Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/wFN0d82-tNN82p_MI5SLNxslzDk.roa
File: wFN0d82-tNN82p_MI5SLNxslzDk.roa (raw, json)
Hash identifier: udgSgQquFEofG1Q7/lk66PfwjpWZYbKwVjQwBn97MvE=
Subject key identifier: C0:53:74:77:CD:BE:B4:D3:7C:DA:9F:CC:23:94:8B:37:1B:25:CC:39
Certificate issuer: /CN=8bdf76c54b9e6935c30a9b4c9ba9309ac470ec02
Certificate serial: 018570152805279208A4921A40069DA7E644
Authority key identifier: 8B:DF:76:C5:4B:9E:69:35:C3:0A:9B:4C:9B:A9:30:9A:C4:70:EC:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/wFN0d82-tNN82p_MI5SLNxslzDk.roa
Signing time: Mon 02 Jan 2023 01:25:12 +0000
ROA not before: Mon 02 Jan 2023 01:25:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39130
IP address blocks: 5.102.36.0/24 maxlen: 24
5.102.36.0/23 maxlen: 23
5.102.37.0/24 maxlen: 24
5.102.36.0/22 maxlen: 22
5.102.38.0/24 maxlen: 24
5.102.39.0/24 maxlen: 24
178.159.208.0/24 maxlen: 24
178.159.208.0/20 maxlen: 20
178.159.211.0/24 maxlen: 24
178.159.212.0/24 maxlen: 24
178.159.209.0/24 maxlen: 24
178.159.210.0/24 maxlen: 24
178.159.213.0/24 maxlen: 24
178.159.214.0/24 maxlen: 24
178.159.215.0/24 maxlen: 24
178.159.218.0/24 maxlen: 24
178.159.219.0/24 maxlen: 24
178.159.216.0/24 maxlen: 24
178.159.217.0/24 maxlen: 24
178.159.221.0/24 maxlen: 24
178.159.220.0/24 maxlen: 24
178.159.223.0/24 maxlen: 24
195.222.124.0/24 maxlen: 24
195.222.124.0/22 maxlen: 22
195.222.125.0/24 maxlen: 24
195.222.126.0/24 maxlen: 24
195.222.127.0/24 maxlen: 24
195.5.124.0/24 maxlen: 24
195.5.124.0/23 maxlen: 23
2a10:d80::/29 maxlen: 29
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:15:28:05:27:92:08:a4:92:1a:40:06:9d:a7:e6:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bdf76c54b9e6935c30a9b4c9ba9309ac470ec02
Validity
Not Before: Jan 2 01:25:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c0537477cdbeb4d37cda9fcc23948b371b25cc39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ea:b8:d9:15:75:29:35:b4:79:f3:1c:e8:9d:
2a:9b:b0:ff:77:19:33:a3:fa:e2:77:4e:65:65:d2:
41:8b:bf:75:35:73:0c:70:6b:6b:63:f8:82:ca:89:
3e:58:6d:6b:98:08:7e:02:e2:85:eb:bd:9f:c0:58:
a4:09:d2:7a:9e:ae:df:90:5e:d6:b6:ce:4e:de:6e:
ea:c8:0e:1a:f5:86:04:7c:16:1f:38:d3:ea:1c:cb:
b8:c1:28:9f:92:57:a2:21:bb:a3:78:df:6d:b8:57:
f2:ac:83:ed:af:f3:31:94:de:ff:2a:a0:10:8f:3c:
6e:91:3c:9e:02:e1:65:e5:4b:b9:8e:c9:33:1c:c7:
31:32:0a:c0:55:a4:a7:fe:12:01:0d:2b:5e:21:1b:
3c:cd:61:50:c3:f2:e7:ed:80:b8:45:06:a4:c5:c4:
99:9b:91:bc:ed:6c:a7:4b:c2:9c:40:02:38:40:9d:
7c:70:01:67:24:fc:b3:39:d5:99:9f:00:59:0c:c2:
9a:22:e0:f4:c8:e1:eb:df:a9:d1:9b:8f:94:97:e8:
54:b2:d8:6f:d0:c7:85:11:bb:dc:28:89:46:bc:99:
e7:cb:e7:64:c8:5b:2f:b3:ad:12:a9:e7:bd:26:17:
6a:49:9d:86:ed:30:c5:2c:66:dd:e4:a1:dd:37:d8:
2e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:53:74:77:CD:BE:B4:D3:7C:DA:9F:CC:23:94:8B:37:1B:25:CC:39
X509v3 Authority Key Identifier:
