Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/nyGZ6cPsK_eNiaS16IuChb-O-dk.roa
File: nyGZ6cPsK_eNiaS16IuChb-O-dk.roa (raw, json)
Hash identifier: /N44hAc3k+6VNNXJ9ZYfT3TTktlx6s5GWkTxsdao5MQ=
Subject key identifier: 9F:21:99:E9:C3:EC:2B:F7:8D:89:A4:B5:E8:8B:82:85:BF:8E:F9:D9
Certificate issuer: /CN=a0e381b6e76cb9520e8d8f56776eca0fe176cc40
Certificate serial: 0B6177EB
Authority key identifier: A0:E3:81:B6:E7:6C:B9:52:0E:8D:8F:56:77:6E:CA:0F:E1:76:CC:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oOOBtudsuVIOjY9Wd27KD-F2zEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/nyGZ6cPsK_eNiaS16IuChb-O-dk.roa
Signing time: Sat 01 Jan 2022 13:58:32 +0000
ROA not before: Sat 01 Jan 2022 13:58:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57240
IP address blocks: 88.135.41.0/24 maxlen: 24
88.135.40.0/21 maxlen: 24
88.135.40.0/24 maxlen: 24
88.135.43.0/24 maxlen: 24
88.135.42.0/24 maxlen: 24
88.135.44.0/24 maxlen: 24
88.135.47.0/24 maxlen: 24
88.135.46.0/24 maxlen: 24
88.135.45.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 190937067 (0xb6177eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0e381b6e76cb9520e8d8f56776eca0fe176cc40
Validity
Not Before: Jan 1 13:58:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9f2199e9c3ec2bf78d89a4b5e88b8285bf8ef9d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6e:a8:86:0c:9b:1c:95:3a:c0:ad:e6:4c:dd:
19:c4:dd:25:70:2c:3a:9d:d2:fa:2b:19:02:f4:47:
7b:55:bb:ea:73:56:f6:01:27:71:9e:63:74:fe:8f:
8f:86:31:fb:6b:f5:b7:f4:d4:01:1f:c8:ad:02:29:
43:34:2a:44:ce:2a:b0:92:85:88:1f:0b:17:1c:5a:
05:8e:99:06:a2:39:97:3f:cc:02:a9:19:cf:1c:b2:
ff:c6:94:d2:25:e3:c9:6a:da:90:83:99:c6:40:8d:
6e:04:fe:00:0f:f2:d8:44:ed:9f:3f:f0:6b:27:35:
87:19:5a:10:b9:84:07:3f:fa:43:2f:ae:25:9d:c4:
b4:24:41:f3:0a:da:21:92:35:33:53:52:8b:fb:9a:
e6:a8:b6:4e:80:36:9a:54:73:89:c5:27:49:3c:45:
cf:ac:dd:d3:1a:8d:41:50:6c:e4:6c:c9:a5:80:26:
5b:23:70:9e:fb:3b:32:de:1e:57:af:ee:27:43:8c:
19:9e:e4:f9:cc:af:f0:0a:1c:69:30:8a:19:ea:5f:
21:66:62:ca:33:5a:45:78:16:47:82:51:ac:75:d8:
db:8a:53:7b:11:01:f4:a5:7c:a6:ed:ac:61:42:ec:
a5:38:b3:3f:c8:0a:b2:52:51:fe:3d:cc:c7:91:9f:
0c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:21:99:E9:C3:EC:2B:F7:8D:89:A4:B5:E8:8B:82:85:BF:8E:F9:D9
X509v3 Authority Key Identifier:
keyid:A0:E3:81:B6:E7:6C:B9:52:0E:8D:8F:56:77:6E:CA:0F:E1:76:CC:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oOOBtudsuVIOjY9Wd27KD-F2zEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/nyGZ6cPsK_eNiaS16IuChb-O-dk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/oOOBtudsuVIOjY9Wd27KD-F2zEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.135.40.0/21
Signature Algorithm: sha256WithRSAEncryption
92:18:27:a7:23:16:e4:30:33:6c:27:4d:90:b5:9e:56:df:c5:
a1:a6:58:61:30:37:45:97:76:47:6f:00:80:2d:32:9d:e1:99:
01:93:02:a0:c9:99:c7:ab:1c:81:2d:0d:ab:ef:82:a9:d0:ad:
6c:3b:8a:fb:36:d9:f7:22:4b:6a:61:71:12:c1:24:05:a7:e8:
ac:a5:f1:4e:c1:26:47:04:6f:f0:f9:b0:0a:d2:e4:3c:ec:ab:
93:58:c7:d1:19:36:fd:2d:31:a1:b2:d7:41:60:e4:47:d4:0b:
30:6f:9f:ed:77:a5:02:55:0b:ba:28:55:3a:48:2c:a3:0e:dc:
93:58:df:b8:96:5c:fb:83:ce:74:34:fc:c8:78:5c:7b:bb:d5:
5d:34:6b:8b:e1:d3:cb:9c:69:5d:0d:42:60:66:cf:92:b6:bc:
50:72:51:21:5b:28:f9:25:09:dc:60:76:f6:0f:9d:3c:7e:5d:
79:b0:25:6d:fa:0a:38:2d:63:e4:85:08:bc:91:5d:ee:ff:ad:
5b:e5:68:b6:6d:93:8a:42:c0:94:01:00:85:ce:e8:30:2e:ee:
3f:f3:91:a2:6c:5b:ed:78:1a:e9:55:c7:47:b3:8b:6f:4e:02:
54:e0:1f:30:72:89:4f:86:80:98:7d:a8:6c:93:52:04:62:0e:
41:09:08:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:01 2024 by rpki-client on console-fra.rpki-client.org