Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/KEyi05tnSuKdwzgr8Tn6XieAL88.roa
File: KEyi05tnSuKdwzgr8Tn6XieAL88.roa (raw, json)
Hash identifier: wT83bXSMnK3JGqzmLup0eJbf+/KEEY+11S7re3YjYrY=
Subject key identifier: 28:4C:A2:D3:9B:67:4A:E2:9D:C3:38:2B:F1:39:FA:5E:27:80:2F:CF
Certificate issuer: /CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Certificate serial: 018824116EE5764C91E12C46B5DFE3EFB084
Authority key identifier: 6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/KEyi05tnSuKdwzgr8Tn6XieAL88.roa
Signing time: Tue 16 May 2023 10:18:22 +0000
ROA not before: Tue 16 May 2023 10:18:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35913
IP address blocks: 194.110.246.0/24 maxlen: 24
194.113.35.0/24 maxlen: 24
5.181.3.0/24 maxlen: 24
5.181.1.0/24 maxlen: 24
5.181.2.0/24 maxlen: 24
5.181.0.0/24 maxlen: 24
45.143.164.0/24 maxlen: 24
45.143.165.0/24 maxlen: 24
192.144.12.0/22 maxlen: 24
2a11:6e40::/32 maxlen: 32
2a09:fb86::/32 maxlen: 32
2a11:2a47::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:24:11:6e:e5:76:4c:91:e1:2c:46:b5:df:e3:ef:b0:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Validity
Not Before: May 16 10:18:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=284ca2d39b674ae29dc3382bf139fa5e27802fcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5c:3f:65:7c:75:23:fc:7c:49:72:8f:73:6d:
65:0b:37:28:ea:39:da:e7:c6:b3:6f:ec:af:67:c2:
c0:9b:52:3e:5d:49:7f:79:22:4b:ac:3a:e1:a9:29:
48:f8:5f:6e:69:fc:54:70:86:ba:d5:3e:80:be:8d:
9c:1a:fe:8f:64:86:18:6c:48:0b:aa:20:77:0f:72:
5b:f9:be:ee:53:5f:f9:63:2d:cb:54:2b:c2:e8:89:
e1:d3:59:82:10:0e:8f:6e:1e:e8:62:20:ea:b4:4a:
68:84:4e:8e:09:dc:f3:da:2e:73:3f:01:70:3c:f0:
96:99:54:f9:e1:90:d9:54:a8:a7:29:55:5d:91:53:
60:47:ea:50:9a:cf:3d:a9:0c:57:c1:bf:18:cb:65:
f6:3e:ba:7a:b6:88:07:a2:9b:f0:ee:41:d4:79:c0:
6b:c5:84:74:80:bf:8e:56:37:11:f5:17:9c:88:6a:
63:9e:ab:6d:2b:f0:bb:70:4f:12:10:97:ca:39:c6:
57:a1:3e:41:db:5c:4b:77:d1:95:2b:51:9c:4f:52:
79:ed:da:b4:1f:4e:3d:f9:aa:f5:b1:8a:55:bf:d8:
1e:cd:e0:0e:5b:5f:2d:c8:e9:7a:cc:1f:b3:35:4f:
fe:2b:3d:5d:d0:90:38:dd:06:6c:31:d8:01:5d:a4:
35:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:4C:A2:D3:9B:67:4A:E2:9D:C3:38:2B:F1:39:FA:5E:27:80:2F:CF
X509v3 Authority Key Identifier:
keyid:6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/KEyi05tnSuKdwzgr8Tn6XieAL88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.0.0/22
45.143.164.0/23
192.144.12.0/22
194.110.246.0/24
194.113.35.0/24
IPv6:
2a09:fb86::/32
2a11:2a47::/32
2a11:6e40::/32
Signature Algorithm: sha256WithRSAEncryption
55:6f:06:de:4c:1f:ae:1c:94:41:00:39:e9:23:d5:e5:ca:93:
45:f4:4f:53:91:57:79:e3:80:f8:57:82:dd:12:b1:16:9b:2c:
eb:37:6e:f7:a0:81:8d:5c:c0:40:20:9f:78:60:29:2d:7f:c6:
e1:5c:85:1f:67:c5:ae:c8:84:a7:c5:4c:44:b0:09:07:ce:e2:
c1:ff:fd:1a:db:b2:5c:2b:df:96:4e:df:69:09:af:3b:87:e8:
2f:ce:18:18:55:85:75:e1:68:91:a9:72:19:7d:2e:e9:f7:ca:
a4:81:4f:c8:23:63:7c:47:80:56:9c:cf:9d:f5:fb:0f:0f:e7:
4b:af:20:a7:cf:07:c2:de:5e:9f:d9:b3:41:4d:e4:28:b5:05:
d3:f2:f3:21:c4:0e:be:d7:c9:de:0d:71:dd:b2:14:e2:b2:bc:
16:18:17:73:4b:16:2c:94:bf:cf:8c:d1:c0:42:ed:0f:40:68:
9b:35:d8:37:73:84:09:55:db:40:bd:ae:8f:17:f0:a1:6c:0d:
6f:69:f3:5a:56:fb:cd:16:46:d2:a6:f5:d3:25:c7:30:67:5b:
15:24:71:7b:72:e9:7c:a3:7e:cc:c1:c6:0f:2a:03:7c:18:4b:
9a:95:e6:8b:8e:1f:6a:6d:79:53:83:bb:06:d7:35:77:d8:18:
a8:69:7d:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:00 2024 by rpki-client on console-ams.rpki-client.org