Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/e005c2-affa-458f-aaf8-8af56e733600/1/9OHjfJJGGjRADH7n2lCfouZjUoQ.roa
File: 9OHjfJJGGjRADH7n2lCfouZjUoQ.roa (raw, json)
Hash identifier: GlgXEzVnWWQk4zLpPVcHJxiHdsO8u+HUFVMHpJQMZSM=
Subject key identifier: F4:E1:E3:7C:92:46:1A:34:40:0C:7E:E7:DA:50:9F:A2:E6:63:52:84
Certificate issuer: /CN=4b57725b0a605d4ddcc464b70dcb3a162a5f055b
Certificate serial: 121E184B
Authority key identifier: 4B:57:72:5B:0A:60:5D:4D:DC:C4:64:B7:0D:CB:3A:16:2A:5F:05:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S1dyWwpgXU3cxGS3Dcs6FipfBVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/e005c2-affa-458f-aaf8-8af56e733600/1/9OHjfJJGGjRADH7n2lCfouZjUoQ.roa
Signing time: Thu 21 Apr 2022 09:02:50 +0000
ROA not before: Thu 21 Apr 2022 09:02:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51407
IP address blocks: 46.32.216.0/23 maxlen: 23
46.32.214.0/23 maxlen: 23
46.32.218.0/23 maxlen: 23
46.32.220.0/23 maxlen: 23
5.34.163.0/24 maxlen: 24
5.34.162.0/24 maxlen: 24
5.34.162.0/23 maxlen: 23
5.34.164.0/23 maxlen: 23
5.34.166.0/23 maxlen: 23
46.28.138.0/23 maxlen: 23
95.215.131.0/24 maxlen: 24
37.60.144.0/23 maxlen: 23
37.60.144.0/21 maxlen: 21
46.28.142.0/23 maxlen: 23
37.60.148.0/23 maxlen: 23
37.60.146.0/23 maxlen: 23
37.60.150.0/23 maxlen: 23
31.25.74.0/23 maxlen: 23
31.25.72.0/23 maxlen: 23
31.25.78.0/23 maxlen: 23
31.25.76.0/23 maxlen: 23
31.13.163.0/24 maxlen: 24
31.13.162.0/23 maxlen: 23
31.13.160.0/23 maxlen: 23
31.13.164.0/23 maxlen: 23
31.13.166.0/23 maxlen: 23
46.32.192.0/21 maxlen: 21
46.32.192.0/23 maxlen: 23
185.7.120.0/23 maxlen: 23
185.7.122.0/23 maxlen: 23
46.32.194.0/23 maxlen: 23
46.32.198.0/23 maxlen: 23
46.32.196.0/23 maxlen: 23
46.32.202.0/23 maxlen: 23
46.32.200.0/24 maxlen: 24
46.32.206.0/23 maxlen: 23
46.32.204.0/23 maxlen: 23
46.32.208.0/24 maxlen: 24
46.32.212.0/23 maxlen: 23
46.32.210.0/23 maxlen: 23
188.227.233.0/24 maxlen: 24
188.227.232.0/24 maxlen: 24
188.227.232.0/23 maxlen: 23
188.227.238.0/23 maxlen: 23
188.227.236.0/23 maxlen: 23
188.227.235.0/24 maxlen: 24
188.227.234.0/23 maxlen: 23
188.227.234.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 303962187 (0x121e184b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b57725b0a605d4ddcc464b70dcb3a162a5f055b
Validity
Not Before: Apr 21 09:02:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f4e1e37c92461a34400c7ee7da509fa2e6635284
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:de:e7:eb:ab:a8:c8:0c:ab:e2:c3:fd:c5:42:
