Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/_OKVXOuVvkEbsywtyeJYsxGWQAk.roa
File: _OKVXOuVvkEbsywtyeJYsxGWQAk.roa (raw, json)
Hash identifier: IQxdup2x1skZMkdTcuWTRdWPpOjRgQrCRAksKeNhtxo=
Subject key identifier: FC:E2:95:5C:EB:95:BE:41:1B:B3:2C:2D:C9:E2:58:B3:11:96:40:09
Certificate issuer: /CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Certificate serial: 0184DD9D1093015C4D697B520643871E5EE0
Authority key identifier: 6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/_OKVXOuVvkEbsywtyeJYsxGWQAk.roa
Signing time: Sun 04 Dec 2022 14:49:28 +0000
ROA not before: Sun 04 Dec 2022 14:49:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35913
IP address blocks: 194.113.35.0/24 maxlen: 24
5.181.3.0/24 maxlen: 24
5.181.1.0/24 maxlen: 24
5.181.2.0/24 maxlen: 24
5.181.0.0/24 maxlen: 24
45.143.164.0/24 maxlen: 24
192.144.12.0/22 maxlen: 24
2a09:fb86::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:dd:9d:10:93:01:5c:4d:69:7b:52:06:43:87:1e:5e:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Validity
Not Before: Dec 4 14:49:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fce2955ceb95be411bb32c2dc9e258b311964009
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:4d:c6:13:db:5a:7c:04:9d:58:61:8f:ce:72:
b5:71:2e:f5:f6:90:76:09:ea:ce:a1:db:ac:fe:10:
b7:f2:65:36:12:a3:e6:4a:d2:db:2b:5d:8d:73:ef:
8b:53:67:c3:c4:a4:4b:ff:d4:9b:d5:48:39:e3:5b:
03:a4:73:73:03:5e:7e:7a:6a:fb:2b:0c:82:48:d6:
25:c2:f9:3a:7d:6a:1d:cd:b2:5f:35:95:61:ca:e8:
4f:6f:be:34:3a:d7:25:c7:23:a1:9f:73:84:8c:e5:
4c:70:c5:7d:eb:a3:c4:6a:0f:29:89:17:5f:86:54:
04:b1:f9:e7:01:df:f3:52:c5:0d:88:9e:f7:53:a1:
2d:e9:a4:99:52:4e:8b:e4:7c:cc:be:52:1f:e1:dc:
4d:be:da:30:88:be:c2:35:6a:af:08:5a:54:a9:64:
fc:7a:84:40:74:1d:39:83:35:0a:68:d1:21:e6:10:
7c:24:2f:2a:10:01:51:b1:e4:33:e5:dc:09:1f:ad:
d8:90:79:7a:2b:e8:6b:99:b8:97:42:71:e8:fe:1b:
2e:ce:b5:e2:10:69:85:1f:6f:72:96:d5:4f:bc:8a:
2f:39:6b:a0:a9:65:40:15:87:fd:f1:06:39:fa:79:
62:8f:87:6e:47:9e:c9:d5:2c:0f:ee:b4:e2:76:5a:
6a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:E2:95:5C:EB:95:BE:41:1B:B3:2C:2D:C9:E2:58:B3:11:96:40:09
X509v3 Authority Key Identifier:
keyid:6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/_OKVXOuVvkEbsywtyeJYsxGWQAk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.0.0/22
45.143.164.0/24
192.144.12.0/22
194.113.35.0/24
IPv6:
2a09:fb86::/32
Signature Algorithm: sha256WithRSAEncryption
6c:e9:3f:8c:2f:b4:86:ce:b9:8b:7c:f1:d1:3f:30:b3:36:05:
d9:bf:b3:29:e3:3e:77:84:32:50:87:e1:db:40:6f:98:d3:c3:
7c:1a:61:c5:ef:71:ef:58:25:35:55:01:60:dd:4d:35:4a:fc:
96:62:11:ea:c8:75:69:b5:6d:4c:41:14:79:bb:fc:40:e7:66:
58:aa:2f:68:36:eb:b4:3e:c9:b0:8d:48:4c:77:0b:8d:fb:19:
a0:1d:55:7f:8a:a9:51:91:38:43:63:c5:4e:6a:94:50:32:dd:
16:94:d6:38:43:eb:06:bd:d5:b4:6e:32:f4:30:73:d1:dc:99:
58:53:6d:ab:eb:d6:1c:af:84:1b:09:ac:2b:3a:13:cf:45:77:
0a:f0:8f:37:c9:53:76:4e:2c:56:40:9c:00:a1:18:a0:48:7b:
42:54:a7:40:c4:19:5c:32:67:fc:ea:b5:34:68:f5:a8:a7:10:
f4:9f:61:da:9b:03:b7:b6:57:3b:64:ab:ed:4d:7d:f4:cd:0c:
28:dd:87:bf:dc:41:2e:d8:fd:f9:10:8e:89:35:98:c3:67:23:
48:8e:54:eb:83:18:b3:d6:0e:89:6e:8e:01:b5:29:99:30:ba:
98:3b:1e:77:43:76:a5:dd:dd:7c:43:4e:97:1e:04:95:6c:8f:
18:d6:fa:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:00 2024 by rpki-client on console-ams.rpki-client.org