000
ROA not before: Fri 29 Apr 2022 11:38:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204085
IP address blocks: 185.123.146.0/23 maxlen: 23
185.123.152.0/22 maxlen: 22
185.132.8.0/23 maxlen: 23
185.132.10.0/23 maxlen: 23
185.127.44.0/23 maxlen: 23
185.127.46.0/23 maxlen: 23
185.110.0.0/23 maxlen: 23
185.110.3.0/24 maxlen: 24
185.110.2.0/24 maxlen: 24
185.123.252.0/22 maxlen: 22
185.123.144.0/23 maxlen: 23
185.123.248.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46826334 (0x2ca835e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09e2af08cf6e12e2304fb3bdec64cfbcedaa8522
Validity
Not Before: Apr 29 11:38:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=411507083ccbe43de39437c31598a62a0e253e0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:2f:6b:ed:18:4b:0e:a2:ab:05:14:d4:f1:9a:
1e:45:e6:c8:7f:6f:c6:52:75:ed:18:4c:3a:82:4b:
08:11:b3:b9:4c:61:44:70:fe:9f:cf:a9:23:cc:77:
a5:74:48:2d:15:67:c5:09:ae:66:d4:18:c8:be:91:
ff:ba:1d:1f:8a:ae:6b:32:69:d3:a5:07:f1:90:b0:
ba:e7:2a:67:b9:e6:6f:b2:6e:d3:43:7d:b7:c6:c7:
21:1d:75:ab:17:7a:33:fa:d6:72:98:a8:d9:26:57:
0f:23:8f:23:ad:90:4d:b8:16:4d:6c:3d:a3:d7:77:
4a:98:d5:97:1c:05:a1:bf:a5:87:91:82:ea:ec:99:
55:23:c3:d4:7b:34:0e:89:87:fb:e0:5a:f3:6f:fb:
48:23:e8:37:32:7e:c5:4b:87:a1:43:be:65:50:ad:
2f:93:cf:13:70:84:27:84:0e:cd:7a:f1:3a:59:31:
27:1c:a4:f3:4c:e0:ed:13:26:1a:25:e0:7d:b7:dc:
3b:f5:04:b6:c9:ef:96:42:f2:13:19:c7:f2:e2:4d:
d1:d5:39:ef:af:21:b8:6f:7c:3c:45:a6:2a:17:d2:
72:1d:c6:cc:f0:00:15:5f:68:0d:30:43:c9:b6:c3:
8c:cf:51:87:83:24:ec:cd:25:89:3d:b9:a9:9d:36:
21:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:15:07:08:3C:CB:E4:3D:E3:94:37:C3:15:98:A6:2A:0E:25:3E:0E
X509v3 Authority Key Identifier:
keyid:09:E2:AF:08:CF:6E:12:E2:30:4F:B3:BD:EC:64:CF:BC:ED:AA:85:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeKvCM9uEuIwT7O97GTPvO2qhSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/QRUHCDzL5D3jlDfDFZimKg4lPg4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/CeKvCM9uEuIwT7O97GTPvO2qhSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.110.0.0/22
185.123.144.0/22
185.123.152.0/22
185.123.248.0/21
185.127.44.0/22
185.132.8.0/22
Signature Algorithm: sha256WithRSAEncryption
17:cf:76:3a:43:3e:3e:10:0c:f7:4a:31:a9:76:6b:97:c3:19:
f1:80:8d:8e:90:1d:f8:8d:0b:5c:2d:10:62:a4:a5:13:dd:4c:
43:f2:f1:52:26:e5:d4:cf:0e:93:d2:0f:7c:80:99:c7:31:56:
87:e0:d0:94:d6:6c:aa:2f:8f:2a:8d:38:55:6b:20:41:83:31:
1a:49:b2:49:2d:a7:1c:1d:74:1b:b5:bd:78:a4:7e:2e:f4:44:
59:0e:9f:76:6a:7d:87:65:54:db:08:64:7e:9d:31:44:c6:18:
84:1e:c0:28:51:02:65:e7:80:00:9b:b5:33:43:3f:c1:32:cf:
f6:4c:de:d0:18:16:ec:cd:62:97:f0:3c:af:30:24:69:0b:27:
d4:51:45:6a:b9:e5:c8:9d:eb:04:e1:6a:8f:4d:d3:8d:fb:0e:
67:30:84:c0:d1:fb:f6:88:8e:8e:8c:d7:1c:80:87:2c:19:69:
79:4c:62:76:1f:93:95:69:f7:00:bd:ba:d7:dd:ed:ae:91:40:
50:33:52:ef:ca:3a:8d:0e:49:82:3f:09:16:7b:65:31:3b:bc:
cd:38:6c:34:d7:c6:52:3d:5a:03:68:50:be:1a:6c:e7:ee:10:
aa:64:f5:8d:f5:b9:36:df:fc:43:2c:81:3f:d0:d5:fd:8f:e1:
a1:8c:df:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:50 2023 by rpki-client on console-fra.rpki-client.org