60:c8:c5:ed:89:c0:63:a0:b4:48:e2:3f:3d:5f:7e:
b6:97:04:fc:03:11:29:da:2e:cf:c3:52:ce:87:2c:
79:56:27:f5:04:19:9b:48:a4:5c:7d:de:28:07:64:
79:8f:62:62:36:3f:ce:54:5a:24:51:8c:db:58:08:
e3:25:ff:b9:15:fd:9e:53:3d:8c:8d:78:df:4b:22:
95:5a:ee:57:50:fe:30:03:c0:00:8a:a5:60:20:4a:
d9:65:8c:ee:18:a6:90:00:a7:8f:4f:bc:0a:e9:2b:
e1:02:bc:ac:9e:8c:1e:5f:5b:62:70:56:bd:4f:d8:
08:99:74:d1:32:fc:e8:75:0c:9f:72:c2:4e:15:39:
57:36:b7:da:f6:3f:e1:ab:bb:f0:d9:de:a8:22:a4:
48:6c:8b:13:d0:93:37:b2:17:79:5d:b2:16:bb:b8:
49:64:28:42:b4:f1:fe:0c:99:22:7e:c8:d6:c4:d7:
86:d2:4a:a8:fc:c9:90:ff:5d:a4:e6:07:c4:53:e0:
38:04:52:65:63:df:28:99:3a:eb:46:8f:86:7a:51:
11:4f:6b:1b:de:3e:3b:86:c5:1d:2b:79:a5:40:33:
45:45:6b:3d:84:29:77:30:70:99:e0:58:fd:b9:cc:
76:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:E1:E3:7C:92:46:1A:34:40:0C:7E:E7:DA:50:9F:A2:E6:63:52:84
X509v3 Authority Key Identifier:
keyid:4B:57:72:5B:0A:60:5D:4D:DC:C4:64:B7:0D:CB:3A:16:2A:5F:05:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S1dyWwpgXU3cxGS3Dcs6FipfBVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e005c2-affa-458f-aaf8-8af56e733600/1/9OHjfJJGGjRADH7n2lCfouZjUoQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e005c2-affa-458f-aaf8-8af56e733600/1/S1dyWwpgXU3cxGS3Dcs6FipfBVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.34.162.0-5.34.167.255
31.13.160.0/21
31.25.72.0/21
37.60.144.0/21
46.28.138.0/23
46.28.142.0/23
46.32.192.0-46.32.200.255
46.32.202.0-46.32.208.255
46.32.210.0-46.32.221.255
95.215.131.0/24
185.7.120.0/22
188.227.232.0/21
Signature Algorithm: sha256WithRSAEncryption
48:f3:a5:c6:13:ae:94:40:c0:22:68:e9:76:32:1a:9f:fd:86:
d6:d9:e2:4f:4f:d6:9e:a1:da:1f:ab:24:49:87:e9:30:54:72:
21:f3:87:2f:ad:c8:6d:35:3b:f1:cd:85:37:a6:cb:df:36:33:
36:01:4f:86:8a:87:0f:10:dc:01:6c:3f:cc:3e:10:d3:d0:a9:
f1:ba:26:be:a4:a4:1b:47:0d:13:94:ee:35:06:05:a2:b3:f9:
87:fd:ce:8c:e7:6c:14:da:0a:bc:3e:ae:cb:56:99:6d:b5:77:
ee:08:5f:33:10:4f:4c:fa:c5:24:cf:68:9c:68:b6:80:9d:c3:
45:b7:46:33:5d:01:71:62:9b:5d:d7:86:be:e8:d9:19:04:10:
f5:8a:89:f6:4b:76:fa:b3:45:74:3b:dd:87:e8:ac:da:65:ab:
e8:1c:ef:a9:6d:6a:3c:f8:8a:42:69:0b:5d:bc:ab:19:21:cf:
b4:a5:9b:db:b3:2c:ee:c4:ba:5b:a3:c0:33:41:ab:e1:d2:9a:
07:a9:cc:74:ff:f6:64:f8:c5:70:b4:cf:26:a6:eb:94:e9:6d:
aa:1b:fe:3a:0a:e9:2a:08:2b:a0:f8:ca:85:78:99:f0:fb:c3:
ec:9c:a6:e1:8c:03:8e:1d:19:19:08:7d:ea:06:41:41:ab:4f:
19:f6:ae:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:07 2024 by rpki-client on console-fra.rpki-client.org