Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/uzA_TBNH0uv8t4pfmZokOMcQ1YY.roa
File: uzA_TBNH0uv8t4pfmZokOMcQ1YY.roa (raw, json)
Hash identifier: kviCJOi2oh82O2DEiYawMn9Ybim4zG6FJguJgBQQBrc=
Subject key identifier: BB:30:3F:4C:13:47:D2:EB:FC:B7:8A:5F:99:9A:24:38:C7:10:D5:86
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 018268A2608F8467BF7142ABB82D8BA497CB
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/uzA_TBNH0uv8t4pfmZokOMcQ1YY.roa
Signing time: Thu 04 Aug 2022 11:34:08 +0000
ROA not before: Thu 04 Aug 2022 11:34:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209813
IP address blocks: 185.238.152.0/24 maxlen: 24
46.161.31.0/24 maxlen: 24
185.238.153.0/24 maxlen: 24
185.238.155.0/24 maxlen: 24
185.238.154.0/24 maxlen: 24
5.189.217.0/24 maxlen: 24
5.189.219.0/24 maxlen: 24
31.184.203.0/24 maxlen: 24
31.184.202.0/24 maxlen: 24
31.184.201.0/24 maxlen: 24
31.184.200.0/24 maxlen: 24
5.188.50.0/23 maxlen: 24
5.8.67.0/24 maxlen: 24
5.189.252.0/24 maxlen: 24
5.8.44.0/24 maxlen: 24
5.8.45.0/24 maxlen: 24
5.8.46.0/24 maxlen: 24
5.188.177.0/24 maxlen: 24
5.188.176.0/24 maxlen: 24
5.188.178.0/24 maxlen: 24
5.101.46.0/24 maxlen: 24
5.101.45.0/24 maxlen: 24
5.101.47.0/24 maxlen: 24
5.188.194.0/24 maxlen: 24
5.188.195.0/24 maxlen: 24
5.188.200.0/24 maxlen: 24
5.188.203.0/24 maxlen: 24
91.243.42.0/24 maxlen: 24
91.243.41.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:68:a2:60:8f:84:67:bf:71:42:ab:b8:2d:8b:a4:97:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Aug 4 11:34:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bb303f4c1347d2ebfcb78a5f999a2438c710d586
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:d3:79:46:fe:82:24:14:80:ba:8e:39:fc:10:
01:a4:95:1b:c3:7e:13:d2:c6:a2:ec:a8:b1:9f:f4:
d5:9d:b8:60:02:7d:d6:9e:72:86:42:d6:94:88:f3:
2a:04:9a:18:c4:32:65:a1:9c:56:9a:e3:84:a8:43:
34:39:13:23:29:bd:24:a5:ec:c8:4b:b2:39:b3:fc:
dc:28:ff:df:70:12:66:27:30:e3:f2:3f:27:a9:f2:
d1:c2:f2:0d:28:4a:44:6c:48:ed:f4:54:fe:15:7a:
c6:99:c2:8c:8b:df:bc:8c:c1:69:ee:1d:be:48:b3:
f4:b0:0e:e8:3c:c6:6e:9e:f9:4d:3b:86:f0:b7:1b:
43:d9:36:e0:4e:a6:50:6d:fd:3e:e5:71:13:e3:c6:
7b:7b:7e:c7:bf:84:08:64:d6:b2:75:8a:7d:08:f8:
59:c1:49:f6:a9:c8:a1:15:89:08:cd:57:67:a5:8a:
d7:32:03:ca:ab:5f:b9:75:be:af:d7:2e:24:76:93:
9b:9d:a1:e6:c8:68:5d:2c:0c:72:4e:ce:23:33:84:
20:ef:d8:32:d8:b2:e0:46:3e:d3:ee:64:1d:3d:16:
de:51:08:26:da:c1:b1:36:07:e9:92:07:ad:d8:7b:
bc:45:e5:3c:fc:91:a6:b2:e2:89:53:00:dd:75:7d:
89:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:30:3F:4C:13:47:D2:EB:FC:B7:8A:5F:99:9A:24:38:C7:10:D5:86
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/uzA_TBNH0uv8t4pfmZokOMcQ1YY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.8.44.0-5.8.46.255
5.8.67.0/24
5.101.45.0-5.101.47.255
5.188.50.0/23
5.188.176.0-5.188.178.255
5.188.194.0/23
5.188.200.0/24
5.188.203.0/24
5.189.217.0/24
5.189.219.0/24
5.189.252.0/24
31.184.200.0/22
46.161.31.0/24
91.243.41.0-91.243.42.255
185.238.152.0/22
Signature Algorithm: sha256WithRSAEncryption
17:4b:7f:bd:5e:4d:a4:62:e0:15:87:0d:39:f4:d4:cb:26:77:
2c:0e:5f:d7:55:1f:8e:f1:9d:0d:47:e2:08:42:cf:af:92:95:
60:87:9b:f8:7b:e1:d2:37:f3:57:75:57:0b:66:a9:cd:18:b9:
e0:94:a8:da:f8:44:47:db:60:31:f1:5e:bf:3c:35:22:4b:64:
9d:9e:ab:64:4c:ee:f9:67:7a:cc:f2:58:9b:16:03:35:1d:48:
ff:12:ff:13:ad:2b:48:5c:bb:19:40:3b:93:97:c0:36:03:6e:
87:3e:2f:80:e5:f5:db:c4:1a:6a:1e:85:8f:b5:d2:1b:e7:8d:
c9:4f:02:35:b3:d7:f9:39:a6:96:95:81:46:99:c9:f7:2f:b1:
28:7b:2c:c2:66:a8:ed:b2:ba:66:61:20:d3:32:b0:c9:b5:ae:
19:19:22:2f:b9:6f:b8:55:45:dd:d2:48:98:df:d5:77:d5:d9:
f2:f8:e4:c4:0c:af:a8:e1:a1:c2:cd:32:00:15:dd:72:71:21:
5d:ae:5e:c9:46:63:98:90:3f:4c:4b:54:94:04:f9:1a:5a:8c:
5e:d4:53:67:d0:e1:c1:4a:93:6d:82:bd:89:0b:52:17:1c:42:
c8:1f:f8:71:61:a6:60:36:08:b4:e2:6c:4d:83:5b:23:9c:26:
04:b3:bc:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:44 2023 by rpki-client on console-ams.rpki-client.org