Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/nfZINWdBQujQtF6B8Eh60Whv2Jk.roa
File: nfZINWdBQujQtF6B8Eh60Whv2Jk.roa (raw, json)
Hash identifier: PqgqiD1zHsR2/W7UU2dzsTc44K1c8PHfqiXd+TCDLus=
Subject key identifier: 9D:F6:48:35:67:41:42:E8:D0:B4:5E:81:F0:48:7A:D1:68:6F:D8:99
Certificate issuer: /CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Certificate serial: 0185969E5C98299AF00123F47F82FDDF583A
Authority key identifier: 05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/nfZINWdBQujQtF6B8Eh60Whv2Jk.roa
Signing time: Mon 09 Jan 2023 13:00:38 +0000
ROA not before: Mon 09 Jan 2023 13:00:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 26636
IP address blocks: 85.92.109.0/24 maxlen: 24
194.5.92.0/24 maxlen: 24
194.5.93.0/24 maxlen: 24
91.200.84.0/24 maxlen: 24
45.66.116.0/24 maxlen: 24
5.44.44.0/24 maxlen: 24
109.236.58.0/24 maxlen: 24
109.236.56.0/23 maxlen: 23
92.118.114.0/23 maxlen: 23
195.80.51.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:96:9e:5c:98:29:9a:f0:01:23:f4:7f:82:fd:df:58:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Validity
Not Before: Jan 9 13:00:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9df64835674142e8d0b45e81f0487ad1686fd899
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b3:3f:e0:1e:d4:fe:7a:d5:f6:df:a2:50:74:
d9:1d:60:07:97:49:1c:08:4c:13:74:e0:0b:fe:43:
c8:d2:48:7b:e4:4e:ce:c4:24:45:91:8a:33:13:3b:
2c:2c:76:5a:0f:08:7a:5f:39:73:55:dc:c8:68:1a:
05:b2:d6:f6:f9:5e:6d:2c:ac:15:bb:32:ec:78:00:
81:8c:b4:dd:b1:fa:6d:9e:51:41:1a:3d:2e:eb:44:
90:9f:67:db:01:86:3c:51:f9:23:07:75:7d:8a:49:
83:69:35:31:dd:0f:f7:cf:4e:95:89:89:d7:f6:06:
53:28:e7:8e:47:77:ec:2b:a9:e8:f0:60:af:af:27:
a6:1d:d5:68:36:10:0e:0e:6c:dc:43:2a:2c:83:69:
e2:65:ee:3a:a9:6b:a7:3c:f5:ae:f4:32:7e:58:4f:
c9:d8:18:fc:77:df:e9:1a:f2:58:c3:ff:69:9b:f0:
cc:38:5d:ee:71:f6:38:b7:33:ee:60:e5:8c:c4:f2:
b4:ae:ce:6f:6e:9c:5f:04:70:23:e5:98:4f:df:bd:
30:8d:d0:28:13:0c:6a:e9:7e:cb:9f:c8:5a:c8:ed:
25:71:91:55:ad:1e:6f:3c:cf:dd:38:f1:af:48:82:
78:c0:41:60:bd:19:13:1e:52:00:8c:4f:19:bc:43:
eb:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:F6:48:35:67:41:42:E8:D0:B4:5E:81:F0:48:7A:D1:68:6F:D8:99
X509v3 Authority Key Identifier:
keyid:05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/nfZINWdBQujQtF6B8Eh60Whv2Jk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.44.44.0/24
45.66.116.0/24
85.92.109.0/24
91.200.84.0/24
92.118.114.0/23
109.236.56.0-109.236.58.255
194.5.92.0/23
195.80.51.0/24
Signature Algorithm: sha256WithRSAEncryption
01:87:18:1f:b8:40:fc:a1:ae:4f:95:00:00:18:a2:67:6d:d0:
8e:45:60:7c:ac:53:16:df:fa:72:9d:d2:b1:27:9c:47:3d:b8:
83:07:8d:2a:f9:be:bd:60:c0:d5:42:e7:ef:b7:d1:27:f7:ed:
8b:ec:cf:06:b0:d8:a3:61:94:0c:2a:24:66:4d:d6:c0:1a:64:
ab:11:bf:5f:7d:b9:8b:da:af:6d:5b:75:f5:62:21:33:46:9e:
60:e7:f5:bb:57:8e:4c:06:4b:69:8c:4b:9d:2d:08:b2:73:a8:
44:22:08:5e:88:ea:15:99:42:92:93:d7:61:3b:e1:a6:2c:46:
0c:20:b7:32:6d:3f:37:79:f7:13:d0:e5:09:56:ba:7a:97:2f:
c6:95:3f:e6:3d:05:33:1a:b4:3b:3b:8b:43:c8:72:a9:35:a8:
26:a4:a0:31:0a:2b:ba:94:aa:7c:b0:df:3f:99:92:0b:b2:59:
1a:3a:d2:97:b0:00:35:3b:00:ec:fe:19:1f:3d:d7:2d:34:88:
b1:ea:10:26:d9:0a:e7:d9:d1:d3:8c:44:99:da:5c:8f:73:65:
f0:e4:be:4e:cb:4e:50:33:d8:ac:82:81:2c:54:40:1b:d5:2d:
16:36:4b:a2:0e:35:39:41:4c:ea:48:b8:ef:ad:d2:ca:b0:62:
c9:dd:bd:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:47 2023 by rpki-client on console-ams.rpki-client.org