Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/EeMhqzUl5m0tFsc5s-UHi6AaCvE.roa
File: EeMhqzUl5m0tFsc5s-UHi6AaCvE.roa (raw, json)
Hash identifier: V7ohb6/c6ug1HBvflv7/inLkbt9Qc0r+vGeMGRydTm0=
Subject key identifier: 11:E3:21:AB:35:25:E6:6D:2D:16:C7:39:B3:E5:07:8B:A0:1A:0A:F1
Certificate issuer: /CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Certificate serial: 018404C1ABBF486C16FE73FE4C3F0F547CF4
Authority key identifier: 05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/EeMhqzUl5m0tFsc5s-UHi6AaCvE.roa
Signing time: Sun 23 Oct 2022 12:11:52 +0000
ROA not before: Sun 23 Oct 2022 12:11:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 26636
IP address blocks: 141.98.233.0/24 maxlen: 24
141.98.234.0/24 maxlen: 24
195.80.50.0/24 maxlen: 24
195.80.51.0/24 maxlen: 24
85.92.109.0/24 maxlen: 24
89.191.232.0/24 maxlen: 24
91.200.84.0/24 maxlen: 24
45.8.97.0/24 maxlen: 24
45.8.98.0/24 maxlen: 24
45.80.130.0/23 maxlen: 23
45.80.129.0/24 maxlen: 24
91.107.116.0/24 maxlen: 24
91.107.124.0/23 maxlen: 23
194.31.174.0/24 maxlen: 24
194.31.173.0/24 maxlen: 24
91.107.127.0/24 maxlen: 24
194.5.92.0/24 maxlen: 24
194.5.93.0/24 maxlen: 24
5.44.44.0/24 maxlen: 24
5.44.46.0/24 maxlen: 24
5.44.47.0/24 maxlen: 24
45.129.185.0/24 maxlen: 24
194.28.192.0/24 maxlen: 24
45.66.116.0/24 maxlen: 24
45.66.119.0/24 maxlen: 24
109.236.58.0/24 maxlen: 24
109.236.56.0/23 maxlen: 23
92.118.114.0/23 maxlen: 23
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:04:c1:ab:bf:48:6c:16:fe:73:fe:4c:3f:0f:54:7c:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Validity
Not Before: Oct 23 12:11:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=11e321ab3525e66d2d16c739b3e5078ba01a0af1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:aa:fb:26:dc:72:71:95:31:cc:36:f7:46:46:
a8:22:4d:9e:53:73:20:5b:68:b2:de:fa:6e:19:98:
b0:d3:15:df:73:47:84:7d:dd:20:59:4a:cb:a2:ed:
75:ee:98:5a:45:97:17:22:39:8d:6c:8a:10:d9:1e:
92:1b:f4:84:66:40:69:c2:9f:16:6b:2a:84:cf:8a:
36:fd:d6:a0:6e:f6:a0:b7:ac:5b:11:84:a5:07:98:
c2:33:b2:f5:14:fe:88:86:ae:da:57:11:f1:9a:79:
13:c0:fd:05:53:b0:21:16:3d:cb:08:03:29:ea:ea:
43:3c:ec:d0:09:2a:5d:7e:37:50:37:36:6a:8f:c4:
9b:a8:f6:21:1a:c7:5b:3c:af:53:dc:36:d4:ba:59:
29:bd:d8:3e:09:fe:bc:ab:03:8a:12:ad:33:29:9e:
27:a7:74:8d:f6:35:2d:db:43:92:80:d2:06:31:e6:
31:dc:86:95:ae:e6:11:3e:ba:f5:83:50:fe:8c:a9:
66:4b:15:92:77:5b:21:42:58:a6:81:4e:6a:d8:7f:
87:9a:76:ec:7a:d3:4d:16:42:6a:c4:89:56:0f:d8:
8c:2b:bc:43:73:32:a4:85:8b:47:45:44:c9:78:34:
b0:d8:9f:b8:44:74:3f:b0:06:dc:19:38:75:aa:6b:
e7:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:E3:21:AB:35:25:E6:6D:2D:16:C7:39:B3:E5:07:8B:A0:1A:0A:F1
X509v3 Authority Key Identifier:
keyid:05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/EeMhqzUl5m0tFsc5s-UHi6AaCvE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.44.44.0/24
5.44.46.0/23
45.8.97.0-45.8.98.255
45.66.116.0/24
45.66.119.0/24
45.80.129.0-45.80.131.255
45.129.185.0/24
85.92.109.0/24
89.191.232.0/24
91.107.116.0/24
91.107.124.0/23
91.107.127.0/24
91.200.84.0/24
92.118.114.0/23
109.236.56.0-109.236.58.255
141.98.233.0-141.98.234.255
194.5.92.0/23
194.28.192.0/24
194.31.173.0-194.31.174.255
195.80.50.0/23
Signature Algorithm: sha256WithRSAEncryption
5f:87:20:1d:44:9d:53:e0:a7:d4:62:31:0e:79:b6:88:b7:b6:
83:15:37:b5:3e:d9:e0:18:9d:9a:9c:4b:96:53:64:8c:36:a4:
d3:f8:7d:09:c4:2e:41:f7:28:52:c1:f1:81:5b:ab:1b:dd:35:
38:5e:0e:72:60:e7:66:e4:24:5f:4b:9e:85:fc:14:73:1f:41:
1a:a3:9c:ca:fe:b2:0a:50:7a:f2:22:77:e3:d6:4d:7e:7c:27:
c6:9a:28:2e:4e:d8:f4:fd:16:0b:cc:3d:79:9b:69:16:2f:6b:
ff:99:ef:b5:da:46:7f:d1:e3:97:e7:30:32:f4:02:1c:dc:0d:
eb:ab:fb:d5:dd:47:34:3e:d9:a3:6f:27:bc:25:af:b5:d7:a9:
db:93:bf:bc:cc:1f:77:e0:15:90:06:94:7d:9c:a1:64:94:1f:
df:0b:99:4f:80:68:35:22:b3:bc:3d:64:a0:b0:32:86:63:38:
d2:f0:11:ca:ff:00:42:06:c6:e1:89:a3:b2:44:c2:87:cf:13:
4a:2d:99:95:26:f3:fd:67:20:3e:45:9e:c7:68:67:1f:40:b1:
99:0b:2b:2d:51:90:b4:5f:f1:2a:25:64:db:7d:45:7d:ba:12:
30:04:4b:5e:f2:84:1b:d6:eb:5c:be:52:2a:27:1e:e7:83:76:
ac:fe:5d:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:54 2023 by rpki-client on console-fra.rpki-client.org