Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/Lqt9buvWTLBMmUBKZXiXn27vCb8.roa
File: Lqt9buvWTLBMmUBKZXiXn27vCb8.roa (raw, json)
Hash identifier: 8OxhlxwDXiWKYsk3JyudcHoqEa1RerihHqhMXCUcweE=
Subject key identifier: 2E:AB:7D:6E:EB:D6:4C:B0:4C:99:40:4A:65:78:97:9F:6E:EF:09:BF
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 0182583B159BDBDDB76DF35AC793D73C0358
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/Lqt9buvWTLBMmUBKZXiXn27vCb8.roa
Signing time: Mon 01 Aug 2022 07:07:23 +0000
ROA not before: Mon 01 Aug 2022 07:07:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35277
IP address blocks: 91.243.40.0/24 maxlen: 24
91.243.43.0/24 maxlen: 24
5.189.218.0/24 maxlen: 24
5.189.216.0/24 maxlen: 24
5.188.50.0/24 maxlen: 24
5.188.179.0/24 maxlen: 24
5.189.253.0/24 maxlen: 24
5.189.255.0/24 maxlen: 24
5.101.44.0/24 maxlen: 24
5.188.202.0/24 maxlen: 24
5.188.201.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:58:3b:15:9b:db:dd:b7:6d:f3:5a:c7:93:d7:3c:03:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Aug 1 07:07:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2eab7d6eebd64cb04c99404a6578979f6eef09bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:5c:18:da:37:56:6a:f2:1f:25:c1:86:d4:59:
70:0f:4e:65:d4:2c:60:57:3f:90:bc:26:a4:b2:e0:
ae:13:dd:7e:f1:62:63:41:df:26:49:1d:d3:66:b6:
24:81:71:f5:db:7b:e3:9e:0d:b7:53:e5:43:5d:40:
33:95:b0:4f:6b:58:d7:8a:94:48:04:3e:fb:4f:54:
97:46:6d:1b:8c:6b:0d:e3:6f:d9:36:7d:6a:11:c7:
c6:8a:f7:7e:8c:ef:6f:86:83:81:b5:ae:00:43:62:
83:d7:1a:57:c5:fd:fe:d3:31:09:86:3d:a2:c4:59:
5e:db:45:50:84:d9:19:e4:fa:8f:4c:df:f2:4f:b8:
72:f9:58:4a:16:97:2c:96:6e:7c:55:2e:20:08:1b:
94:14:c6:3b:6f:88:3a:3f:e0:0b:80:4e:05:26:19:
af:f8:df:5a:26:95:cd:6c:33:b9:03:ff:6f:62:86:
96:22:ee:55:00:d9:62:f7:00:3e:1a:c2:12:2f:42:
0d:a1:86:a8:2a:c2:6e:f7:a5:46:95:38:7b:7f:ce:
56:9f:3b:bb:21:4f:68:bd:b1:b3:ee:36:fa:0b:22:
a7:bc:ac:ec:48:c5:9d:c9:95:e3:57:3d:20:aa:88:
7c:c8:55:8c:8d:ae:9e:59:48:cb:ed:85:0f:92:e0:
34:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:AB:7D:6E:EB:D6:4C:B0:4C:99:40:4A:65:78:97:9F:6E:EF:09:BF
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/Lqt9buvWTLBMmUBKZXiXn27vCb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.101.44.0/24
5.188.50.0/24
5.188.179.0/24
5.188.201.0-5.188.202.255
5.189.216.0/24
5.189.218.0/24
5.189.253.0/24
5.189.255.0/24
91.243.40.0/24
91.243.43.0/24
Signature Algorithm: sha256WithRSAEncryption
87:61:4e:6b:3f:58:e3:38:fa:f8:bc:1e:58:a6:b6:79:ef:85:
15:bd:80:76:5a:01:f2:dd:9f:a2:20:6d:02:0d:c7:bb:57:47:
cc:d8:0a:8f:c7:9f:44:a3:4f:8e:b1:1c:e5:9f:e3:52:5e:7a:
4e:98:3e:81:0c:f2:9e:00:ed:22:b2:42:9c:80:69:05:66:c5:
58:b9:3a:8e:d6:17:65:d0:06:26:02:76:31:47:88:4a:cb:a2:
23:0e:05:80:9e:9c:df:8f:99:91:bc:5e:cf:04:1c:53:a1:6a:
67:e9:1e:be:84:dc:e6:1f:5f:14:e3:06:a0:ad:ec:e4:0a:6c:
df:93:5b:00:54:37:f8:51:47:14:1e:9e:6f:7b:90:00:ef:76:
18:de:81:4f:bf:1a:69:c4:57:73:4f:3b:ad:57:22:eb:82:13:
11:99:7f:38:b8:6a:94:eb:f1:6f:47:30:88:5e:32:59:18:84:
c5:a8:bc:5c:35:f0:ca:eb:b2:5f:39:77:d4:06:2f:13:6c:81:
80:61:5f:7b:7f:20:56:ae:99:86:b1:bb:2e:96:f4:bf:27:d6:
cd:11:8f:c3:b0:9a:a8:cd:71:d5:1e:52:6c:a9:14:a8:53:bf:
29:e7:28:08:26:0e:dd:09:e5:43:09:f4:a8:f6:86:3b:7b:20:
dc:7c:95:50
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:43 2023 by rpki-client on console-ams.rpki-client.org