Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ULym1kJvl2Gsm2QW2ayQw09daDc.roa
File: ULym1kJvl2Gsm2QW2ayQw09daDc.roa (raw, json)
Hash identifier: jeD73mZ/KPBWv9pzo7KFVwj4Ml3kMmdnAHu4sMbtx7o=
Subject key identifier: 50:BC:A6:D6:42:6F:97:61:AC:9B:64:16:D9:AC:90:C3:4F:5D:68:37
Certificate issuer: /CN=65816774b7c5665d67a86c20ceb6487b5b78b38d
Certificate serial: 0AE7D719
Authority key identifier: 65:81:67:74:B7:C5:66:5D:67:A8:6C:20:CE:B6:48:7B:5B:78:B3:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZYFndLfFZl1nqGwgzrZIe1t4s40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ULym1kJvl2Gsm2QW2ayQw09daDc.roa
Signing time: Sat 01 Jan 2022 15:55:03 +0000
ROA not before: Sat 01 Jan 2022 15:55:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31083
IP address blocks: 185.52.50.0/24 maxlen: 24
185.52.51.0/24 maxlen: 24
185.249.102.0/24 maxlen: 24
185.249.103.0/24 maxlen: 24
185.249.100.0/24 maxlen: 24
185.249.101.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 182966041 (0xae7d719)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65816774b7c5665d67a86c20ceb6487b5b78b38d
Validity
Not Before: Jan 1 15:55:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=50bca6d6426f9761ac9b6416d9ac90c34f5d6837
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:34:4d:de:d0:99:1d:4e:12:81:a6:46:f0:d2:
90:8b:1f:db:b0:8b:85:02:1e:9d:43:43:da:03:a7:
4e:30:27:9d:63:fb:65:51:2d:e8:26:c1:18:d1:25:
a2:71:03:08:96:80:5f:78:b0:4b:68:fb:f5:14:6f:
8c:63:11:d0:f5:f3:27:b3:60:1a:ea:5d:eb:e5:14:
8f:38:e6:e1:b4:1d:8a:13:cf:32:29:dc:5b:b7:16:
67:fa:bd:59:5d:38:34:92:00:56:b3:b0:20:23:52:
c6:52:37:d7:0d:4d:f6:38:a7:b3:5c:e1:3a:a6:68:
3d:4c:0e:5a:33:98:08:cd:d0:09:8f:27:30:c8:60:
8f:85:f5:9e:b8:20:ca:50:3e:87:29:e5:77:0f:66:
66:36:5c:a1:e1:82:f5:e9:d3:e9:fb:c4:78:9b:d5:
fb:e6:52:e5:e1:aa:97:8f:b6:7b:7a:f7:99:13:0c:
95:02:0d:57:aa:e1:61:16:b0:f9:27:43:e8:75:b3:
09:a6:3b:72:c5:47:20:22:ad:ac:42:d5:b5:ed:29:
1e:db:5f:68:86:d1:e3:39:f6:5d:5f:87:5a:4f:e1:
65:04:f5:67:35:21:54:cb:ea:72:a9:d6:db:10:df:
50:36:c0:fa:54:d7:ac:f8:77:76:54:d3:6f:fa:a2:
d3:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:BC:A6:D6:42:6F:97:61:AC:9B:64:16:D9:AC:90:C3:4F:5D:68:37
X509v3 Authority Key Identifier:
keyid:65:81:67:74:B7:C5:66:5D:67:A8:6C:20:CE:B6:48:7B:5B:78:B3:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZYFndLfFZl1nqGwgzrZIe1t4s40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ULym1kJvl2Gsm2QW2ayQw09daDc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.52.50.0/23
185.249.100.0/22
Signature Algorithm: sha256WithRSAEncryption
de:ca:9f:0f:9d:19:87:d7:20:10:8d:94:a4:5f:49:7b:fc:dd:
cb:bf:cb:d7:5a:5d:40:11:5f:ec:d3:f2:38:e3:c1:ac:16:ec:
f6:df:64:26:a5:cb:43:b4:32:2b:e9:0f:9d:f5:6f:a6:50:a7:
eb:3d:1e:40:9c:9f:55:11:08:9a:5f:7c:8a:c5:8f:b7:6c:54:
e8:31:65:9d:34:69:5e:b2:38:76:f4:5d:0a:86:00:c1:84:89:
1e:19:55:35:c7:99:40:f0:2a:88:53:8f:e6:7c:aa:53:7a:82:
33:30:e6:64:c8:af:bf:c8:2e:4d:84:96:39:3f:55:9e:de:4d:
71:f8:6f:73:d3:10:e1:15:dd:a4:04:75:7e:6b:96:c4:95:2b:
6e:e1:37:f0:b6:3d:3e:bc:e2:a6:5d:d4:a8:fd:8e:15:d0:1f:
f0:08:9e:a7:8d:29:80:19:59:ed:a7:d4:19:46:80:da:1c:91:
0d:ca:80:33:87:ba:59:a1:3f:e7:8b:14:1b:70:13:26:ab:e6:
80:11:6a:9b:0c:bf:8e:15:21:2d:d3:ba:39:02:2c:1e:3d:52:
1a:72:c9:65:34:7b:b6:d0:3e:9f:65:80:3f:d9:4c:97:1e:03:
31:90:c9:ff:52:92:b6:87:b3:ff:a9:59:87:10:41:f5:d7:ce:
45:27:fb:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:27 2024 by rpki-client on console-fra.rpki-client.org