Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/L5mbhciPxcPPMrNqro0ZSrbP_VY.roa
File: L5mbhciPxcPPMrNqro0ZSrbP_VY.roa (raw, json)
Hash identifier: BPthASj98FlePQsTFkykPO0DxKQqZ8z8/J4Niq5jT08=
Subject key identifier: 2F:99:9B:85:C8:8F:C5:C3:CF:32:B3:6A:AE:8D:19:4A:B6:CF:FD:56
Certificate issuer: /CN=e8403b5e45cd58be5f6c5d33fa565ab49223e3db
Certificate serial: 018572FA60147F35D1F6EB8AB4502CCC03B6
Authority key identifier: E8:40:3B:5E:45:CD:58:BE:5F:6C:5D:33:FA:56:5A:B4:92:23:E3:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/L5mbhciPxcPPMrNqro0ZSrbP_VY.roa
Signing time: Mon 02 Jan 2023 14:54:49 +0000
ROA not before: Mon 02 Jan 2023 14:54:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204653
IP address blocks: 212.80.177.0/24 maxlen: 24
185.123.120.0/23 maxlen: 23
185.123.121.0/24 maxlen: 24
212.66.164.0/24 maxlen: 24
212.66.166.0/23 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:fa:60:14:7f:35:d1:f6:eb:8a:b4:50:2c:cc:03:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8403b5e45cd58be5f6c5d33fa565ab49223e3db
Validity
Not Before: Jan 2 14:54:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2f999b85c88fc5c3cf32b36aae8d194ab6cffd56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3d:0f:a0:7e:63:92:e4:51:11:b8:54:ce:b1:
7b:b4:5f:c3:0f:d4:fe:4b:69:bf:6a:1c:f8:f4:26:
ca:8a:96:93:7f:c6:9f:ea:e4:35:6a:ca:07:20:74:
dd:c5:f7:40:5a:c0:d5:0c:da:6a:bb:4f:a2:7a:1e:
40:ce:55:e1:e8:ca:f1:9c:3f:ef:41:70:2f:39:bd:
ae:c5:7a:cf:30:5f:13:06:0f:84:1c:84:df:4a:1d:
f2:c9:ee:46:ba:bb:58:f0:e0:8e:57:a8:a7:a4:8c:
36:31:a1:09:7d:c2:18:6f:7e:73:00:f1:96:78:5a:
84:43:d5:34:ad:68:71:0a:e6:d8:2e:78:cd:5e:9e:
1d:23:a9:00:27:22:9d:d7:70:ab:e1:1b:6c:74:9b:
3e:d6:d7:06:2e:7b:ae:fe:55:32:c0:e1:42:c6:14:
42:0c:5c:e8:8d:cc:72:2f:05:cf:14:98:0e:72:28:
b8:6a:d9:1b:39:c0:5b:0a:49:2f:57:2d:92:ab:19:
a6:99:ad:5e:4a:c0:32:7c:84:2c:7c:a5:6e:5f:d1:
05:6a:c8:91:c1:b2:ba:72:d9:9c:81:65:69:6a:3f:
f2:e3:fa:c7:f9:00:ff:1b:79:05:50:f5:15:cb:fc:
bf:a1:ea:d4:80:73:fb:bc:a4:9a:7d:c4:0b:8a:fc:
0b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:99:9B:85:C8:8F:C5:C3:CF:32:B3:6A:AE:8D:19:4A:B6:CF:FD:56
X509v3 Authority Key Identifier:
keyid:E8:40:3B:5E:45:CD:58:BE:5F:6C:5D:33:FA:56:5A:B4:92:23:E3:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/L5mbhciPxcPPMrNqro0ZSrbP_VY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.123.120.0/23
212.66.164.0/24
212.66.166.0/23
212.80.177.0/24
Signature Algorithm: sha256WithRSAEncryption
44:89:75:ce:6c:8a:6a:85:15:0f:05:70:3c:1f:79:2f:b1:ea:
f7:26:df:7c:5f:aa:22:be:93:44:31:c5:c6:7c:d1:08:63:23:
a7:5c:70:b0:a5:80:66:dd:28:09:66:22:28:e9:13:8d:67:eb:
cd:bc:46:52:fd:29:35:62:87:00:76:de:0c:df:cd:76:5e:62:
d4:47:e9:9d:77:5e:3f:79:11:2d:71:47:7d:1b:b9:4b:e7:b6:
54:bb:0a:9b:31:f2:16:01:e8:f1:c1:2a:01:e9:d7:20:fd:b4:
57:1a:53:af:aa:a6:cc:ff:5a:5c:3e:de:57:16:d5:61:96:ee:
63:c6:2a:29:bb:14:d3:bb:13:93:53:44:27:be:a2:9b:bf:11:
51:ed:25:96:ff:c1:60:b1:02:d3:2f:6f:f6:2c:79:6a:dc:65:
ba:6e:f1:75:ee:7a:71:dd:2c:db:6e:1a:92:c4:66:0a:d4:e2:
3c:89:05:a6:7d:ea:61:9f:3d:69:c9:a6:b9:ef:a8:84:6b:83:
86:b3:a4:42:ce:c3:c7:50:99:3c:dc:de:36:86:66:d9:c7:4b:
81:9b:bf:10:4f:32:ad:23:da:18:bb:96:e8:57:38:5c:14:f4:
ec:d3:93:d2:67:b7:ae:ba:97:92:fc:70:34:89:ca:a9:f1:d4:
b5:49:1d:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:51 2024 by rpki-client on console-fra.rpki-client.org