Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/npwexMdM8-9B9lMIJ62lDbmQXkA.roa
File: npwexMdM8-9B9lMIJ62lDbmQXkA.roa (raw, json)
Hash identifier: 33IR5T+okFrom+Pd0D4fnW0MHNVml5sc/88f8TNMO70=
Subject key identifier: 9E:9C:1E:C4:C7:4C:F3:EF:41:F6:53:08:27:AD:A5:0D:B9:90:5E:40
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 01827DBC817B27A4C8D52726F2200A5DFF55
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/npwexMdM8-9B9lMIJ62lDbmQXkA.roa
Signing time: Mon 08 Aug 2022 13:54:42 +0000
ROA not before: Mon 08 Aug 2022 13:54:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31732
IP address blocks: 185.220.236.0/22 maxlen: 24
188.209.155.0/24 maxlen: 24
185.215.244.0/24 maxlen: 24
185.215.245.0/24 maxlen: 24
185.215.246.0/24 maxlen: 24
213.173.32.0/22 maxlen: 24
5.226.48.0/21 maxlen: 24
82.115.24.0/22 maxlen: 24
185.129.108.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:7d:bc:81:7b:27:a4:c8:d5:27:26:f2:20:0a:5d:ff:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Aug 8 13:54:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9e9c1ec4c74cf3ef41f6530827ada50db9905e40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:c4:2c:3d:30:25:ab:6b:af:fb:7e:6d:2e:7e:
12:2c:0e:77:9f:0d:74:9e:9c:8a:8e:4a:96:2d:f9:
fa:bf:40:07:50:d8:0b:68:89:e4:27:07:81:66:a8:
81:27:8e:bc:bd:9e:9f:18:4b:7b:18:69:50:ec:d9:
ab:6d:e1:d1:80:af:13:12:2c:10:b6:80:34:86:6a:
80:72:4f:29:fb:1b:37:bf:e1:17:b5:9c:de:e8:bb:
f9:79:6a:f4:37:d9:1d:b6:01:75:90:87:8f:e6:35:
c1:aa:90:8a:3f:41:4f:3d:a7:a6:a1:63:0b:53:58:
75:82:c6:91:54:77:a0:ce:52:ff:b3:53:66:5a:10:
a6:7a:81:a9:dd:29:4f:7e:d8:e9:70:0e:76:0f:34:
47:3e:78:b8:fe:dd:89:42:25:75:38:32:6e:fa:7b:
1c:d5:53:21:ba:7d:0d:eb:4f:2f:63:7c:bc:8c:9e:
da:e1:ad:37:a9:4a:a6:47:bb:b1:a5:38:a2:9b:52:
89:7c:1d:3a:34:f5:84:73:eb:7a:28:e2:3b:1f:2b:
34:10:51:15:92:77:da:3a:42:33:27:6a:71:5c:83:
9d:f1:ad:0c:12:45:0c:59:3b:7b:60:3e:af:d9:0d:
75:84:d8:92:97:f2:96:7d:eb:ee:c1:e8:2b:65:c6:
ee:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:9C:1E:C4:C7:4C:F3:EF:41:F6:53:08:27:AD:A5:0D:B9:90:5E:40
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/npwexMdM8-9B9lMIJ62lDbmQXkA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.226.48.0/21
82.115.24.0/22
185.129.108.0/22
185.215.244.0-185.215.246.255
185.220.236.0/22
188.209.155.0/24
213.173.32.0/22
Signature Algorithm: sha256WithRSAEncryption
0f:47:95:71:18:11:dd:4b:64:8d:a3:2e:18:44:7a:7e:a9:02:
96:7d:ab:65:39:eb:4a:a7:cd:c3:23:e8:84:56:a6:77:2c:90:
9f:f9:5d:c9:2e:80:a3:4e:cd:33:de:c2:d6:f8:a1:87:7d:57:
96:6e:bb:64:6c:84:59:32:0f:a1:5d:e9:a4:92:00:53:af:56:
a8:e8:14:2c:09:e5:87:8f:a3:52:68:5f:71:a5:ef:ea:30:3b:
a5:71:d7:5e:9f:e1:94:bd:33:87:c2:e0:66:89:0c:42:94:ef:
3f:a0:4d:3e:1f:0f:42:bc:77:80:ac:10:8c:23:38:ff:16:57:
a3:35:8e:bf:8d:14:cc:cf:b3:51:2c:1c:fc:21:51:63:f1:a5:
02:e4:f2:da:4b:64:46:f3:a3:82:15:5d:20:b9:14:c0:ff:77:
e6:58:18:e8:c1:79:5d:c2:7b:f5:99:c7:f6:3d:81:a8:3d:82:
8b:f0:3a:80:1d:ef:dc:4d:1a:3f:90:92:bf:14:9e:16:85:36:
9b:86:94:45:5d:18:40:57:c3:fd:b6:2f:dc:8f:8a:07:22:2b:
ff:9b:93:f3:34:e0:5d:20:a6:71:21:4a:a3:f4:06:3e:8d:a3:
95:75:bc:21:97:9e:9f:60:7d:7e:80:ba:64:55:8b:58:d1:5e:
08:b4:8e:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:35 2024 by rpki-client on console-fra.rpki-client.org