Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/GzZEIOsKXa-wLE_AhahQ52AHyrk.roa
File: GzZEIOsKXa-wLE_AhahQ52AHyrk.roa (raw, json)
Hash identifier: 8k6NMhcxjs+Eq/RShVZbzutDFTSx3wpYnmVvBTqPHQY=
Subject key identifier: 1B:36:44:20:EB:0A:5D:AF:B0:2C:4F:C0:85:A8:50:E7:60:07:CA:B9
Certificate issuer: /CN=8bdf76c54b9e6935c30a9b4c9ba9309ac470ec02
Certificate serial: 01854EE49640CD98F11FB114240B89F33555
Authority key identifier: 8B:DF:76:C5:4B:9E:69:35:C3:0A:9B:4C:9B:A9:30:9A:C4:70:EC:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/GzZEIOsKXa-wLE_AhahQ52AHyrk.roa
Signing time: Mon 26 Dec 2022 14:44:41 +0000
ROA not before: Mon 26 Dec 2022 14:44:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39130
IP address blocks: 5.102.36.0/24 maxlen: 24
5.102.36.0/23 maxlen: 23
5.102.37.0/24 maxlen: 24
5.102.36.0/22 maxlen: 22
5.102.38.0/24 maxlen: 24
5.102.39.0/24 maxlen: 24
178.159.208.0/24 maxlen: 24
178.159.208.0/20 maxlen: 20
178.159.211.0/24 maxlen: 24
178.159.212.0/24 maxlen: 24
178.159.209.0/24 maxlen: 24
178.159.210.0/24 maxlen: 24
178.159.213.0/24 maxlen: 24
178.159.214.0/24 maxlen: 24
178.159.215.0/24 maxlen: 24
178.159.218.0/24 maxlen: 24
178.159.219.0/24 maxlen: 24
178.159.216.0/24 maxlen: 24
178.159.217.0/24 maxlen: 24
178.159.221.0/24 maxlen: 24
178.159.220.0/24 maxlen: 24
178.159.223.0/24 maxlen: 24
195.222.124.0/24 maxlen: 24
195.222.124.0/22 maxlen: 22
195.222.125.0/24 maxlen: 24
195.222.126.0/24 maxlen: 24
195.222.127.0/24 maxlen: 24
195.5.124.0/24 maxlen: 24
195.5.124.0/23 maxlen: 23
2a10:d80::/29 maxlen: 29
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:4e:e4:96:40:cd:98:f1:1f:b1:14:24:0b:89:f3:35:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bdf76c54b9e6935c30a9b4c9ba9309ac470ec02
Validity
Not Before: Dec 26 14:44:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1b364420eb0a5dafb02c4fc085a850e76007cab9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4e:33:2e:63:67:51:e2:d4:f2:da:8c:33:6b:
b1:f7:9e:9a:47:20:98:bc:c0:24:df:2a:9b:ce:b7:
e2:d9:3f:97:31:7a:1d:8f:17:b4:65:25:44:f2:b3:
94:c9:7f:0c:43:8c:05:42:09:fb:9d:6a:7b:19:a7:
3d:b4:a9:f8:e7:68:95:07:3f:82:e3:f2:7e:d9:72:
26:31:6a:97:68:33:a5:a8:ae:6c:68:85:b7:95:63:
3e:7a:66:d4:27:dd:b7:5a:d6:63:4e:ea:5b:ad:7f:
30:d1:de:61:e6:69:d3:7b:24:5c:8a:b9:99:f3:6d:
26:b6:61:87:48:a8:21:a9:00:73:50:f1:e8:0f:82:
ad:59:9f:91:ac:40:63:0d:f3:20:33:28:8a:9b:70:
53:a9:09:42:fe:c1:af:3f:45:ed:e7:df:0f:fc:d9:
29:2c:fd:d7:80:34:e3:86:9a:44:b2:44:54:02:09:
6f:85:8b:85:c2:dc:ba:af:96:8b:23:99:f3:80:5d:
2f:39:cb:91:3a:f2:7f:ee:14:0b:c4:22:8a:aa:1d:
0f:b4:71:26:f3:79:99:c2:0b:db:7d:49:95:1c:1b:
c4:c3:fc:6a:3e:ff:5e:e7:a2:94:c3:90:c4:cc:03:
ca:97:1d:06:b5:e2:a6:3e:83:b7:d2:6e:79:37:16:
bb:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:36:44:20:EB:0A:5D:AF:B0:2C:4F:C0:85:A8:50:E7:60:07:CA:B9
X509v3 Authority Key Identifier:
keyid:8B:DF:76:C5:4B:9E:69:35:C3:0A:9B:4C:9B:A9:30:9A:C4:70:EC:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/GzZEIOsKXa-wLE_AhahQ52AHyrk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.102.36.0/22
178.159.208.0/20
195.5.124.0/23
195.222.124.0/22
IPv6:
2a10:d80::/29
Signature Algorithm: sha256WithRSAEncryption
26:27:9c:90:f8:f7:82:30:6c:92:eb:54:0f:6d:cd:29:19:20:
1b:9f:f8:82:6a:19:e1:c2:b7:74:dc:52:5a:48:fb:2c:ef:54:
60:73:a9:d2:51:e2:a9:b5:2a:c0:6b:65:09:75:2b:f4:2e:50:
49:da:df:bd:52:80:8c:72:a6:67:a0:20:b8:c3:f4:b6:c7:8d:
89:7f:3a:45:31:59:60:64:29:4e:3e:35:b0:ac:e1:a5:32:2a:
74:a3:c5:7d:71:40:bd:cb:d5:ca:63:03:2f:27:8e:94:59:ce:
83:37:79:51:43:78:73:db:30:d5:69:3a:45:e0:9c:0b:a0:36:
9c:fb:68:3f:23:4a:00:41:c5:32:6f:e4:9f:81:6b:74:d6:d3:
a1:b0:ac:1a:2f:e6:04:f2:a9:ec:53:4d:17:65:d7:3d:5a:cc:
54:af:c2:89:76:3a:61:8f:51:0f:75:67:54:8b:2f:cd:dd:1c:
8f:48:2e:73:ef:12:ce:b6:2f:29:e7:21:62:bb:c2:d4:17:26:
e0:51:8c:28:0a:04:23:df:96:12:61:f6:04:22:7d:ef:86:12:
5f:71:7e:3a:82:c4:f3:89:f3:75:b9:85:c2:1e:8c:ff:49:f3:
94:11:82:fc:19:ef:bb:3a:16:1d:9a:8e:5f:a3:3d:47:30:cf:
4b:d4:76:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:06 2024 by rpki-client on console-ams.rpki-client.org