Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/ubisT-MFj7SHuQ7poHleSU1I59Q.roa
File: ubisT-MFj7SHuQ7poHleSU1I59Q.roa (raw, json)
Hash identifier: m6OHKpM09GeK9/lyf9WXvRtzD+1jMdNWP/aOGs/th+0=
Subject key identifier: B9:B8:AC:4F:E3:05:8F:B4:87:B9:0E:E9:A0:79:5E:49:4D:48:E7:D4
Certificate issuer: /CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Certificate serial: 01857054C8400B508F75715E8558F32A3BA6
Authority key identifier: 6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/ubisT-MFj7SHuQ7poHleSU1I59Q.roa
Signing time: Mon 02 Jan 2023 02:34:42 +0000
ROA not before: Mon 02 Jan 2023 02:34:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35913
IP address blocks: 194.110.246.0/24 maxlen: 24
194.113.35.0/24 maxlen: 24
5.181.3.0/24 maxlen: 24
5.181.1.0/24 maxlen: 24
5.181.2.0/24 maxlen: 24
5.181.0.0/24 maxlen: 24
45.143.164.0/24 maxlen: 24
45.143.165.0/24 maxlen: 24
192.144.12.0/22 maxlen: 24
2a09:fb86::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:54:c8:40:0b:50:8f:75:71:5e:85:58:f3:2a:3b:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Validity
Not Before: Jan 2 02:34:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b9b8ac4fe3058fb487b90ee9a0795e494d48e7d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:94:30:b9:18:41:e9:66:46:a0:b7:0e:82:98:
3a:f9:ef:77:d8:03:ba:f9:08:59:50:4d:2e:e3:4c:
19:e7:f4:3c:66:3a:7e:93:83:24:43:63:6f:b9:d3:
9c:31:03:fe:35:4e:2b:7d:bb:ce:6b:c1:92:59:d4:
e2:d1:2a:b0:8b:9b:a9:53:33:fd:4b:d4:cf:9f:ed:
45:3a:82:0b:71:dd:40:49:ff:ea:c9:1d:57:93:93:
c1:54:39:2f:34:10:a7:5c:13:2d:71:c8:02:87:65:
14:44:05:83:dc:7a:51:e9:f8:1c:ef:46:c6:42:36:
32:64:e9:43:d6:e3:b9:b0:e7:a5:5d:bd:0b:44:5f:
bf:93:a3:db:e1:ec:c0:38:b2:a2:c5:25:e7:62:da:
c7:0f:30:9d:8c:7b:1b:63:6a:68:5d:a1:6a:1a:bd:
f3:56:57:96:72:0b:ea:60:b8:3d:1f:64:c3:1d:8b:
fb:d7:9d:3b:20:d3:7d:65:71:77:12:7e:07:20:50:
f5:4b:40:f2:72:74:5e:66:9c:c5:5f:ec:1f:ec:06:
37:bf:aa:ba:b2:20:c4:6d:1c:b8:96:14:9a:3a:f0:
0c:97:29:6d:cb:a0:33:34:7d:03:c4:c9:84:79:3f:
e2:1f:2f:e1:85:4e:fc:d0:93:6a:90:04:e8:76:35:
df:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:B8:AC:4F:E3:05:8F:B4:87:B9:0E:E9:A0:79:5E:49:4D:48:E7:D4
X509v3 Authority Key Identifier:
keyid:6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/ubisT-MFj7SHuQ7poHleSU1I59Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.0.0/22
45.143.164.0/23
192.144.12.0/22
194.110.246.0/24
194.113.35.0/24
IPv6:
2a09:fb86::/32
Signature Algorithm: sha256WithRSAEncryption
0a:c0:49:a7:3c:52:a6:d6:10:ce:9a:4a:6a:70:a0:3b:19:25:
35:35:f5:63:55:c2:74:82:f9:6e:4f:68:cd:ae:47:ad:2d:7a:
3f:a6:29:07:6f:3e:ca:89:26:4f:19:1d:86:04:bf:71:8b:41:
0c:e6:69:18:66:7c:a1:f0:5e:2d:87:98:37:f7:a1:a9:40:76:
aa:96:d6:eb:01:22:0f:2e:b0:2c:37:4e:d7:dd:89:b3:d7:5d:
49:58:ff:fe:c3:7b:69:0f:fc:5f:68:48:68:80:e9:db:1a:81:
83:77:c1:c5:18:eb:49:98:8c:fc:e6:76:b4:f4:f4:02:b0:bc:
70:1c:bd:f8:a0:72:b1:43:3b:dc:dc:fe:ee:32:49:0b:8f:ea:
e2:5d:fb:05:6c:92:0b:c8:8f:fc:39:d7:1f:85:99:21:aa:e2:
78:2c:01:9a:a3:05:0a:c0:58:c7:56:d2:a5:9b:c6:8a:9d:8c:
9b:50:39:38:50:d6:0d:01:e5:db:f6:bb:88:f8:21:e8:62:cf:
07:c5:1f:6e:7e:95:ea:5a:72:68:61:bb:62:4c:de:04:3c:dd:
fe:81:16:4c:94:b9:bc:7c:7b:4c:d4:17:69:21:d6:32:89:8c:
d1:ae:49:a0:24:b1:ee:f7:71:77:83:94:69:39:39:5e:f3:a8:
24:e2:71:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:00 2024 by rpki-client on console-ams.rpki-client.org