Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/uOxv-7kKSRygmzpHWLy31wj2aPY.roa
File: uOxv-7kKSRygmzpHWLy31wj2aPY.roa (raw, json)
Hash identifier: WsQdmypgetegN8KIQ8mu4WVEHYlySmLt+qIdPhci39E=
Subject key identifier: B8:EC:6F:FB:B9:0A:49:1C:A0:9B:3A:47:58:BC:B7:D7:08:F6:68:F6
Certificate issuer: /CN=add353933674a5608f6d1ee2dab4f64c8bff8f39
Certificate serial: 018D3B1ED0605056854D4E4929678D9A8440
Authority key identifier: AD:D3:53:93:36:74:A5:60:8F:6D:1E:E2:DA:B4:F6:4C:8B:FF:8F:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/uOxv-7kKSRygmzpHWLy31wj2aPY.roa
Signing time: Wed 24 Jan 2024 10:58:11 +0000
ROA not before: Wed 24 Jan 2024 10:58:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8851
IP address blocks: 91.84.0.0/18 maxlen: 18
91.84.96.0/19 maxlen: 19
91.84.128.0/17 maxlen: 17
91.85.0.0/17 maxlen: 17
91.85.128.0/19 maxlen: 19
91.85.192.0/18 maxlen: 18
194.46.32.0/19 maxlen: 19
194.46.64.0/19 maxlen: 19
194.46.80.0/20 maxlen: 20
212.104.128.0/19 maxlen: 19
212.104.129.0/24 maxlen: 24
212.104.130.0/24 maxlen: 24
212.104.132.0/24 maxlen: 24
212.104.143.0/24 maxlen: 24
212.104.149.0/24 maxlen: 24
212.104.150.0/24 maxlen: 24
212.104.152.0/24 maxlen: 24
212.104.155.0/24 maxlen: 24
212.104.156.0/24 maxlen: 24
212.104.159.0/24 maxlen: 24
212.108.80.0/21 maxlen: 21
212.108.88.0/22 maxlen: 22
212.108.88.0/23 maxlen: 23
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:3b:1e:d0:60:50:56:85:4d:4e:49:29:67:8d:9a:84:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=add353933674a5608f6d1ee2dab4f64c8bff8f39
Validity
Not Before: Jan 24 10:58:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b8ec6ffbb90a491ca09b3a4758bcb7d708f668f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:30:fe:55:e7:21:7a:ac:ce:f0:a6:0e:3d:43:
b5:57:67:2d:c1:56:7b:bf:23:86:68:53:1c:52:f5:
43:cb:12:c1:48:39:ec:e0:26:b6:95:3f:07:1c:4c:
9f:89:fe:80:30:2b:d5:d1:0a:c1:65:00:24:e1:ac:
d3:33:58:1d:2c:ad:07:2b:ef:0d:54:34:64:24:be:
15:46:fd:7f:3d:ce:2a:f5:eb:7d:bb:6e:85:c7:3c:
42:82:45:3b:a3:a7:6d:9c:5f:7e:1e:7c:82:57:23:
3e:c3:77:82:07:1c:2d:9b:77:65:e2:6d:96:7e:c7:
a0:29:8c:7a:4a:b9:d0:99:30:a9:bd:a7:85:92:6c:
4e:03:f2:3f:e6:a7:b6:11:8d:8a:b2:ae:e3:27:76:
e0:41:76:7b:95:15:03:67:df:38:6b:d2:2a:2e:50:
49:a4:1c:b8:87:fd:9b:5d:24:3b:3b:29:ac:d3:b1:
86:35:0b:a5:c4:5a:82:6e:3d:c5:da:8d:f0:21:b0:
ba:1d:ca:a9:60:82:2e:af:2a:e9:cc:e2:91:d4:3c:
f4:54:f1:fa:34:e3:9d:9e:11:c9:c7:e1:25:9a:6e:
24:6b:bf:20:41:08:e9:bf:b8:98:4f:33:b1:b0:6f:
34:75:a2:79:66:47:c3:1e:53:d8:da:71:19:a5:b5:
a0:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:EC:6F:FB:B9:0A:49:1C:A0:9B:3A:47:58:BC:B7:D7:08:F6:68:F6
X509v3 Authority Key Identifier:
keyid:AD:D3:53:93:36:74:A5:60:8F:6D:1E:E2:DA:B4:F6:4C:8B:FF:8F:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/uOxv-7kKSRygmzpHWLy31wj2aPY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.84.0.0/18
91.84.96.0-91.85.159.255
91.85.192.0/18
194.46.32.0-194.46.95.255
212.104.128.0/19
212.108.80.0-212.108.91.255
Signature Algorithm: sha256WithRSAEncryption
78:67:63:18:0f:b0:b0:0e:a9:2a:d3:c6:77:6a:d1:b1:5e:d4:
32:f1:f1:b2:80:a0:2a:8a:95:09:05:fe:88:d2:bb:a7:d1:9c:
51:47:b1:d4:58:90:20:00:a8:ca:24:76:43:eb:d4:92:c5:99:
cd:27:c3:8b:1a:96:9b:39:a8:7e:bb:3e:1d:04:4c:65:89:31:
c2:e6:71:98:b8:0f:53:7f:1f:d8:7c:42:d6:ac:50:c4:70:38:
9c:89:c5:a4:10:27:57:c4:c0:66:a7:0a:8f:40:52:65:74:7c:
b6:0a:83:b1:6d:8e:ae:f8:78:60:0e:ec:38:7c:e2:ca:87:9d:
b3:93:ea:ab:6e:4f:57:79:63:22:2e:47:03:de:aa:2b:58:14:
64:6b:43:ce:42:76:19:ff:10:0a:a5:e8:26:ec:1f:5f:80:13:
91:31:81:33:44:8e:db:6d:6c:a7:09:36:a3:5e:05:61:75:6d:
d4:65:d2:69:98:6e:d4:09:60:00:d1:09:2f:60:bc:bf:5a:41:
b5:7c:d1:72:58:0c:de:72:83:a4:7b:45:4b:84:69:96:19:f2:
fb:e2:ab:29:60:4f:97:be:cb:97:bd:9f:79:af:a7:7c:52:3c:
ec:56:b0:52:0f:96:9a:44:2e:0a:da:dd:47:07:22:f4:30:11:
f4:c8:80:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 06:23:55 2025 by rpki-client