Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/0188da-3655-482d-881b-febbc4a3b45b/1/E-5L9GWi9CEhrXqbKpLd7xX4Mww.roa
File: E-5L9GWi9CEhrXqbKpLd7xX4Mww.roa (raw, json)
Hash identifier: f4sFJjdIXGjXzYcahosAIvhuTRNPvYbRbSTls02z8s4=
Subject key identifier: 13:EE:4B:F4:65:A2:F4:21:21:AD:7A:9B:2A:92:DD:EF:15:F8:33:0C
Certificate issuer: /CN=bfabf5a474afe7212331670e831e119da38f284f
Certificate serial: 01857169B9094F9AF383F670EEBF365CA057
Authority key identifier: BF:AB:F5:A4:74:AF:E7:21:23:31:67:0E:83:1E:11:9D:A3:8F:28:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v6v1pHSv5yEjMWcOgx4RnaOPKE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/0188da-3655-482d-881b-febbc4a3b45b/1/E-5L9GWi9CEhrXqbKpLd7xX4Mww.roa
Signing time: Mon 02 Jan 2023 07:37:12 +0000
ROA not before: Mon 02 Jan 2023 07:37:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204478
IP address blocks: 185.108.244.0/22 maxlen: 22
185.70.68.0/22 maxlen: 22
185.41.76.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:69:b9:09:4f:9a:f3:83:f6:70:ee:bf:36:5c:a0:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfabf5a474afe7212331670e831e119da38f284f
Validity
Not Before: Jan 2 07:37:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=13ee4bf465a2f42121ad7a9b2a92ddef15f8330c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:f4:2b:27:6d:70:d2:79:c0:b8:96:3b:73:05:
41:ce:65:72:1e:ae:0e:fa:23:86:74:56:f9:27:19:
5d:1d:09:f9:4c:09:f0:bc:43:08:9f:cf:0c:b0:9a:
97:1d:83:c6:a0:af:62:4b:7b:61:cf:04:a5:97:e3:
90:d8:58:6e:33:ad:88:e3:e1:ab:b7:bd:6a:0b:0b:
db:20:f5:94:2f:ad:8f:9c:12:96:e4:23:38:b3:42:
d9:6c:c9:2a:58:69:66:4a:50:64:91:df:7b:6f:1e:
59:13:dc:41:c0:46:ae:01:7f:3d:a8:a9:30:9b:14:
da:e5:09:06:b4:d7:54:29:65:e4:25:da:35:6b:9d:
93:72:3a:21:89:6b:75:19:ec:e3:b8:a2:a4:44:44:
7b:5e:1e:8d:6b:5d:1f:b4:76:d0:ef:86:9f:4b:45:
c4:d1:1a:1d:71:ff:5a:af:f9:19:4e:54:13:53:a3:
4a:cc:35:db:00:d6:b7:20:89:6d:a6:e2:38:7a:e6:
0a:0f:d0:c9:f5:1d:c8:e9:b2:22:08:f1:da:14:00:
77:41:0e:b5:03:7e:85:66:98:fd:6c:bc:f0:94:17:
d0:7d:73:40:30:a3:4e:06:3b:5d:7b:c6:0d:ff:04:
45:c3:d9:0d:ed:7b:da:63:da:70:dd:63:c0:d5:51:
f5:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:EE:4B:F4:65:A2:F4:21:21:AD:7A:9B:2A:92:DD:EF:15:F8:33:0C
X509v3 Authority Key Identifier:
keyid:BF:AB:F5:A4:74:AF:E7:21:23:31:67:0E:83:1E:11:9D:A3:8F:28:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v6v1pHSv5yEjMWcOgx4RnaOPKE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0188da-3655-482d-881b-febbc4a3b45b/1/E-5L9GWi9CEhrXqbKpLd7xX4Mww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0188da-3655-482d-881b-febbc4a3b45b/1/v6v1pHSv5yEjMWcOgx4RnaOPKE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.41.76.0/22
185.70.68.0/22
185.108.244.0/22
Signature Algorithm: sha256WithRSAEncryption
46:bd:9e:3a:69:44:a6:ed:b0:b3:07:7b:e5:ef:35:84:e3:49:
9e:a3:36:de:65:8c:c3:87:cc:db:b1:12:e3:0d:ad:5d:67:93:
c6:08:df:ba:25:cd:46:57:a4:9e:09:f8:e7:ff:dc:d3:57:3c:
2d:78:f6:9a:2e:dd:66:40:b4:c8:f7:ef:52:e5:1c:c7:80:8a:
19:dc:8d:b1:df:4e:05:e6:bc:8e:7f:5b:9b:57:e6:21:07:c7:
ad:a9:ad:96:c2:ce:f7:ae:ef:24:50:6e:3a:78:b6:40:97:b3:
8b:5b:03:5a:9a:ff:dd:79:b4:ca:40:6c:f1:91:d2:ff:96:36:
e2:fb:71:7f:46:cf:4f:cf:8b:01:d7:3c:53:11:79:2a:eb:30:
9c:7c:30:99:c5:8e:52:36:47:0c:55:68:66:52:4d:a3:d2:e0:
01:53:71:83:88:44:88:ba:5e:a2:54:49:86:de:8b:8b:01:29:
f9:d4:06:b2:82:7a:f6:da:ee:36:3e:04:66:9b:f2:72:ca:4e:
4a:e7:fe:75:fe:ec:dc:31:af:4c:56:49:68:fc:ba:7a:18:4f:
b9:0a:2b:93:9f:97:7e:7e:9c:c5:d8:3b:d9:aa:6a:7e:1d:08:
9c:1c:af:a7:cd:55:da:08:4a:98:83:25:7a:d3:00:93:da:ab:
90:d0:db:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:02 2024 by rpki-client on console-ams.rpki-client.org