Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/YBOO9xzkEb3w6AGNe9LamyWiGYc.roa
File: YBOO9xzkEb3w6AGNe9LamyWiGYc.roa (raw, json)
Hash identifier: uYTayAnbmi+Grk8VWn6+yn2OyJVEomITDREK6/ZKYJo=
Subject key identifier: 60:13:8E:F7:1C:E4:11:BD:F0:E8:01:8D:7B:D2:DA:9B:25:A2:19:87
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018C0F9F36FA82BF1A3E4F5B2CCBB990B237
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/YBOO9xzkEb3w6AGNe9LamyWiGYc.roa
Signing time: Mon 27 Nov 2023 07:12:21 +0000
ROA not before: Mon 27 Nov 2023 07:12:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200105
IP address blocks: 87.121.124.0/23 maxlen: 24
81.161.230.0/24 maxlen: 24
91.200.192.0/22 maxlen: 24
45.9.156.0/24 maxlen: 24
45.129.84.0/24 maxlen: 24
45.129.86.0/24 maxlen: 24
147.78.100.0/23 maxlen: 24
94.154.172.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:0f:9f:36:fa:82:bf:1a:3e:4f:5b:2c:cb:b9:90:b2:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Nov 27 07:12:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=60138ef71ce411bdf0e8018d7bd2da9b25a21987
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4a:7f:6b:07:c1:84:1f:2a:0b:0f:e5:89:b5:
b3:df:f9:97:51:78:2e:1d:c0:8b:b2:f7:3e:d9:48:
28:b5:4d:0e:6c:ce:76:ed:e1:2a:38:55:3c:64:8b:
15:f2:5b:9b:fe:24:10:9e:a3:c7:2b:88:59:d7:62:
14:0c:64:b3:4c:2b:85:2c:b9:65:0b:aa:b0:b3:b9:
c5:ce:b6:8a:5d:d7:19:35:58:3a:e7:b7:3b:55:00:
3e:4b:c7:7c:a5:dd:d3:75:e5:fc:3d:5c:89:3b:f0:
c5:b5:40:34:56:31:64:f4:a6:5c:cb:ef:de:55:26:
d8:95:8e:c9:c4:f0:d2:62:56:3e:c0:72:ef:b0:e1:
81:47:45:f6:f4:f5:b3:f8:46:fb:ac:91:e2:75:63:
3f:a6:4e:d9:a7:0e:9e:9b:33:56:ff:1c:a3:2a:c0:
e2:3f:12:1b:ed:4d:41:04:fb:15:23:31:f9:7d:6d:
35:49:a9:f4:06:ea:b4:10:bc:6a:53:34:bd:f9:a5:
fb:ec:86:74:17:cc:ed:ed:c1:94:32:4a:e7:56:ed:
66:23:b9:d0:cb:af:22:e0:f3:49:87:5a:6e:a2:9f:
3b:0f:53:6a:78:2c:73:e0:f2:44:6e:cf:3f:36:83:
6d:2e:09:ec:7a:f6:2e:e3:f9:f9:60:28:19:8c:2a:
37:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:13:8E:F7:1C:E4:11:BD:F0:E8:01:8D:7B:D2:DA:9B:25:A2:19:87
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/YBOO9xzkEb3w6AGNe9LamyWiGYc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.156.0/24
45.129.84.0/24
45.129.86.0/24
81.161.230.0/24
87.121.124.0/23
91.200.192.0/22
94.154.172.0/24
147.78.100.0/23
Signature Algorithm: sha256WithRSAEncryption
40:4c:b3:e4:b1:08:a4:c5:f9:16:18:31:7e:88:95:ac:f2:bf:
bc:14:fb:a4:c2:16:ca:e3:bd:29:6d:f5:88:8d:e0:c8:77:31:
82:d9:33:dc:7f:3b:0c:c2:c2:6e:10:5c:a9:17:e4:2f:78:0a:
f5:57:df:87:ad:47:6a:f1:5f:01:a3:68:e5:c0:e3:ad:84:db:
81:d2:85:85:2f:85:f6:fa:3a:4f:43:26:c2:87:c6:de:89:29:
62:a3:1c:89:26:0b:c3:fd:79:7b:0c:bc:69:d0:fe:e5:5e:c8:
e6:aa:f6:8c:f3:4f:d8:b6:0f:95:83:c6:e5:46:93:74:5a:55:
7a:c5:fa:66:b9:4b:3c:66:af:7c:a8:4d:b0:54:ff:e2:68:e7:
20:d8:c2:6f:89:23:a2:e2:d4:8a:b8:99:cb:31:c9:72:90:70:
03:42:c2:24:1a:fb:d3:1e:25:e2:c8:86:22:40:87:f7:75:0d:
7f:c7:53:34:22:aa:52:b4:92:b8:ee:3c:13:d5:32:9f:2b:34:
df:d9:5a:ef:69:36:79:0e:e9:5f:b4:b7:4d:1d:84:05:b9:b5:
5d:82:48:bf:15:4d:91:83:f1:40:48:f8:d1:50:b0:45:60:62:
f7:16:0b:70:0d:a5:fa:58:33:6e:a4:c9:f0:40:17:56:ec:d9:
89:28:38:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:36 2024 by rpki-client on console-ams.rpki-client.org