Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/0d2be9-da0b-4672-9b14-87314df7deb4/1/9bnglGP7DOTzp3AHYBi3FN7s3Jg.roa
File: 9bnglGP7DOTzp3AHYBi3FN7s3Jg.roa (raw, json)
Hash identifier: xrTlqMhwqyRRb2E219Ch/V8Tagmyt5fTiVFTGPQnBAA=
Subject key identifier: F5:B9:E0:94:63:FB:0C:E4:F3:A7:70:07:60:18:B7:14:DE:EC:DC:98
Certificate issuer: /CN=f6982561d2da17902f83effe132499f82d52f163
Certificate serial: 043711E8
Authority key identifier: F6:98:25:61:D2:DA:17:90:2F:83:EF:FE:13:24:99:F8:2D:52:F1:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9pglYdLaF5Avg-_-EySZ-C1S8WM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/0d2be9-da0b-4672-9b14-87314df7deb4/1/9bnglGP7DOTzp3AHYBi3FN7s3Jg.roa
Signing time: Sat 01 Jan 2022 01:55:04 +0000
ROA not before: Sat 01 Jan 2022 01:55:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 13204
IP address blocks: 185.116.152.0/24 maxlen: 24
185.116.153.0/24 maxlen: 24
185.116.154.0/24 maxlen: 24
185.116.155.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70717928 (0x43711e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6982561d2da17902f83effe132499f82d52f163
Validity
Not Before: Jan 1 01:55:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f5b9e09463fb0ce4f3a770076018b714deecdc98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2d:12:97:2c:47:2d:68:ed:9a:28:98:4d:12:
fa:49:ca:9b:b8:24:39:3f:d2:c9:58:d4:9a:3f:6e:
3c:b7:6e:63:df:47:f2:dc:ca:ce:17:4f:38:70:3e:
1d:8e:55:90:c5:9f:6a:f0:20:55:32:53:7f:45:7f:
0e:60:c3:ff:ff:a5:fa:bc:b3:15:36:3e:6b:e5:38:
d9:05:f8:df:e3:d3:c2:88:d5:81:55:9e:bd:2e:94:
11:5b:af:38:7c:c9:3c:6c:15:18:ab:df:6a:96:dd:
f3:1f:5d:eb:cb:ae:96:ee:8b:89:9c:7b:bd:a5:44:
89:31:2d:26:fb:fd:b6:21:ac:72:00:37:aa:ed:61:
a2:b2:f9:fc:08:dd:30:6a:88:03:ce:5a:e8:bc:5a:
62:66:44:59:23:01:41:af:d2:65:fc:b1:55:5b:71:
22:b9:0c:af:ee:17:16:e9:5b:25:91:ac:8c:55:5c:
4b:b5:1b:a2:8d:25:08:a8:d2:33:4a:f6:02:9f:e7:
34:d1:17:ff:7d:13:df:1b:90:74:26:b9:ee:36:43:
08:a7:a6:8b:3d:6e:51:42:fe:8c:f5:65:cf:08:72:
c6:4e:3a:25:12:ba:86:7d:f0:4c:a5:1c:83:36:0c:
c9:6a:2e:44:c1:41:fa:c7:76:f7:58:f2:40:a0:cf:
07:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:B9:E0:94:63:FB:0C:E4:F3:A7:70:07:60:18:B7:14:DE:EC:DC:98
X509v3 Authority Key Identifier:
keyid:F6:98:25:61:D2:DA:17:90:2F:83:EF:FE:13:24:99:F8:2D:52:F1:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9pglYdLaF5Avg-_-EySZ-C1S8WM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/0d2be9-da0b-4672-9b14-87314df7deb4/1/9bnglGP7DOTzp3AHYBi3FN7s3Jg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/0d2be9-da0b-4672-9b14-87314df7deb4/1/9pglYdLaF5Avg-_-EySZ-C1S8WM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.116.152.0/22
Signature Algorithm: sha256WithRSAEncryption
14:50:eb:d8:4d:c4:c0:73:bc:eb:f4:57:ac:37:0f:50:f9:0a:
2b:e1:0d:7e:b5:94:1b:a9:dd:66:5b:17:79:4e:f1:09:78:49:
58:53:7b:0a:42:72:97:08:87:df:3a:14:f0:79:f4:7f:b7:8b:
fd:ec:56:40:d9:d7:5f:75:81:27:dc:24:81:37:31:3b:03:ec:
5e:d4:d4:09:55:4f:3e:3d:0b:f4:3c:2e:a4:49:a6:e6:b8:9b:
dc:29:84:c2:4f:3c:0d:34:23:2e:68:3f:ed:8e:22:8b:81:8c:
a7:b7:01:1c:b2:dc:b6:1f:60:cd:e2:38:95:a4:9c:5c:4c:2d:
2e:a9:55:ee:ba:c4:9e:70:97:fb:9f:b4:5a:f4:ff:8e:4b:a7:
9a:2e:28:70:ce:cf:d4:b4:20:bc:58:d0:c3:a7:af:f7:79:d5:
2d:bd:28:11:ec:f0:e0:c7:f6:0d:e5:e5:0c:8a:a6:da:19:ee:
7d:69:3c:af:3d:a8:eb:8f:86:ef:aa:71:ec:93:29:f3:ca:d6:
94:df:85:10:21:a5:cd:1d:7f:b1:e1:b2:05:bd:3b:2f:66:92:
6c:ba:69:4e:40:b8:fc:5a:48:e8:30:24:30:dd:69:4f:5a:cd:
68:87:e5:4e:0a:eb:66:d0:90:b6:a8:8f:ca:97:03:af:8b:4a:
06:23:4d:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:34 2023 by rpki-client on console-fra.rpki-client.org