Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/OXXhgwWP-y_3kCUAYwn217KQbVU.roa
File: OXXhgwWP-y_3kCUAYwn217KQbVU.roa (raw, json)
Hash identifier: kcJsnor6LUQhJUvYmoNmIdHtJz06iHLD59HrC4N2AbA=
Subject key identifier: 39:75:E1:83:05:8F:FB:2F:F7:90:25:00:63:09:F6:D7:B2:90:6D:55
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 0183D12F87B03450C239CE942C50B8F1EAC4
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/OXXhgwWP-y_3kCUAYwn217KQbVU.roa
Signing time: Thu 13 Oct 2022 11:51:36 +0000
ROA not before: Thu 13 Oct 2022 11:51:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31732
IP address blocks: 5.34.208.0/20 maxlen: 24
185.220.236.0/22 maxlen: 24
188.209.155.0/24 maxlen: 24
185.215.244.0/23 maxlen: 24
45.137.180.0/22 maxlen: 24
213.173.32.0/22 maxlen: 24
185.129.108.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:d1:2f:87:b0:34:50:c2:39:ce:94:2c:50:b8:f1:ea:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Oct 13 11:51:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3975e183058ffb2ff79025006309f6d7b2906d55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:b3:b2:eb:de:aa:28:30:3f:64:5c:17:68:b8:
b8:50:2c:df:73:00:81:c9:c7:13:a8:a1:5c:be:da:
df:c9:e6:a3:41:68:72:51:ed:21:3f:56:0d:5f:d9:
9a:47:6f:58:8d:2c:f9:f4:c6:65:86:14:46:ad:0d:
78:b4:de:67:46:5a:49:ca:71:28:11:48:e3:99:f2:
a4:ab:9d:75:07:21:04:74:ab:88:63:23:0a:28:08:
9d:d2:49:36:ed:34:fa:8b:22:60:5e:69:b7:8b:d6:
aa:6e:d9:9a:01:61:b3:18:24:d5:1f:86:ed:3d:57:
6e:c2:cc:a6:5c:03:71:9a:15:d3:f4:a6:27:ac:fb:
e0:98:f1:f2:55:ba:8e:37:d2:68:be:d3:99:ac:2c:
43:31:b1:13:67:01:0f:b1:83:03:02:65:cf:65:e0:
3e:6b:64:1c:d3:e9:cc:23:60:80:b6:cc:8e:b8:bf:
b7:7d:5b:73:09:79:92:a0:59:dc:6f:82:f4:d6:41:
23:c4:30:5d:04:73:a4:cf:e9:ef:da:0f:6d:7a:ca:
cb:23:fa:5b:fd:16:e6:4e:34:d4:41:b6:a9:74:5b:
19:9e:b0:87:a7:38:15:3b:57:bd:a4:ee:1c:4f:27:
a6:d7:37:4f:82:2b:62:2f:72:2e:70:e7:34:d7:0e:
89:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:75:E1:83:05:8F:FB:2F:F7:90:25:00:63:09:F6:D7:B2:90:6D:55
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/OXXhgwWP-y_3kCUAYwn217KQbVU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.34.208.0/20
45.137.180.0/22
185.129.108.0/22
185.215.244.0/23
185.220.236.0/22
188.209.155.0/24
213.173.32.0/22
Signature Algorithm: sha256WithRSAEncryption
2c:81:5a:e6:cd:92:36:4a:ff:da:b3:b2:c8:fe:3b:b2:cb:4b:
0f:56:5b:7c:7c:59:9c:36:42:8a:e3:3d:f1:2b:d8:9d:0e:be:
f7:07:c8:51:c5:f8:3b:a9:18:df:de:20:94:84:7d:7c:0b:c4:
be:c3:4a:29:eb:e3:d6:2f:42:b6:ba:8f:c2:b7:29:84:bf:04:
e6:1c:ff:fa:dc:98:63:0e:3b:ef:b3:a5:73:eb:21:72:99:1e:
a1:f4:60:84:1e:dd:94:f6:07:ab:da:69:0e:27:5b:02:38:ff:
0f:2f:60:62:f8:06:d6:6f:df:90:ec:cc:41:35:38:47:0f:26:
aa:ca:e8:1c:6e:ee:c9:f3:75:95:22:15:33:e1:d5:39:9f:6e:
46:2e:15:71:e9:44:39:bf:b2:e3:9e:e4:5d:eb:75:b2:ad:5f:
05:e1:55:f9:4c:e4:17:50:a2:ab:61:2f:e7:9e:86:08:36:5d:
23:c0:2d:51:62:9f:30:8d:47:2e:9a:90:4e:d8:c3:e4:06:ce:
f3:d4:51:98:d0:a2:26:c4:82:73:4e:3e:2e:cc:9b:e1:ac:3a:
aa:9f:e4:c2:e6:4c:64:f0:31:86:4b:37:4d:42:e6:ea:a6:a7:
6c:0a:f4:a8:73:68:82:d5:c5:0c:fb:b2:50:11:22:bb:7b:c2:
96:b3:49:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:35 2024 by rpki-client on console-fra.rpki-client.org