Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/FI2BxUa-1m0bYjNdRf0lQxTQScM.roa
File: FI2BxUa-1m0bYjNdRf0lQxTQScM.roa (raw, json)
Hash identifier: HLPYZK2uSQ080716hCBNuUf4KL+emnpdDRqXkVn4wi0=
Subject key identifier: 14:8D:81:C5:46:BE:D6:6D:1B:62:33:5D:45:FD:25:43:14:D0:49:C3
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 0182583B169D2F636A7666F12FB88E11069B
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/FI2BxUa-1m0bYjNdRf0lQxTQScM.roa
Signing time: Mon 01 Aug 2022 07:07:23 +0000
ROA not before: Mon 01 Aug 2022 07:07:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209813
IP address blocks: 185.238.152.0/24 maxlen: 24
46.161.31.0/24 maxlen: 24
185.238.153.0/24 maxlen: 24
185.238.155.0/24 maxlen: 24
185.238.154.0/24 maxlen: 24
5.189.217.0/24 maxlen: 24
5.189.219.0/24 maxlen: 24
31.184.203.0/24 maxlen: 24
31.184.202.0/24 maxlen: 24
31.184.201.0/24 maxlen: 24
31.184.200.0/24 maxlen: 24
5.188.50.0/23 maxlen: 24
5.8.67.0/24 maxlen: 24
5.189.252.0/24 maxlen: 24
5.8.44.0/24 maxlen: 24
5.8.45.0/24 maxlen: 24
5.8.46.0/24 maxlen: 24
5.8.47.0/24 maxlen: 24
5.188.177.0/24 maxlen: 24
5.188.176.0/24 maxlen: 24
5.188.178.0/24 maxlen: 24
5.101.46.0/24 maxlen: 24
5.101.45.0/24 maxlen: 24
5.101.47.0/24 maxlen: 24
5.188.194.0/24 maxlen: 24
5.188.195.0/24 maxlen: 24
5.188.200.0/24 maxlen: 24
5.188.203.0/24 maxlen: 24
91.243.42.0/24 maxlen: 24
91.243.41.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:58:3b:16:9d:2f:63:6a:76:66:f1:2f:b8:8e:11:06:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Aug 1 07:07:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=148d81c546bed66d1b62335d45fd254314d049c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:af:25:f8:e3:e8:53:84:bc:5c:33:40:15:87:
a5:ef:dc:43:62:36:03:38:8b:f7:bb:52:3e:eb:ec:
44:19:f2:e2:e9:1c:32:c2:b3:47:10:d1:a1:43:de:
83:d0:13:b3:09:94:88:36:24:32:2d:3d:32:c3:ea:
92:37:c8:89:83:cd:e0:c0:92:12:31:30:78:c8:4a:
a2:f4:b0:f9:5c:f4:f2:52:dc:64:b4:f2:87:46:2d:
37:e6:ea:4c:66:ce:46:cc:a3:83:64:0a:49:12:73:
af:77:48:b4:b8:43:5b:d7:26:be:3a:47:b3:0f:03:
38:a3:22:17:b3:9a:b6:58:a0:f7:b8:1c:5d:16:08:
7b:51:e2:a6:22:9d:f8:68:3d:0f:d7:19:bf:fd:3a:
34:1a:db:46:28:a2:a1:ef:32:c1:f7:76:83:e6:46:
d1:0d:c3:50:d3:3a:76:43:78:24:cb:34:48:35:bc:
ef:10:0c:7e:5d:20:13:34:e4:6f:17:8f:1b:89:16:
05:34:22:23:7c:67:05:44:90:b8:1b:2b:f9:2f:d0:
40:92:b7:e4:17:18:3f:6c:4e:b0:97:d8:88:9b:97:
a8:fd:e9:d2:15:54:8b:e0:88:95:26:67:3f:f9:6d:
b1:fa:59:c1:0a:4c:08:50:80:cf:f3:c3:96:ca:38:
b0:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:8D:81:C5:46:BE:D6:6D:1B:62:33:5D:45:FD:25:43:14:D0:49:C3
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/FI2BxUa-1m0bYjNdRf0lQxTQScM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.8.44.0/22
5.8.67.0/24
5.101.45.0-5.101.47.255
5.188.50.0/23
5.188.176.0-5.188.178.255
5.188.194.0/23
5.188.200.0/24
5.188.203.0/24
5.189.217.0/24
5.189.219.0/24
5.189.252.0/24
31.184.200.0/22
46.161.31.0/24
91.243.41.0-91.243.42.255
185.238.152.0/22
Signature Algorithm: sha256WithRSAEncryption
c9:73:7b:a6:43:a8:ca:1b:fd:13:5c:e6:bf:06:7f:19:72:03:
84:89:93:8c:6e:36:55:41:74:0b:26:99:38:d3:71:93:ab:4b:
d4:a0:c1:97:13:9d:00:93:54:0b:7c:58:b7:14:23:57:29:d4:
c8:be:81:7e:52:d1:09:2b:77:bc:8b:1e:31:21:90:7d:42:b6:
fe:05:4b:e5:df:b5:b5:17:5b:0d:f6:fa:f9:d1:a1:f2:f3:c8:
60:11:94:e7:d7:25:60:db:f5:86:87:15:c8:fd:b3:7f:e3:9d:
ff:41:7a:3c:eb:f3:da:84:dd:4b:b2:15:b7:75:6e:b1:ac:28:
c7:f0:30:16:78:93:2d:48:8e:ed:4b:4f:a7:a8:fa:83:b5:39:
48:75:e2:b8:d0:ef:0a:75:97:c2:35:8a:34:1e:6a:5c:c7:82:
e9:63:a3:81:e7:b9:d7:61:61:72:bb:27:82:ce:a7:8c:26:53:
83:d7:9e:67:d2:7d:41:e0:94:db:8e:b9:21:df:9a:11:84:cd:
cb:10:f9:a7:14:ec:44:65:18:7e:31:1d:43:1e:b2:ac:e8:24:
5e:c6:64:bb:a5:f9:e4:49:20:94:06:00:02:69:3f:e9:ac:c5:
7d:c3:85:eb:e4:50:3d:e1:dc:fe:af:22:ce:37:ad:81:c9:2f:
3c:c5:1f:ac
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:56 2023 by rpki-client on console-fra.rpki-client.org