Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/NSLh_BZ5xa8HlGqL1UsQ4Yid5a8.roa
File: NSLh_BZ5xa8HlGqL1UsQ4Yid5a8.roa (raw, json)
Hash identifier: vsGae+aqaXl+2lR2dpRJ2XiPEu6pMj25TpqWCw9bHas=
Subject key identifier: 35:22:E1:FC:16:79:C5:AF:07:94:6A:8B:D5:4B:10:E1:88:9D:E5:AF
Certificate issuer: /CN=4d88eb730ab1a501ea36ea3482d764544e141111
Certificate serial: 0190CBBDE8743938690D53DA0922D16A98CE
Authority key identifier: 4D:88:EB:73:0A:B1:A5:01:EA:36:EA:34:82:D7:64:54:4E:14:11:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TYjrcwqxpQHqNuo0gtdkVE4UERE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/NSLh_BZ5xa8HlGqL1UsQ4Yid5a8.roa
Signing time: Fri 19 Jul 2024 16:05:38 +0000
ROA not before: Fri 19 Jul 2024 16:05:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 185.197.128.0/22 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:cb:bd:e8:74:39:38:69:0d:53:da:09:22:d1:6a:98:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d88eb730ab1a501ea36ea3482d764544e141111
Validity
Not Before: Jul 19 16:05:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3522e1fc1679c5af07946a8bd54b10e1889de5af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:e9:96:ae:b5:b6:b5:2e:16:54:f2:bf:60:b6:
8b:86:7f:c4:4f:6c:df:9c:4d:c6:88:78:6a:79:ec:
7d:7e:7d:80:ef:46:93:f7:56:7a:f8:4d:90:aa:64:
35:2e:56:3a:55:cc:fe:1d:57:7f:0a:08:a5:59:00:
9e:ba:26:67:34:88:b8:1a:c9:bb:a9:fa:df:53:e2:
74:38:ca:6b:9b:b0:a2:7b:dc:19:b1:01:9d:d3:43:
af:06:04:2d:0b:87:2f:6f:a1:19:ac:03:d4:57:57:
a6:6d:17:9c:22:77:a8:be:ff:8d:9c:df:63:a5:25:
a3:9c:82:8c:a0:01:14:34:4c:41:0d:4e:3a:f5:a1:
cf:89:9b:d8:e6:59:71:b8:c8:a4:26:fe:c9:87:37:
44:64:35:4a:db:e1:2a:0f:ce:64:73:2d:63:2a:e8:
07:fd:ff:83:9c:25:60:7d:ea:8f:56:a4:c1:3f:2f:
4a:c5:1a:73:ce:46:d1:ea:1c:63:b7:25:67:8b:2c:
2a:d1:8c:ff:0a:bb:68:7a:8d:f4:38:ab:15:97:11:
ff:9d:1e:71:d2:7b:e6:85:ab:45:25:bb:96:f9:1e:
4b:8d:9d:03:d3:e6:59:9e:54:c3:e3:91:ce:31:d8:
c8:1b:ce:c1:3c:38:45:96:00:25:fa:a1:cf:1f:97:
6f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:22:E1:FC:16:79:C5:AF:07:94:6A:8B:D5:4B:10:E1:88:9D:E5:AF
X509v3 Authority Key Identifier:
keyid:4D:88:EB:73:0A:B1:A5:01:EA:36:EA:34:82:D7:64:54:4E:14:11:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TYjrcwqxpQHqNuo0gtdkVE4UERE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/NSLh_BZ5xa8HlGqL1UsQ4Yid5a8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/TYjrcwqxpQHqNuo0gtdkVE4UERE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.197.128.0/22
Signature Algorithm: sha256WithRSAEncryption
0c:f5:81:27:9a:05:86:69:86:ef:ee:30:82:e2:4e:21:22:84:
5a:c2:f5:12:d4:09:1d:8b:b5:4e:6e:0e:af:d4:7f:de:19:3f:
49:e6:93:94:6c:ec:89:f2:c3:a0:2b:20:7c:17:80:fb:76:c0:
17:9e:5d:22:75:dd:83:0b:aa:eb:12:98:b4:14:74:2a:be:86:
2d:3e:da:db:57:57:bb:39:8d:c1:4c:6a:ca:db:9c:72:51:ca:
73:b0:61:bd:12:4a:88:16:df:c6:8e:fe:8f:45:8f:57:8a:2b:
78:b1:91:fa:01:c8:51:05:55:7a:97:e4:ff:fc:65:1f:9b:b5:
48:48:db:df:cb:2b:82:6f:0b:c1:1e:8a:f9:3e:fe:b4:a7:11:
b0:99:85:df:98:13:dd:be:71:89:66:2c:9c:17:75:dd:d4:2d:
92:4c:03:4f:3c:c5:04:bf:f5:62:83:ae:5d:85:b2:76:0d:b1:
e0:80:5d:21:af:0e:29:84:6c:28:49:f1:e5:ce:db:da:b4:09:
57:19:ac:48:d5:ed:23:32:33:0e:b2:df:51:1d:21:4a:c7:55:
50:61:1b:55:4d:f6:ae:0f:d1:dd:35:90:b6:6c:7a:6f:b1:d0:
2a:27:d8:3b:4b:cb:97:cb:95:44:76:77:03:60:11:4c:ff:16:
2d:3f:1f:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 14:37:36 2025 by rpki-client