Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/0d2be9-da0b-4672-9b14-87314df7deb4/1/sX09LNWDYxiT7UHyjTWe9vJgPH4.roa
File: sX09LNWDYxiT7UHyjTWe9vJgPH4.roa (raw, json)
Hash identifier: vDyyWdCWgETOk5eEg8Qa9RnZD5LV0IdfufswWcYDID0=
Subject key identifier: B1:7D:3D:2C:D5:83:63:18:93:ED:41:F2:8D:35:9E:F6:F2:60:3C:7E
Certificate issuer: /CN=f6982561d2da17902f83effe132499f82d52f163
Certificate serial: 01856D41A268D967EB2422083B2D03BBD2B4
Authority key identifier: F6:98:25:61:D2:DA:17:90:2F:83:EF:FE:13:24:99:F8:2D:52:F1:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9pglYdLaF5Avg-_-EySZ-C1S8WM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/0d2be9-da0b-4672-9b14-87314df7deb4/1/sX09LNWDYxiT7UHyjTWe9vJgPH4.roa
Signing time: Sun 01 Jan 2023 12:14:55 +0000
ROA not before: Sun 01 Jan 2023 12:14:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13204
IP address blocks: 185.116.152.0/24 maxlen: 24
185.116.153.0/24 maxlen: 24
185.116.154.0/24 maxlen: 24
185.116.155.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:41:a2:68:d9:67:eb:24:22:08:3b:2d:03:bb:d2:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6982561d2da17902f83effe132499f82d52f163
Validity
Not Before: Jan 1 12:14:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b17d3d2cd583631893ed41f28d359ef6f2603c7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:59:f7:00:2b:14:35:70:fc:56:54:2f:2d:19:
2b:a5:52:72:45:d4:81:b9:ef:68:44:5c:bc:51:d1:
e2:7b:4d:97:20:50:7f:ab:5a:af:75:0f:14:02:d9:
a3:de:82:a6:a6:17:ab:78:59:4c:e8:2d:d5:ef:18:
a0:3d:81:d0:29:59:14:22:a0:16:c2:6c:99:ad:ec:
7c:8b:6e:cb:61:13:84:f3:63:f4:c1:44:c8:d3:de:
4f:7b:12:e4:7f:8d:58:22:77:2c:2d:d3:c0:2f:6e:
64:dd:9d:ff:b8:ed:52:11:36:2b:a4:73:bb:5f:c8:
e7:fc:56:73:34:55:e7:e1:76:21:c9:88:0d:3c:95:
de:94:64:d1:d8:10:12:95:d2:f9:91:31:7e:75:7e:
6a:78:d1:2d:dc:ee:95:c3:bb:c4:1e:e6:5d:a3:22:
a9:16:43:8b:97:d3:09:95:5b:38:03:0b:2e:57:35:
fd:c1:9d:1b:36:29:d2:e8:20:e0:db:62:a1:3b:c3:
5e:c8:11:a9:13:93:e2:ea:1d:dc:4f:ac:f9:84:d9:
20:c3:5b:69:83:8e:01:bb:8d:5d:49:84:8e:7f:c1:
bb:24:f2:11:2e:64:47:27:ed:6e:74:15:2c:90:78:
86:e5:15:f2:d1:fd:0a:2a:67:07:8e:14:8b:31:d1:
7a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:7D:3D:2C:D5:83:63:18:93:ED:41:F2:8D:35:9E:F6:F2:60:3C:7E
X509v3 Authority Key Identifier:
keyid:F6:98:25:61:D2:DA:17:90:2F:83:EF:FE:13:24:99:F8:2D:52:F1:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9pglYdLaF5Avg-_-EySZ-C1S8WM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/0d2be9-da0b-4672-9b14-87314df7deb4/1/sX09LNWDYxiT7UHyjTWe9vJgPH4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/0d2be9-da0b-4672-9b14-87314df7deb4/1/9pglYdLaF5Avg-_-EySZ-C1S8WM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.116.152.0/22
Signature Algorithm: sha256WithRSAEncryption
90:b2:f6:49:10:87:d6:a9:83:1c:11:42:19:e7:1f:db:cb:cc:
17:a9:7e:ac:3e:64:af:76:71:e8:26:35:a1:c7:36:16:dd:05:
24:b0:03:fe:1d:1d:27:01:62:b3:d7:55:f3:15:46:82:b6:4f:
7d:66:2e:90:65:16:f1:b5:21:b3:fd:40:b9:68:42:95:78:ea:
ad:3f:0f:18:ac:4a:e0:e8:4b:05:84:47:f4:ac:41:53:0b:c4:
25:3c:98:72:54:5c:35:0a:fe:1a:66:df:f4:85:2b:6b:d2:1c:
49:6d:37:7c:ee:f9:9e:de:74:9f:19:06:6c:26:dc:61:8a:ea:
07:73:ee:63:56:bd:da:f5:4a:27:cc:73:83:d1:78:29:d4:e9:
35:6b:43:c5:4e:09:b0:cd:68:29:f2:0f:3c:82:2a:51:d6:7e:
9b:78:16:dd:6e:ad:95:0a:f1:7b:bc:f5:c4:0f:ad:d2:8c:dd:
7d:56:28:79:4b:ea:5c:97:60:22:00:52:05:1a:6c:81:47:f2:
9b:68:91:89:13:59:93:dd:d6:d8:d0:75:6e:75:d6:f4:f4:1e:
2e:06:06:93:9f:14:82:ba:19:91:62:68:a8:39:fc:4c:20:89:
d6:da:de:e7:f2:1e:62:e2:eb:89:88:e4:29:49:e8:36:30:4b:
86:d3:00:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:39 2024 by rpki-client on console-fra.rpki-client.org