Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/75216d-684b-47cc-a95e-db4d39dc4ec7/1/83c9ovMQYGJH4ukkwYF4pt68bJM.roa
File: 83c9ovMQYGJH4ukkwYF4pt68bJM.roa (raw, json)
Hash identifier: WVGcwAVrArffNhC5pql8N3BsMFGOJQD+TGT6wudy7/I=
Subject key identifier: F3:77:3D:A2:F3:10:60:62:47:E2:E9:24:C1:81:78:A6:DE:BC:6C:93
Certificate issuer: /CN=d44de659759b0274124a7b481d0976840b7ade06
Certificate serial: 019077BBDC6619130D674714661041D5A466
Authority key identifier: D4:4D:E6:59:75:9B:02:74:12:4A:7B:48:1D:09:76:84:0B:7A:DE:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1E3mWXWbAnQSSntIHQl2hAt63gY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/75216d-684b-47cc-a95e-db4d39dc4ec7/1/83c9ovMQYGJH4ukkwYF4pt68bJM.roa
Signing time: Wed 03 Jul 2024 08:35:18 +0000
ROA not before: Wed 03 Jul 2024 08:35:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 52023
IP address blocks: 37.143.162.0/24 maxlen: 24
37.143.163.0/24 maxlen: 24
37.143.164.0/24 maxlen: 24
37.143.165.0/24 maxlen: 24
37.143.166.0/24 maxlen: 24
37.143.167.0/24 maxlen: 24
37.143.170.0/24 maxlen: 24
37.143.171.0/24 maxlen: 24
37.143.172.0/24 maxlen: 24
37.143.173.0/24 maxlen: 24
91.212.148.0/24 maxlen: 24
193.32.141.0/24 maxlen: 24
193.32.142.0/23 maxlen: 23
2a03:8f84::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:77:bb:dc:66:19:13:0d:67:47:14:66:10:41:d5:a4:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d44de659759b0274124a7b481d0976840b7ade06
Validity
Not Before: Jul 3 08:35:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f3773da2f310606247e2e924c18178a6debc6c93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:81:90:eb:2e:d1:05:7e:a4:5e:35:31:6b:51:
7e:d1:f7:cd:2b:19:d2:04:68:67:88:02:0f:9b:29:
58:e3:38:99:69:35:46:36:02:f2:f4:f8:e3:f1:60:
08:18:c6:df:2d:ee:b1:36:c7:fd:8a:84:9f:6b:4e:
65:f5:f7:b3:45:d6:47:29:85:5d:88:8d:0d:07:dc:
df:d8:3f:e2:e7:33:b4:9a:5e:42:a8:a4:45:8d:d0:
b5:6a:ac:b3:30:bd:53:9b:75:5f:71:03:ca:18:0d:
e4:04:9b:bf:17:49:7c:89:06:6b:5d:16:6d:ea:dd:
5e:f0:af:5e:28:9f:2c:c2:fc:19:9d:a9:9a:f8:3f:
05:6c:9f:e9:a4:ee:ba:6b:9b:fc:2e:ad:b9:50:50:
aa:93:08:84:8b:ad:2c:2b:ca:91:5f:b1:b1:3f:40:
02:2e:17:24:cb:39:42:69:8b:68:46:a4:1a:ee:4f:
32:9d:58:ca:9c:4c:15:a8:6b:a4:38:7c:9d:96:08:
2b:59:d5:83:2e:ba:58:37:5b:fe:53:3c:d2:85:8f:
27:22:b8:65:4a:0b:50:b2:b7:42:e3:9e:b3:b5:94:
07:2e:71:9a:35:f0:d4:5d:69:5a:56:22:ee:fd:fd:
b0:2b:5a:69:cd:46:5b:3c:b6:81:e2:8e:26:d1:13:
f4:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:77:3D:A2:F3:10:60:62:47:E2:E9:24:C1:81:78:A6:DE:BC:6C:93
X509v3 Authority Key Identifier:
keyid:D4:4D:E6:59:75:9B:02:74:12:4A:7B:48:1D:09:76:84:0B:7A:DE:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1E3mWXWbAnQSSntIHQl2hAt63gY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/75216d-684b-47cc-a95e-db4d39dc4ec7/1/83c9ovMQYGJH4ukkwYF4pt68bJM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/75216d-684b-47cc-a95e-db4d39dc4ec7/1/1E3mWXWbAnQSSntIHQl2hAt63gY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.143.162.0-37.143.167.255
37.143.170.0-37.143.173.255
91.212.148.0/24
193.32.141.0-193.32.143.255
IPv6:
2a03:8f84::/32
Signature Algorithm: sha256WithRSAEncryption
b9:f1:7e:0e:f6:c1:c4:94:3d:38:20:e1:2e:1c:77:87:b3:d2:
1a:8e:dd:c2:3f:e0:79:36:28:99:98:b1:48:dc:28:b6:3b:60:
c1:c1:8c:e1:de:92:39:8b:89:bf:bd:17:57:0b:47:bb:54:af:
15:60:7b:ef:25:1e:61:1f:96:00:ed:9b:84:ac:60:05:cd:6e:
53:57:19:0a:da:c7:2b:ce:28:7c:7c:21:85:e7:c6:c1:1a:cc:
d9:5c:53:ed:17:91:12:48:b3:75:21:4e:bb:cb:1b:d5:21:0f:
9a:2b:ec:d0:ed:9a:d9:11:11:d7:2a:c8:f3:00:5c:15:97:01:
c8:b6:4d:b9:2c:26:53:c6:d8:2f:9f:a7:31:49:71:f9:e4:ab:
3e:df:f9:4c:d9:f2:c6:b4:41:d1:88:a6:c5:a5:32:03:fe:eb:
32:9c:c9:6e:b4:11:aa:a5:01:3f:91:57:48:49:51:07:3b:c9:
e2:a8:88:e9:8f:01:28:89:ed:54:6a:76:31:20:8c:dd:63:37:
b1:f1:44:6a:ef:2a:ba:33:b6:93:97:0c:07:68:f3:af:27:b4:
43:3a:1c:4f:7d:98:a3:f6:5e:75:21:56:01:b1:d9:61:56:82:
0b:00:7a:44:55:fb:32:40:7b:4c:53:58:2f:ba:64:54:57:1d:
6e:75:76:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:34:03 2025 by rpki-client