Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/kbBOtfxqaVa5Qk2WZZpd63lULp4.roa
File: kbBOtfxqaVa5Qk2WZZpd63lULp4.roa (raw, json)
Hash identifier: JMxR4nLkPNGx30I8a/Y6n6x88as6NV8bBbCYZBySjIw=
Subject key identifier: 91:B0:4E:B5:FC:6A:69:56:B9:42:4D:96:65:9A:5D:EB:79:54:2E:9E
Certificate issuer: /CN=8db34774b01979284fd9e754fea68fa3c61783d0
Certificate serial: 018CC8DF61AEA6F577AA6D8618620FF26259
Authority key identifier: 8D:B3:47:74:B0:19:79:28:4F:D9:E7:54:FE:A6:8F:A3:C6:17:83:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jbNHdLAZeShP2edU_qaPo8YXg9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/kbBOtfxqaVa5Qk2WZZpd63lULp4.roa
Signing time: Tue 02 Jan 2024 06:32:11 +0000
ROA not before: Tue 02 Jan 2024 06:32:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61220
IP address blocks: 193.31.118.0/24 maxlen: 24
193.31.117.0/24 maxlen: 24
193.31.119.0/24 maxlen: 24
89.43.78.0/24 maxlen: 24
84.54.14.0/24 maxlen: 24
185.81.152.0/24 maxlen: 24
213.226.117.0/24 maxlen: 24
185.81.155.0/24 maxlen: 24
185.81.153.0/24 maxlen: 24
185.81.154.0/24 maxlen: 24
86.104.14.0/24 maxlen: 24
176.98.42.0/24 maxlen: 24
176.98.43.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:61:ae:a6:f5:77:aa:6d:86:18:62:0f:f2:62:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8db34774b01979284fd9e754fea68fa3c61783d0
Validity
Not Before: Jan 2 06:32:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=91b04eb5fc6a6956b9424d96659a5deb79542e9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:91:6d:fa:0d:63:f9:e2:67:8a:14:5c:d8:0f:
9e:5a:90:70:71:c2:d7:75:21:95:95:92:79:04:8c:
97:39:a1:a2:64:26:34:41:30:d0:62:42:5d:36:50:
33:4e:0d:6b:13:c8:5a:50:26:ec:83:f6:87:88:08:
b5:77:66:d2:51:8c:36:4a:d5:1e:1b:f0:18:2c:38:
df:fd:57:df:e6:ed:19:ed:77:5f:43:59:23:b4:a3:
92:71:15:3f:88:f0:8a:b5:4e:bf:52:e2:c7:52:06:
0b:e1:da:81:95:95:57:b3:9b:b4:74:52:94:42:8e:
37:ac:19:04:a3:60:f9:0a:e8:80:95:95:1a:53:0c:
c9:da:5e:26:25:6e:81:4c:e6:6b:0a:0f:b7:95:c6:
7c:3f:2a:38:ed:a4:62:b8:74:8a:f4:7f:7c:47:e8:
f3:a0:4b:fb:59:b2:d1:98:d5:b9:8b:43:77:ca:26:
21:a2:ed:b8:f7:4f:94:56:25:c0:c9:c7:9e:b5:1a:
6e:9c:51:96:84:0f:94:3e:8c:da:8c:3b:3a:44:78:
84:3e:87:9e:2e:88:94:b0:ec:57:6b:ea:ef:af:68:
c3:ce:19:0d:2f:22:a3:4a:c2:5b:72:48:2f:ba:66:
29:a4:07:8a:35:4c:55:8b:a6:27:4b:d1:70:94:c7:
a1:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:B0:4E:B5:FC:6A:69:56:B9:42:4D:96:65:9A:5D:EB:79:54:2E:9E
X509v3 Authority Key Identifier:
keyid:8D:B3:47:74:B0:19:79:28:4F:D9:E7:54:FE:A6:8F:A3:C6:17:83:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jbNHdLAZeShP2edU_qaPo8YXg9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/kbBOtfxqaVa5Qk2WZZpd63lULp4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.54.14.0/24
86.104.14.0/24
89.43.78.0/24
176.98.42.0/23
185.81.152.0/22
193.31.117.0-193.31.119.255
213.226.117.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:04:74:ba:32:f0:70:c5:c2:0b:3a:47:8b:6c:5c:ca:51:14:
97:5e:a0:60:cd:09:29:b9:8c:68:ac:c8:35:47:ce:72:25:1f:
33:10:98:cd:9c:cd:0d:3e:65:a8:39:2e:93:8a:30:94:9a:ee:
8b:34:79:32:32:e6:04:a6:07:d4:4d:59:24:08:00:31:22:b3:
fb:a4:68:d3:30:9c:26:6b:0d:39:d7:44:88:7a:8e:1b:d4:14:
44:8e:b1:b6:e7:82:d8:c7:55:d8:ab:c3:4b:31:dd:84:be:e5:
c1:33:66:fa:2f:3d:aa:ca:8f:8f:87:4c:ec:13:63:a8:dd:1c:
07:64:09:19:e7:7d:76:5c:69:20:4c:a9:39:03:3d:2f:02:bd:
bb:05:9e:5f:10:a6:98:b6:ca:3b:63:b4:17:29:85:69:36:1c:
74:ee:cb:04:87:89:43:e3:15:a1:7b:60:0b:59:ed:50:23:2a:
7a:29:9c:46:00:e8:1c:ef:ad:4e:b1:db:3b:be:14:95:92:b4:
62:d6:a8:30:37:78:7d:d0:5f:86:52:66:ef:1d:81:87:0d:d9:
b4:62:d4:13:97:18:67:6b:c4:61:15:98:ce:24:ce:47:04:11:
f8:97:1d:55:f2:70:86:d6:9b:a6:77:bc:0b:65:99:16:03:70:
93:46:f9:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:12 2024 by rpki-client on console-ams.rpki-client.org