Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/uTuWpoT6AQcYNX3Hi8EQbadQ7EA.roa
File: uTuWpoT6AQcYNX3Hi8EQbadQ7EA.roa (raw, json)
Hash identifier: Foxkwe0v0ZvWQQeRxivOVJzQcj7yDeksmgvmXJfU9NU=
Subject key identifier: B9:3B:96:A6:84:FA:01:07:18:35:7D:C7:8B:C1:10:6D:A7:50:EC:40
Certificate issuer: /CN=49596cecc21dd02677a727ef37f0689546ea5097
Certificate serial: 0187379E0071477FFF636E6D743BF136354D
Authority key identifier: 49:59:6C:EC:C2:1D:D0:26:77:A7:27:EF:37:F0:68:95:46:EA:50:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SVls7MId0CZ3pyfvN_BolUbqUJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/uTuWpoT6AQcYNX3Hi8EQbadQ7EA.roa
Signing time: Fri 31 Mar 2023 12:21:54 +0000
ROA not before: Fri 31 Mar 2023 12:21:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5390
IP address blocks: 83.119.0.0/18 maxlen: 24
85.148.0.0/15 maxlen: 16
83.119.14.0/24 maxlen: 24
83.118.224.0/22 maxlen: 24
85.150.0.0/16 maxlen: 16
194.134.0.0/16 maxlen: 24
2a02:2500::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:37:9e:00:71:47:7f:ff:63:6e:6d:74:3b:f1:36:35:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49596cecc21dd02677a727ef37f0689546ea5097
Validity
Not Before: Mar 31 12:21:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b93b96a684fa010718357dc78bc1106da750ec40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:99:e2:16:82:e4:17:3e:66:d1:47:4c:c6:8a:
36:98:ba:a9:fc:e9:1d:c9:e5:1c:7b:dd:a3:51:4f:
1f:55:33:b7:a0:02:bf:ee:c8:28:ff:44:26:24:78:
78:95:08:7a:b6:62:cf:9c:6f:5c:a3:e6:76:1f:f7:
b0:e4:0d:3e:d7:e8:46:1c:ca:5a:da:d1:21:09:68:
5c:c1:08:bc:20:20:78:4f:15:48:a9:25:25:a8:22:
2e:b8:d7:39:cd:b9:75:c2:fa:1c:1e:be:88:47:9b:
aa:61:81:e5:c1:90:3b:4e:9c:ef:3e:38:78:1e:6d:
ec:80:35:2e:cf:25:51:df:4b:2a:55:71:38:85:2f:
d2:22:3f:69:82:de:c9:f3:52:37:56:5a:c2:f1:c8:
59:e6:81:74:e5:f3:2b:c5:56:96:62:92:cd:54:26:
da:04:e4:ca:14:30:d4:86:c3:e2:24:11:9d:97:6e:
2f:34:db:34:09:7e:83:e1:55:5a:b7:87:0b:9b:4b:
a2:e2:2f:16:35:2a:30:a7:fe:9b:71:44:97:b8:03:
45:90:b4:a9:3a:05:33:09:7b:7d:b0:56:ee:6e:78:
56:7c:f9:e3:19:e1:fa:5b:3d:b8:0a:cd:68:3e:6e:
19:21:94:3d:ab:a0:e3:ac:24:47:8d:2e:66:95:0e:
e9:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:3B:96:A6:84:FA:01:07:18:35:7D:C7:8B:C1:10:6D:A7:50:EC:40
X509v3 Authority Key Identifier:
keyid:49:59:6C:EC:C2:1D:D0:26:77:A7:27:EF:37:F0:68:95:46:EA:50:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SVls7MId0CZ3pyfvN_BolUbqUJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/uTuWpoT6AQcYNX3Hi8EQbadQ7EA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/SVls7MId0CZ3pyfvN_BolUbqUJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.118.224.0/22
83.119.0.0/18
85.148.0.0-85.150.255.255
194.134.0.0/16
IPv6:
2a02:2500::/32
Signature Algorithm: sha256WithRSAEncryption
4a:6c:ba:e1:f1:14:fd:9e:c8:91:72:96:c4:d4:14:36:fe:e7:
85:86:33:3b:26:37:b8:ef:17:e2:72:4f:9d:d8:4c:37:65:75:
90:a8:f0:56:65:b8:d8:c5:97:30:42:b3:49:5f:68:09:d2:58:
a5:30:a8:e0:32:23:f2:58:93:50:f8:03:62:fc:eb:ba:22:2b:
71:45:5c:28:d3:2d:3a:c1:80:29:6e:8a:29:bc:e9:a8:80:50:
f7:2a:29:b2:dd:9d:b1:19:d3:5a:04:19:66:a0:50:b7:55:9a:
71:b8:28:3e:c8:c0:8f:e5:8a:c1:67:1d:9c:2f:d5:a2:ad:54:
a0:80:34:3c:a9:9e:95:7a:3b:54:be:61:0d:77:9c:fc:aa:f7:
81:25:38:10:1b:6d:d9:36:35:14:6e:fa:27:82:1a:fa:e4:da:
cb:a0:81:d5:5d:4e:bb:3b:67:30:ea:9f:0d:5a:16:e2:fd:7d:
ad:72:b7:ec:a0:a1:96:80:32:72:f7:f6:0d:18:fe:d8:75:d2:
15:ed:43:c1:e9:ad:33:82:30:97:36:2f:1d:b8:52:de:67:5e:
b7:f9:7b:32:df:07:6b:f7:bc:ce:50:e9:49:70:63:f3:aa:d1:
8e:ba:2c:60:f1:a7:a8:b2:56:09:ac:ad:01:65:11:14:72:e1:
96:1b:61:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:22 2024 by rpki-client on console-ams.rpki-client.org