Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/Fq1eF851yPP8VsCfW-Ksl3Qn_-0.roa
File: Fq1eF851yPP8VsCfW-Ksl3Qn_-0.roa (raw, json)
Hash identifier: PS+6l2/h1hZlZYiggAvr/WWwK5ZJq7zGvfZR2pGmlaU=
Subject key identifier: 16:AD:5E:17:CE:75:C8:F3:FC:56:C0:9F:5B:E2:AC:97:74:27:FF:ED
Certificate issuer: /CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Certificate serial: 018404C1AD5AABC8105F5EAA7A01B68EF60F
Authority key identifier: 05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/Fq1eF851yPP8VsCfW-Ksl3Qn_-0.roa
Signing time: Sun 23 Oct 2022 12:11:52 +0000
ROA not before: Sun 23 Oct 2022 12:11:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 395800
IP address blocks: 85.92.109.0/24 maxlen: 24
194.5.92.0/24 maxlen: 24
89.191.232.0/24 maxlen: 24
5.44.47.0/24 maxlen: 24
109.236.58.0/24 maxlen: 24
91.107.116.0/24 maxlen: 24
194.31.174.0/24 maxlen: 24
194.31.173.0/24 maxlen: 24
91.107.124.0/23 maxlen: 23
91.107.127.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:04:c1:ad:5a:ab:c8:10:5f:5e:aa:7a:01:b6:8e:f6:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Validity
Not Before: Oct 23 12:11:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=16ad5e17ce75c8f3fc56c09f5be2ac977427ffed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ed:ec:9d:40:47:c9:09:2c:a1:94:b1:83:8c:
cb:26:75:65:b4:cf:09:8e:ca:d9:ac:31:43:f3:19:
f9:5a:c2:a0:d5:c0:9b:55:fa:24:65:ee:a7:13:90:
b5:22:c1:63:0e:fc:88:a2:a2:17:b4:7a:db:cf:da:
29:ec:9c:73:55:ce:7a:1b:bc:3b:51:bd:e5:04:27:
70:5d:fc:e7:a1:94:8b:ed:af:43:a7:43:53:05:da:
94:5d:1b:1e:54:f8:56:a5:f2:b5:7a:41:9d:30:75:
8b:62:76:df:2e:a1:5b:b6:a3:af:b5:04:fd:f6:0f:
9e:a6:35:32:29:60:4c:e7:83:37:29:67:5f:49:27:
88:c9:fe:f6:2f:62:53:62:ea:10:33:e7:36:96:b0:
91:f8:34:b1:51:5e:ee:8a:1b:40:d1:dd:52:a7:82:
c9:c8:01:5a:23:e8:b2:a7:84:0f:bc:e4:f8:4e:64:
49:16:0d:a6:e0:1f:71:8e:1d:8e:b0:e3:ae:dc:e3:
41:6d:6c:6b:30:43:d2:a1:24:dc:ca:d4:df:f8:a1:
da:28:41:9e:68:d8:c8:a4:18:c8:57:2d:80:fa:e4:
a8:76:b3:e6:27:7f:5e:9c:7f:6c:96:33:65:ad:6c:
5d:a7:35:93:39:a2:16:9e:a1:d9:27:83:62:9d:87:
9b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:AD:5E:17:CE:75:C8:F3:FC:56:C0:9F:5B:E2:AC:97:74:27:FF:ED
X509v3 Authority Key Identifier:
keyid:05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/Fq1eF851yPP8VsCfW-Ksl3Qn_-0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.44.47.0/24
85.92.109.0/24
89.191.232.0/24
91.107.116.0/24
91.107.124.0/23
91.107.127.0/24
109.236.58.0/24
194.5.92.0/24
194.31.173.0-194.31.174.255
Signature Algorithm: sha256WithRSAEncryption
94:da:7a:d3:b2:b2:74:a5:3b:54:42:58:26:65:0d:dc:be:7c:
3e:3f:52:f0:ff:21:a7:5d:53:93:d8:ef:00:8d:95:0e:0f:57:
8b:16:c7:55:80:3b:8b:d4:d7:27:74:ca:bc:ec:17:89:44:91:
27:68:0e:e9:37:7c:ae:87:17:d3:35:20:11:26:e5:c3:38:63:
8a:fa:a0:80:8d:ef:4e:95:59:b9:75:74:fe:1a:96:b8:f2:a1:
02:e5:c2:a2:33:82:4c:bd:64:31:56:75:95:d0:50:bb:8a:30:
4d:fa:16:b4:30:93:f9:d1:f8:76:9f:f4:d8:bc:96:d9:94:50:
21:d9:b2:21:df:5f:5d:4f:cc:05:78:4c:3b:8e:6a:bf:d8:56:
6a:a7:d8:9e:52:4f:84:5a:11:4d:ce:4b:fb:cc:5c:4b:f8:02:
b7:b0:89:31:e4:66:de:8d:7e:5b:03:b7:24:1f:e6:24:b4:f7:
35:1d:b8:41:d3:21:f5:a6:11:49:03:92:53:7c:6d:42:d2:50:
a2:e1:a7:cb:8d:59:cb:9e:6b:6e:c2:12:e2:f7:5b:3a:d9:f4:
bd:5a:05:35:bd:4d:81:55:c6:74:99:90:5d:bf:28:df:96:a8:
6f:31:70:e1:d9:33:81:54:5d:56:78:8e:3f:4f:71:ae:80:9d:
50:92:68:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:54 2023 by rpki-client on console-fra.rpki-client.org