Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/8vLOYDwQzpJv6AE6rqsc1LxxGhs.roa
File: 8vLOYDwQzpJv6AE6rqsc1LxxGhs.roa (raw, json)
Hash identifier: 9q8UzLkvKLjJkUhB7vz46rLlube5SFBRTYd84L3d/Fw=
Subject key identifier: F2:F2:CE:60:3C:10:CE:92:6F:E8:01:3A:AE:AB:1C:D4:BC:71:1A:1B
Certificate issuer: /CN=306d618355bd8937f75bb4650bb5c1af70f9a12e
Certificate serial: 03B16F67
Authority key identifier: 30:6D:61:83:55:BD:89:37:F7:5B:B4:65:0B:B5:C1:AF:70:F9:A1:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MG1hg1W9iTf3W7RlC7XBr3D5oS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/8vLOYDwQzpJv6AE6rqsc1LxxGhs.roa
Signing time: Tue 03 May 2022 01:17:06 +0000
ROA not before: Tue 03 May 2022 01:17:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58128
IP address blocks: 185.155.205.0/24 maxlen: 24
185.155.204.0/22 maxlen: 22
185.155.204.0/24 maxlen: 24
185.155.206.0/24 maxlen: 24
2.57.226.0/24 maxlen: 24
2.57.225.0/24 maxlen: 24
2.57.224.0/22 maxlen: 22
2.57.224.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61960039 (0x3b16f67)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=306d618355bd8937f75bb4650bb5c1af70f9a12e
Validity
Not Before: May 3 01:17:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f2f2ce603c10ce926fe8013aaeab1cd4bc711a1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:44:90:12:d2:b3:ba:4c:a3:58:6e:c7:3f:52:
b7:04:e0:e7:f3:03:97:ac:6d:e9:15:7a:db:19:40:
85:24:2d:39:61:ff:d5:96:80:d1:71:ef:1f:ea:80:
85:11:98:88:82:15:77:47:33:4f:bd:c5:3a:c9:ae:
0d:12:cb:75:65:fa:9c:ca:4a:05:d1:fd:96:07:78:
8d:d9:40:8d:ad:12:9d:9b:63:ad:dc:da:e9:10:f6:
27:d9:bf:5d:77:58:f7:ac:4f:85:54:6e:b0:cd:6b:
e0:10:16:68:52:e1:ea:2f:5f:44:47:4c:22:d6:2e:
71:30:0f:a3:e1:90:e6:7f:37:92:7a:80:08:10:27:
e0:d8:d2:f6:df:be:f1:01:e3:b2:8b:c5:ac:06:d8:
87:74:89:fa:a9:97:4a:2b:64:cb:03:7b:5c:4c:60:
68:89:38:85:27:1e:5b:62:9d:83:88:0c:d2:73:ff:
ac:3e:83:40:1e:89:d4:2d:6d:5e:52:3e:6c:74:f6:
2d:fc:d6:31:f0:8a:67:1b:38:e1:30:dc:5a:5a:9d:
af:b7:c6:8a:c0:7b:b5:d7:b4:a0:0c:e3:91:b7:05:
90:ab:a5:28:ac:05:b7:0c:45:f3:7a:9e:f1:6e:08:
b0:ea:99:f9:5f:0d:2f:1a:a9:27:b9:59:08:e0:45:
0d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:F2:CE:60:3C:10:CE:92:6F:E8:01:3A:AE:AB:1C:D4:BC:71:1A:1B
X509v3 Authority Key Identifier:
keyid:30:6D:61:83:55:BD:89:37:F7:5B:B4:65:0B:B5:C1:AF:70:F9:A1:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MG1hg1W9iTf3W7RlC7XBr3D5oS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/8vLOYDwQzpJv6AE6rqsc1LxxGhs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.224.0/22
185.155.204.0/22
Signature Algorithm: sha256WithRSAEncryption
32:95:a5:7c:97:58:15:c3:03:29:6f:ef:3d:4b:18:c5:59:bf:
71:00:c0:58:8a:f6:6b:22:d6:db:95:f6:46:f9:d9:63:6e:18:
81:a3:c5:6d:eb:6d:36:fd:ef:d1:8c:6a:63:c9:24:2d:34:f6:
eb:1b:35:b2:62:72:7d:03:4b:43:05:eb:a8:21:0a:f8:61:6f:
a7:42:b8:86:e6:3a:7d:57:50:a7:c6:0f:48:b2:da:4f:5c:c0:
5e:0d:40:15:61:e0:12:e1:90:74:e0:8a:c2:cb:15:0c:d1:3a:
61:56:9f:03:8a:e9:c6:43:f5:89:b9:1e:d6:88:9a:76:cc:9f:
ed:f9:92:1f:aa:ed:f2:91:1f:ba:07:d4:12:67:45:3a:8f:83:
a8:71:ed:8e:1b:37:15:ce:fe:01:a5:9d:b5:94:ad:26:6b:d1:
80:76:dd:0a:d5:6a:ee:8d:77:09:25:c8:c5:4e:ce:d9:0e:46:
a6:a5:06:e3:88:52:7c:99:73:c5:7a:86:98:10:c0:8a:57:b6:
86:b6:d4:5e:3e:f6:09:b8:df:51:6c:91:fa:ca:61:ed:a7:f5:
f7:aa:d5:32:49:43:17:6f:ba:c7:44:80:ff:ea:86:97:92:0f:
33:4c:63:91:c6:ca:78:05:f9:48:2d:28:c0:2e:87:e4:ba:95:
82:54:fd:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:08 2024 by rpki-client on console-ams.rpki-client.org