Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/p_ZO9Mh1gPhwZl3iWJH2XP7UVzs.roa
File: p_ZO9Mh1gPhwZl3iWJH2XP7UVzs.roa (raw, json)
Hash identifier: WIUAaT1FEQEdpuDCDNOjyTJMeT4aKc5i3ANpHbhxgCU=
Subject key identifier: A7:F6:4E:F4:C8:75:80:F8:70:66:5D:E2:58:91:F6:5C:FE:D4:57:3B
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 01828D743FA7F363BCE378FB795802DDF10D
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/p_ZO9Mh1gPhwZl3iWJH2XP7UVzs.roa
Signing time: Thu 11 Aug 2022 15:09:42 +0000
ROA not before: Thu 11 Aug 2022 15:09:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209813
IP address blocks: 185.238.152.0/24 maxlen: 24
46.161.31.0/24 maxlen: 24
185.238.153.0/24 maxlen: 24
185.238.155.0/24 maxlen: 24
185.238.154.0/24 maxlen: 24
5.189.219.0/24 maxlen: 24
31.184.203.0/24 maxlen: 24
31.184.202.0/24 maxlen: 24
31.184.201.0/24 maxlen: 24
31.184.200.0/24 maxlen: 24
5.188.50.0/23 maxlen: 24
5.188.177.0/24 maxlen: 24
5.188.176.0/24 maxlen: 24
5.188.178.0/24 maxlen: 24
5.188.194.0/24 maxlen: 24
5.188.195.0/24 maxlen: 24
5.188.203.0/24 maxlen: 24
91.243.42.0/24 maxlen: 24
91.243.41.0/24 maxlen: 24
5.8.67.0/24 maxlen: 24
5.189.252.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:8d:74:3f:a7:f3:63:bc:e3:78:fb:79:58:02:dd:f1:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Aug 11 15:09:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a7f64ef4c87580f870665de25891f65cfed4573b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:27:39:64:1f:1e:76:ac:a8:16:fd:45:63:90:
8e:cc:cf:7b:30:fa:78:ff:5e:2e:39:22:cd:38:65:
91:2f:b0:e2:93:c0:13:8e:dc:17:63:9f:85:d8:a2:
d4:53:f3:7d:c1:bd:dc:35:4e:43:c6:06:13:24:88:
f2:f3:1f:df:28:fc:63:f9:5a:5c:ef:0e:99:50:1e:
aa:a4:c8:33:9a:25:98:00:fe:29:b8:4e:ae:51:6f:
6a:d7:fd:60:6d:24:df:60:db:52:55:69:a2:bb:5f:
b8:5d:91:24:c9:4b:eb:39:31:29:13:17:65:3f:c8:
bb:6b:1d:44:67:72:b9:e5:e7:b3:67:0f:87:cf:0d:
0e:a8:fc:71:29:a6:6a:bd:65:df:a6:f8:a4:37:5c:
7e:c8:7a:ed:57:35:82:d3:05:09:24:2f:9c:df:23:
b6:b1:51:f4:c9:8d:3a:a9:74:69:78:fc:76:08:0b:
8d:52:54:29:9f:9d:7a:49:65:e7:9d:25:df:c8:f1:
0c:ff:a9:f7:74:19:a1:4d:68:6e:77:82:1e:83:e0:
9b:89:49:67:a9:77:4c:19:62:a0:85:38:86:a4:2a:
b4:49:24:9c:1a:7b:d7:c9:20:d2:cc:46:72:1c:c9:
f9:11:eb:41:d5:6f:e7:11:77:41:92:bf:e8:2d:da:
57:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:F6:4E:F4:C8:75:80:F8:70:66:5D:E2:58:91:F6:5C:FE:D4:57:3B
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/p_ZO9Mh1gPhwZl3iWJH2XP7UVzs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.8.67.0/24
5.188.50.0/23
5.188.176.0-5.188.178.255
5.188.194.0/23
5.188.203.0/24
5.189.219.0/24
5.189.252.0/24
31.184.200.0/22
46.161.31.0/24
91.243.41.0-91.243.42.255
185.238.152.0/22
Signature Algorithm: sha256WithRSAEncryption
31:50:e4:48:a4:0b:4a:ed:1f:ba:30:0f:6f:42:c4:ba:f5:62:
4a:12:73:dd:9d:3d:ae:e5:6b:72:e5:cc:03:57:80:c8:5a:24:
12:88:4b:a0:81:9a:19:f5:2d:c4:c2:90:cc:4c:b0:5e:1d:b0:
5d:d9:5a:7f:39:ee:e4:ee:94:cf:11:be:cb:9c:7a:c9:35:06:
43:77:c6:b8:cd:16:36:6c:aa:13:32:6d:5d:ff:82:11:21:1d:
d7:2c:b1:cd:2f:97:d9:66:74:bf:3a:70:78:83:af:9d:16:cd:
e3:5d:21:9e:87:cc:93:01:75:2b:65:4e:ea:62:cc:ba:92:9d:
96:b1:00:89:e6:57:d1:64:a4:e3:d8:55:70:4a:98:49:43:3e:
61:21:3c:17:d5:b5:9b:26:24:65:9a:6c:29:d8:3b:e4:36:0c:
6f:33:89:8b:33:a5:74:c5:a4:7f:14:0a:97:3b:51:4e:e2:7a:
29:48:c1:78:8f:ba:ad:b1:c1:5a:a0:ef:18:cb:fd:1c:89:a8:
42:f6:b0:ee:07:4f:8d:66:b9:ed:2c:4b:e7:bc:06:17:b7:f4:
6d:80:6a:36:93:42:d7:fd:c6:13:a4:38:36:65:fa:e3:fb:37:
fa:d9:f9:cf:ca:d2:52:c8:7c:31:a4:ca:8b:44:f9:c2:cc:37:
96:f5:a3:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:44 2023 by rpki-client on console-ams.rpki-client.org