Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/i12l7F0GGmLcI-jdLq9_Y-kmmvM.roa
File: i12l7F0GGmLcI-jdLq9_Y-kmmvM.roa (raw, json)
Hash identifier: KB6Ay2MzX4Erbgge+Tcd8U70oFBrQuxzMqQAM4MMByE=
Subject key identifier: 8B:5D:A5:EC:5D:06:1A:62:DC:23:E8:DD:2E:AF:7F:63:E9:26:9A:F3
Certificate issuer: /CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Certificate serial: 018A69FF8DBB2064C7AD8F0E8EC71A1EAFBA
Authority key identifier: 6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/i12l7F0GGmLcI-jdLq9_Y-kmmvM.roa
Signing time: Wed 06 Sep 2023 10:17:50 +0000
ROA not before: Wed 06 Sep 2023 10:17:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35913
IP address blocks: 194.113.35.0/24 maxlen: 24
5.181.3.0/24 maxlen: 24
5.181.1.0/24 maxlen: 24
5.181.2.0/24 maxlen: 24
5.181.0.0/24 maxlen: 24
45.150.109.0/24 maxlen: 24
2a11:6e40::/32 maxlen: 32
2a09:fb86::/32 maxlen: 32
2a11:2a47::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:69:ff:8d:bb:20:64:c7:ad:8f:0e:8e:c7:1a:1e:af:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Validity
Not Before: Sep 6 10:17:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8b5da5ec5d061a62dc23e8dd2eaf7f63e9269af3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:bf:11:7f:c6:a5:06:3b:ab:80:7b:db:52:21:
ff:48:b6:e1:dd:7c:4c:97:e4:a7:5b:64:09:3f:97:
d9:97:1d:04:21:4e:76:2d:9d:7c:d3:e7:62:a8:fb:
db:3c:1e:d1:08:ed:ee:51:4d:82:3b:0c:1b:24:c3:
3b:76:09:f2:88:8c:3b:d8:51:2a:04:f6:13:4a:1e:
3d:14:b3:9c:4c:5b:aa:8d:0e:6a:aa:de:0b:12:de:
72:74:13:3a:b4:97:f8:db:32:07:ce:73:38:7f:8a:
3b:b0:9e:2d:bd:f5:41:3c:1d:a2:19:f9:78:58:e2:
94:a5:fa:0a:8a:9c:f2:26:5a:37:8b:a0:f9:48:11:
41:d1:91:29:8b:31:0c:80:85:ba:93:31:4a:22:8d:
7d:6e:3d:85:26:15:5b:b7:1e:40:36:c1:f4:0e:e5:
8a:69:0c:d8:5e:be:0a:4d:48:1f:48:84:84:43:c6:
50:cf:78:7c:cb:c3:d4:48:a5:71:e1:0c:7f:fd:e4:
0d:ec:f4:1a:b3:cf:bb:bd:8f:66:29:2d:ed:1d:22:
a3:be:6c:96:56:25:35:4e:99:38:a8:f5:a8:1a:39:
d2:55:55:35:91:0d:e0:b2:44:8b:ad:b8:5b:2c:6b:
09:cb:21:86:32:db:a7:3c:d5:e2:31:fe:72:55:b8:
30:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:5D:A5:EC:5D:06:1A:62:DC:23:E8:DD:2E:AF:7F:63:E9:26:9A:F3
X509v3 Authority Key Identifier:
keyid:6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/i12l7F0GGmLcI-jdLq9_Y-kmmvM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.0.0/22
45.150.109.0/24
194.113.35.0/24
IPv6:
2a09:fb86::/32
2a11:2a47::/32
2a11:6e40::/32
Signature Algorithm: sha256WithRSAEncryption
22:52:85:d2:15:92:cd:37:e6:d5:58:95:a2:e4:69:b7:71:38:
95:44:e2:8b:59:2e:82:bd:99:0d:d1:02:a0:37:18:f1:a8:a7:
60:30:7f:f7:7f:38:49:01:05:76:80:81:93:33:cf:73:8c:4b:
e8:03:98:52:91:cb:63:2d:ad:12:96:55:40:38:24:21:3c:af:
a8:b9:bf:8e:d9:b2:b5:44:88:2b:30:3c:1c:45:a3:0b:5e:47:
d9:fe:ef:3c:b8:f1:c2:9d:c4:94:53:aa:02:10:fe:0b:95:38:
24:f4:cc:cc:16:39:1e:d3:4d:03:48:93:6e:39:a6:56:bb:5b:
d5:3e:81:ed:83:68:23:09:4d:5b:b3:95:12:35:77:ed:2b:d1:
80:b9:78:38:3a:16:1e:69:78:3f:39:51:80:d4:3b:09:46:14:
90:36:6a:fc:f1:f2:65:ba:83:f1:f6:56:ea:5a:7d:b3:33:d3:
c6:37:18:13:57:ad:6d:97:4f:57:a3:b8:13:2b:0b:0e:d3:a5:
25:2b:2d:fd:67:0f:9d:25:8f:55:58:3f:d8:e1:4a:3d:00:40:
75:68:83:3f:9d:75:3f:b8:1f:6e:e4:71:a9:f3:c3:1f:3f:6d:
07:a3:5c:df:1e:27:02:37:9c:34:4a:e1:fb:4f:26:d2:bb:1f:
2b:60:7d:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:00 2024 by rpki-client on console-ams.rpki-client.org