keyid:8B:DF:76:C5:4B:9E:69:35:C3:0A:9B:4C:9B:A9:30:9A:C4:70:EC:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/wFN0d82-tNN82p_MI5SLNxslzDk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.102.36.0/22
178.159.208.0/20
195.5.124.0/23
195.222.124.0/22
IPv6:
2a10:d80::/29
Signature Algorithm: sha256WithRSAEncryption
07:9c:e4:51:3d:37:63:49:6b:97:f4:ef:50:27:77:a0:a1:92:
6d:34:90:74:13:24:14:ed:be:83:f6:87:be:e5:20:a0:bc:f3:
0a:db:24:62:08:7b:7a:a5:9b:d0:2f:9e:3f:be:f7:9a:5f:95:
fa:cd:7b:d8:39:8f:76:e3:1d:76:cb:94:87:e1:5a:c3:34:7f:
08:f7:12:22:c5:d4:60:44:29:f7:92:23:10:ac:0a:f3:7f:7b:
d7:53:5a:4e:9a:82:b6:26:c0:e7:57:f5:b9:5a:3d:13:eb:1f:
40:6b:af:c5:82:67:e4:c9:ec:fc:c4:dc:2b:68:54:ac:c4:1d:
74:c5:3a:e9:88:67:9b:98:71:f3:64:82:53:dd:78:af:a6:01:
15:8e:70:3b:c5:66:89:75:1d:2e:14:36:9a:93:b1:e2:8e:3b:
76:07:f6:5f:70:cf:3b:d1:60:37:48:4f:96:cd:3a:89:13:a5:
c7:40:fd:88:54:87:96:53:46:2d:68:2a:e0:15:7d:bc:65:58:
c1:87:b7:43:be:39:1e:85:f7:1a:f4:9a:b4:5d:fd:65:4b:20:
28:e2:ad:5a:85:c2:40:15:f7:ae:e2:77:86:96:b4:15:b2:20:
83:d9:0e:0e:1e:2b:81:5b:b5:51:28:f6:f1:54:e7:7b:dd:ce:
89:f7:82:74
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAYVwFSgFJ5IIpJIaQAadp+ZEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiZGY3NmM1NGI5ZTY5MzVjMzBhOWI0YzliYTkzMDlhYzQ3
MGVjMDIwHhcNMjMwMTAyMDEyNTEyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMDUzNzQ3N2NkYmViNGQzN2NkYTlmY2MyMzk0OGIzNzFiMjVjYzM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAieq42RV1KTW0efMc6J0qm7D/dxkz
o/rid05lZdJBi791NXMMcGtrY/iCyok+WG1rmAh+AuKF672fwFikCdJ6nq7fkF7W
ts5O3m7qyA4a9YYEfBYfONPqHMu4wSifkleiIbujeN9tuFfyrIPtr/MxlN7/KqAQ
jzxukTyeAuFl5Uu5jskzHMcxMgrAVaSn/hIBDSteIRs8zWFQw/Ln7YC4RQakxcSZ
m5G87WynS8KcQAI4QJ18cAFnJPyzOdWZnwBZDMKaIuD0yOHr36nRm4+Ul+hUsthv
0MeFEbvcKIlGvJnny+dkyFsvs60Sqee9JhdqSZ2G7TDFLGbd5KHdN9gu0QIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFMBTdHfNvrTTfNqfzCOUizcbJcw5MB8GA1UdIwQY
MBaAFIvfdsVLnmk1wwqbTJupMJrEcOwCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTk5MnhVdWVhVFhEQ3B0TW02a3dtc1J3N0FJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS8yMTUxOWUtYjhkYy00MjQwLWFhNzgt
OGQyMTg2NjUwMjdkLzEvd0ZOMGQ4Mi10Tk44MnBfTUk1U0xOeHNsekRrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS8yMTUxOWUtYjhkYy00MjQwLWFhNzgtOGQyMTg2NjUwMjdk
LzEvaTk5MnhVdWVhVFhEQ3B0TW02a3dtc1J3N0FJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQCBWYkAwQE
sp/QAwQBwwV8AwQCw958MA0EAgACMAcDBQMqEA2AMA0GCSqGSIb3DQEBCwUAA4IB
AQAHnORRPTdjSWuX9O9QJ3egoZJtNJB0EyQU7b6D9oe+5SCgvPMK2yRiCHt6pZvQ
L54/vveaX5X6zXvYOY924x12y5SH4VrDNH8I9xIixdRgRCn3kiMQrArzf3vXU1pO
moK2JsDnV/W5Wj0T6x9Aa6/Fgmfkyez8xNwraFSsxB10xTrpiGebmHHzZIJT3Xiv
pgEVjnA7xWaJdR0uFDaak7Hijjt2B/ZfcM870WA3SE+WzTqJE6XHQP2IVIeWU0Yt
aCrgFX28ZVjBh7dDvjkehfca9Jq0Xf1lSyAo4q1ahcJAFfeu4neGlrQVsiCD2Q4O
HiuBW7VRKPbxVOd73c6J94J0
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:06 2024 by rpki-client on console-ams.rpki-client.org