Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/91FVG8f-lJbdm6LgdsYNSBYPzzU.roa
File: 91FVG8f-lJbdm6LgdsYNSBYPzzU.roa (raw, json)
Hash identifier: 4L8gHNj5CHDHDn+NKPSyLhcLC7//C63b3/zBhjvr9sY=
Subject key identifier: F7:51:55:1B:C7:FE:94:96:DD:9B:A2:E0:76:C6:0D:48:16:0F:CF:35
Certificate issuer: /CN=b011022187e3395a1524fa1a7541ea793285afc2
Certificate serial: 0DA0850E
Authority key identifier: B0:11:02:21:87:E3:39:5A:15:24:FA:1A:75:41:EA:79:32:85:AF:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sBECIYfjOVoVJPoadUHqeTKFr8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/91FVG8f-lJbdm6LgdsYNSBYPzzU.roa
Signing time: Wed 13 Apr 2022 07:04:01 +0000
ROA not before: Wed 13 Apr 2022 07:04:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39308
IP address blocks: 46.21.80.0/20 maxlen: 20
176.221.16.0/20 maxlen: 20
176.12.64.0/20 maxlen: 20
109.109.32.0/19 maxlen: 19
89.144.128.0/18 maxlen: 20
89.144.130.0/24 maxlen: 24
37.128.240.0/20 maxlen: 20
109.109.48.0/24 maxlen: 24
159.20.96.0/20 maxlen: 20
2a00:1570::/32 maxlen: 64
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 228623630 (0xda0850e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b011022187e3395a1524fa1a7541ea793285afc2
Validity
Not Before: Apr 13 07:04:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f751551bc7fe9496dd9ba2e076c60d48160fcf35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2a:5f:c5:03:51:83:d7:7f:2d:1d:aa:84:a9:
f4:46:80:05:bb:a0:83:3c:e7:fd:c5:5d:c4:12:52:
7b:dd:70:66:4d:16:dc:c0:1b:ef:04:4d:a5:c6:aa:
2d:ac:7b:01:08:1b:8a:b7:6e:f2:8b:b5:04:7b:43:
ee:2b:bb:b0:8e:2b:f2:72:57:0d:26:b7:dc:62:67:
21:85:f1:6a:07:18:9f:ec:23:fd:a6:74:21:31:dd:
3b:4a:63:11:df:1a:c4:81:c4:44:05:39:7d:82:e2:
f5:7f:7b:71:6d:ce:cd:62:c4:2d:fa:d4:fe:07:6d:
b0:5e:46:69:6b:69:b9:11:f0:38:81:b4:9f:16:2b:
0b:45:6c:82:98:ff:05:9b:4f:3b:8e:4c:ed:b8:be:
05:d4:1d:85:73:2e:97:22:7c:79:87:bc:70:b3:b8:
04:0a:bb:56:fa:cd:a7:60:77:d9:32:df:0a:c8:1f:
3c:5c:94:88:02:e6:6c:c3:10:72:98:0d:75:33:40:
64:f6:01:37:32:78:64:ad:18:d6:e4:21:38:b0:71:
eb:dc:06:49:e6:c0:0f:28:36:40:58:df:3a:9c:5f:
1c:bf:05:e1:c6:d5:01:13:ee:0e:93:f5:b2:09:90:
f0:99:32:0b:c2:2c:72:a0:04:71:72:68:6c:bc:41:
a2:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:51:55:1B:C7:FE:94:96:DD:9B:A2:E0:76:C6:0D:48:16:0F:CF:35
X509v3 Authority Key Identifier:
keyid:B0:11:02:21:87:E3:39:5A:15:24:FA:1A:75:41:EA:79:32:85:AF:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sBECIYfjOVoVJPoadUHqeTKFr8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/91FVG8f-lJbdm6LgdsYNSBYPzzU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/sBECIYfjOVoVJPoadUHqeTKFr8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.128.240.0/20
46.21.80.0/20
89.144.128.0/18
109.109.32.0/19
159.20.96.0/20
176.12.64.0/20
176.221.16.0/20
IPv6:
2a00:1570::/32
Signature Algorithm: sha256WithRSAEncryption
99:f1:a0:30:a9:87:fb:b8:fe:0b:75:0b:fc:91:7b:f6:df:9b:
4f:bf:9d:48:db:7f:7a:99:87:5c:24:da:57:eb:ce:03:ae:94:
de:72:06:75:9b:be:8d:94:3e:53:bb:be:58:b9:37:0c:68:1b:
14:1f:9e:52:2a:c1:a5:d2:f4:c7:fe:f9:4a:5b:f3:06:45:d4:
20:f5:a5:14:c1:fa:1a:b9:68:26:fa:10:1c:93:72:7a:35:76:
ee:30:41:8f:a5:f1:19:15:7b:36:9b:e3:f0:65:8c:a7:0f:ee:
9d:75:c2:c5:18:a7:65:45:aa:e2:db:c1:03:98:3e:d9:02:a3:
f4:fd:39:94:12:70:82:5b:a6:53:d9:ff:38:df:94:d1:0d:d6:
50:bf:43:2a:09:d3:41:23:a1:99:cf:b8:3d:8a:2a:3a:5e:03:
55:e1:10:64:ed:87:74:9a:90:ef:c9:c6:85:43:c8:8b:64:6e:
c0:98:e5:9b:bd:74:21:48:7f:36:47:2a:ed:40:db:27:c6:03:
91:5a:0d:22:c4:01:32:9b:45:6d:46:68:f0:52:2c:0c:71:5a:
be:15:20:2f:44:b2:b8:9b:61:2d:7d:a4:43:3c:b1:48:83:c7:
a1:5a:49:3b:64:4c:b3:f0:37:af:99:49:22:d7:e9:d8:2e:b8:
bb:5d:5e:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:53 2023 by rpki-client on console-ams.rpki-client.org