Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/Gb8xvmrEd2R1uRiUA9Hx2_FVcfo.roa
File: Gb8xvmrEd2R1uRiUA9Hx2_FVcfo.roa (raw, json)
Hash identifier: HyVQ3Agr+8gPwxj1r341dJC6Abn2/0srRBMCwzV8/AM=
Subject key identifier: 19:BF:31:BE:6A:C4:77:64:75:B9:18:94:03:D1:F1:DB:F1:55:71:FA
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 018E43B2F5978D859FF5FA1454A86B6E88DB
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/Gb8xvmrEd2R1uRiUA9Hx2_FVcfo.roa
Signing time: Fri 15 Mar 2024 19:59:45 +0000
ROA not before: Fri 15 Mar 2024 19:59:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12325
IP address blocks: 85.204.22.0/24 maxlen: 24
86.107.101.0/24 maxlen: 24
89.36.137.0/24 maxlen: 24
89.44.76.0/24 maxlen: 24
89.46.128.0/22 maxlen: 24
89.46.232.0/21 maxlen: 24
93.119.195.0/24 maxlen: 24
128.0.1.0/24 maxlen: 24
185.18.224.0/23 maxlen: 24
188.208.110.0/24 maxlen: 24
188.215.40.0/22 maxlen: 24
188.240.81.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:43:b2:f5:97:8d:85:9f:f5:fa:14:54:a8:6b:6e:88:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Mar 15 19:59:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=19bf31be6ac4776475b9189403d1f1dbf15571fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:77:c5:c2:15:93:31:ac:3a:32:f0:4c:d8:6f:
a2:3a:4f:9c:13:70:79:c8:c1:a4:1d:4d:e8:c7:27:
0a:93:dc:34:2d:fb:e8:70:88:e3:27:c9:9f:ec:79:
cc:91:19:36:5e:fc:73:36:96:1a:b5:c2:0e:43:f7:
57:52:3e:b6:c9:2b:8c:78:6e:76:62:93:1b:4b:29:
88:e7:97:06:f0:58:6f:b7:e4:7f:1e:e1:09:e1:73:
7e:00:36:85:e6:b9:82:33:3c:c4:ce:40:43:1c:64:
0e:ad:9c:e1:00:a8:69:f6:a3:c5:8f:77:d5:07:65:
34:73:09:d9:dc:c6:27:fb:4a:ef:e0:fe:da:12:cd:
dc:54:bb:17:ff:5c:64:36:76:cc:cb:7b:db:1f:13:
37:c9:d3:96:83:5d:1e:24:e6:22:3f:09:96:35:23:
7f:2c:98:61:95:91:f5:48:50:5b:88:7a:2f:ab:ea:
66:18:57:5e:15:8f:5c:c8:84:58:cf:f4:10:ce:aa:
2f:3a:44:c7:59:03:c5:fc:fd:39:9b:a5:cb:43:60:
b9:93:46:30:a5:a9:6c:4a:0a:71:30:e6:33:9e:cf:
81:88:9a:49:b9:89:d9:53:e6:f6:1d:98:21:a8:42:
b8:95:ac:64:03:d3:17:ba:53:df:ed:09:48:a9:02:
0d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:BF:31:BE:6A:C4:77:64:75:B9:18:94:03:D1:F1:DB:F1:55:71:FA
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/Gb8xvmrEd2R1uRiUA9Hx2_FVcfo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.22.0/24
86.107.101.0/24
89.36.137.0/24
89.44.76.0/24
89.46.128.0/22
89.46.232.0/21
93.119.195.0/24
128.0.1.0/24
185.18.224.0/23
188.208.110.0/24
188.215.40.0/22
188.240.81.0/24
Signature Algorithm: sha256WithRSAEncryption
78:48:9c:1e:f0:a5:d4:c5:93:17:a4:06:6c:70:29:f6:e5:43:
e1:c1:4e:a1:e1:36:d4:d5:9d:75:69:6d:09:06:82:c1:82:03:
57:32:17:b1:ba:6a:30:63:1b:38:b7:9d:db:a6:3c:84:e8:15:
72:9b:c5:d9:c3:f9:40:85:79:4b:f2:7e:bc:d9:05:89:a6:8b:
5d:33:82:1d:69:08:3c:7a:43:fa:d8:c6:35:a5:0d:00:0d:45:
b5:7d:6a:bd:d4:d2:8e:dc:79:36:c9:46:bb:1b:3f:1c:88:7c:
68:ec:42:ba:e7:be:f5:8b:93:29:4f:a4:40:87:14:94:4c:6d:
b5:71:34:07:83:10:79:4b:cd:01:b5:ed:90:e9:60:1d:7b:ad:
c7:24:d1:b4:8f:12:95:68:0c:de:57:88:dc:14:ca:69:11:52:
e0:84:9a:29:3d:cb:fa:f2:16:6e:ad:b9:a7:00:44:25:c9:e1:
3a:2a:fe:08:95:bf:0d:87:0a:9c:93:79:34:ed:fe:63:61:cf:
51:dd:9f:76:1d:f4:99:0d:f8:58:91:2d:cb:d0:23:7b:84:10:
dd:10:0c:1a:e4:50:8a:09:7b:bf:6c:5a:2c:a1:80:4e:3b:dd:
71:c9:42:82:70:b1:07:db:a3:01:25:de:34:2d:15:49:b0:c5:
3b:71:21:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:42 2024 by rpki-client on console-fra.rpki-client.org