Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/42dfc0-a764-4d5d-a634-3454f490fd96/1/CumPXyYw8WgO2Pm-c3A3xPtX2NE.roa
File: CumPXyYw8WgO2Pm-c3A3xPtX2NE.roa (raw, json)
Hash identifier: FtsV8uMVAQfAsfIjDNBXjt1or011eM6cvd5H0w2pcp4=
Subject key identifier: 0A:E9:8F:5F:26:30:F1:68:0E:D8:F9:BE:73:70:37:C4:FB:57:D8:D1
Certificate issuer: /CN=6278a768c910badcd5c4aef7c172a9f061547e8c
Certificate serial: 018CD4A898DFFB1CDD2D70D4DF78D0D67059
Authority key identifier: 62:78:A7:68:C9:10:BA:DC:D5:C4:AE:F7:C1:72:A9:F0:61:54:7E:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YninaMkQutzVxK73wXKp8GFUfow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/42dfc0-a764-4d5d-a634-3454f490fd96/1/CumPXyYw8WgO2Pm-c3A3xPtX2NE.roa
Signing time: Thu 04 Jan 2024 13:27:48 +0000
ROA not before: Thu 04 Jan 2024 13:27:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6700
IP address blocks: 85.222.160.0/23 maxlen: 24
85.222.163.0/24 maxlen: 24
91.148.64.0/18 maxlen: 24
217.26.64.0/20 maxlen: 24
62.193.128.0/19 maxlen: 24
213.244.224.0/20 maxlen: 24
185.47.208.0/22 maxlen: 24
195.252.64.0/18 maxlen: 24
194.106.160.0/19 maxlen: 24
62.108.96.0/19 maxlen: 24
178.20.205.0/24 maxlen: 24
178.20.207.0/24 maxlen: 24
2001:8c8::/32 maxlen: 32
2a02:e40::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:d4:a8:98:df:fb:1c:dd:2d:70:d4:df:78:d0:d6:70:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6278a768c910badcd5c4aef7c172a9f061547e8c
Validity
Not Before: Jan 4 13:27:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0ae98f5f2630f1680ed8f9be737037c4fb57d8d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:5e:00:ca:73:8a:ee:10:3a:e6:b4:ba:c9:af:
2e:8b:7c:ad:29:1c:6c:73:86:84:81:11:0b:d2:73:
57:12:f1:9c:e7:eb:a0:b8:20:26:39:53:5c:9c:78:
78:93:2c:0e:15:04:42:e0:d3:8b:ea:2f:86:66:68:
d8:58:f5:24:2d:09:5f:f4:17:ee:33:4d:fa:82:1d:
13:ea:00:f4:74:e9:45:ab:93:be:a3:70:9c:37:50:
fb:0f:e5:fb:b7:52:76:be:e9:c6:18:1e:22:e6:1b:
91:cd:bf:0b:b7:62:41:e3:63:90:7e:f6:51:e7:75:
f4:f6:80:65:fe:86:f9:b5:9c:7e:53:32:36:a6:ba:
c4:53:68:d3:3e:b6:82:80:a7:61:94:6c:5f:fd:37:
dc:37:26:20:d9:79:5c:7e:6c:4d:e6:a6:a1:4f:dd:
1e:1a:0d:b9:a3:36:82:5f:6c:11:7c:90:1a:52:dc:
96:4b:46:88:0b:3d:fb:a4:d3:7b:25:5a:a6:49:e0:
6e:d9:da:bd:09:09:86:5a:97:e4:0f:70:f1:40:e3:
d7:e7:22:aa:f2:9a:22:de:4d:ec:5d:c6:df:66:77:
51:5a:a1:e5:27:27:34:e1:ec:9d:d4:d1:d6:19:3b:
9a:16:e3:93:86:d4:e9:9a:8c:15:7d:33:11:50:92:
f6:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:E9:8F:5F:26:30:F1:68:0E:D8:F9:BE:73:70:37:C4:FB:57:D8:D1
X509v3 Authority Key Identifier:
keyid:62:78:A7:68:C9:10:BA:DC:D5:C4:AE:F7:C1:72:A9:F0:61:54:7E:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YninaMkQutzVxK73wXKp8GFUfow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/42dfc0-a764-4d5d-a634-3454f490fd96/1/CumPXyYw8WgO2Pm-c3A3xPtX2NE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/42dfc0-a764-4d5d-a634-3454f490fd96/1/YninaMkQutzVxK73wXKp8GFUfow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.108.96.0/19
62.193.128.0/19
85.222.160.0/23
85.222.163.0/24
91.148.64.0/18
178.20.205.0/24
178.20.207.0/24
185.47.208.0/22
194.106.160.0/19
195.252.64.0/18
213.244.224.0/20
217.26.64.0/20
IPv6:
2001:8c8::/32
2a02:e40::/32
Signature Algorithm: sha256WithRSAEncryption
60:3b:e2:69:2c:fa:14:14:97:bb:6e:5b:0a:8f:53:10:d1:60:
39:b4:01:bd:1f:5e:5f:d6:49:13:e0:d0:fc:4e:01:89:9d:82:
99:0e:fa:c1:9b:46:e6:6b:39:f2:73:47:92:82:b7:95:75:9d:
6a:a6:85:ec:d6:e9:5e:bf:14:c1:ee:35:01:cc:14:11:c9:12:
cc:f7:37:f9:d2:11:c5:08:80:ac:e4:fc:3a:45:26:71:14:a9:
16:71:ef:a8:1f:ac:62:0a:48:48:94:16:43:96:eb:47:b7:74:
73:46:f5:a6:1a:51:72:98:d8:62:be:a3:a2:1f:d2:6a:b5:f4:
94:20:77:26:eb:36:98:31:9b:4e:d9:26:f0:4c:ec:f9:7b:e1:
70:5a:8a:cd:db:82:85:c7:20:f6:7e:88:17:dc:6a:79:8e:05:
4f:fb:98:a6:92:29:62:08:e1:30:c3:dc:32:cb:1f:26:fe:11:
96:1e:0e:e9:22:93:fa:15:2a:70:f1:16:a7:80:1b:a8:38:77:
2f:f7:b8:c5:aa:0b:d5:6c:f0:84:8b:5f:c2:97:c6:4e:56:07:
49:d4:6c:78:8c:d5:10:e3:de:b8:ae:9c:e7:46:4e:7f:30:8c:
6c:1e:a2:70:8a:df:26:12:c4:ac:a5:8d:03:20:ff:54:08:11:
b2:f9:42:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:19 2024 by rpki-client on console-ams.rpki-client.org