Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/y4t-x8g8N37ijilV-83ly3Su2Uo.roa
File: y4t-x8g8N37ijilV-83ly3Su2Uo.roa (raw, json)
Hash identifier: 2CTp+dX/fmm6J2+yzRLV+9tvYilABGGnCwI7/Iap1Js=
Subject key identifier: CB:8B:7E:C7:C8:3C:37:7E:E2:8E:29:55:FB:CD:E5:CB:74:AE:D9:4A
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 0182C3B33D0958D7E5E0372B7AC6F739978E
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/y4t-x8g8N37ijilV-83ly3Su2Uo.roa
Signing time: Mon 22 Aug 2022 03:57:59 +0000
ROA not before: Mon 22 Aug 2022 03:57:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209813
IP address blocks: 185.238.152.0/24 maxlen: 24
46.161.31.0/24 maxlen: 24
185.238.153.0/24 maxlen: 24
185.238.155.0/24 maxlen: 24
185.238.154.0/24 maxlen: 24
5.189.219.0/24 maxlen: 24
31.184.203.0/24 maxlen: 24
31.184.202.0/24 maxlen: 24
31.184.201.0/24 maxlen: 24
31.184.200.0/24 maxlen: 24
5.188.50.0/23 maxlen: 24
5.188.177.0/24 maxlen: 24
5.188.176.0/24 maxlen: 24
5.188.178.0/24 maxlen: 24
5.188.194.0/24 maxlen: 24
5.188.195.0/24 maxlen: 24
5.188.203.0/24 maxlen: 24
91.243.42.0/24 maxlen: 24
91.243.41.0/24 maxlen: 24
5.8.66.0/24 maxlen: 24
5.8.67.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:c3:b3:3d:09:58:d7:e5:e0:37:2b:7a:c6:f7:39:97:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Aug 22 03:57:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cb8b7ec7c83c377ee28e2955fbcde5cb74aed94a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ce:94:15:f1:4c:19:09:ac:bd:e1:ce:92:41:
62:d7:7e:5f:23:80:c8:e2:bf:6f:08:c6:0e:d7:6a:
7c:5e:04:4d:3d:2d:5c:f4:15:19:db:4d:d0:bb:8c:
f6:e0:6c:e5:aa:7c:21:b7:19:2c:b4:6d:4c:a3:1c:
ba:f5:93:57:13:0e:5d:16:27:2e:01:2e:17:1b:91:
d7:28:0e:11:27:0a:12:6f:ca:09:8a:ac:bd:92:26:
6f:09:54:d7:aa:9e:e8:22:5b:6b:bf:c8:6e:a9:ad:
a3:d4:9c:8f:b9:d6:38:bf:e6:2d:24:bf:ad:07:cd:
6c:30:73:60:07:c7:3a:2e:b6:6e:78:1b:28:39:73:
bf:5e:4d:f6:d9:fc:6c:bb:9e:45:8f:af:f5:0e:47:
cf:21:31:dc:82:57:25:2e:0f:9e:9f:6a:3f:d4:78:
a9:84:c0:0d:1c:d4:75:fa:42:60:77:dd:d7:6c:60:
c5:04:f8:d9:56:63:30:af:13:42:29:10:1d:08:df:
69:5a:b2:32:0f:76:5f:2e:06:c4:5d:ab:27:29:71:
91:a0:19:db:fb:e3:6b:eb:f7:f9:6f:07:f3:f2:07:
3f:6d:9e:75:e3:f8:93:aa:d9:8d:78:f0:8f:66:13:
2e:77:8f:21:d3:a1:80:61:45:a1:d4:93:d8:6a:70:
55:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:8B:7E:C7:C8:3C:37:7E:E2:8E:29:55:FB:CD:E5:CB:74:AE:D9:4A
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/y4t-x8g8N37ijilV-83ly3Su2Uo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.8.66.0/23
5.188.50.0/23
5.188.176.0-5.188.178.255
5.188.194.0/23
5.188.203.0/24
5.189.219.0/24
31.184.200.0/22
46.161.31.0/24
91.243.41.0-91.243.42.255
185.238.152.0/22
Signature Algorithm: sha256WithRSAEncryption
9a:af:2f:49:fc:70:ee:5e:c0:fa:3b:3f:9c:82:92:c9:0c:cd:
0a:f8:f8:be:2f:39:17:09:a9:0e:e3:41:f4:46:8f:c3:b2:57:
80:cf:16:5a:da:bf:d6:c9:d8:21:0a:89:d0:ec:ef:83:28:64:
d6:ed:1c:4f:56:b9:e8:34:75:18:b9:7d:b5:62:a8:b7:28:07:
e8:ac:e4:23:55:27:ee:8e:32:24:70:68:b5:c3:21:d8:52:5e:
ad:c8:5e:9d:c5:43:03:70:85:12:1c:b2:bb:80:51:3d:b3:a1:
64:94:31:68:89:11:5f:32:29:60:c1:0a:59:a1:95:8d:74:4e:
2d:9d:c3:51:a9:a8:01:ed:ed:75:f8:76:77:ca:64:2b:41:0e:
ce:a9:1b:63:1c:18:71:e9:1a:b4:98:37:7f:1a:ce:bd:f7:ed:
1a:90:2d:ce:aa:a6:57:71:ea:a2:65:30:0c:79:18:f8:d0:6c:
91:82:69:16:64:58:30:d8:08:e4:5f:6f:2f:c9:d6:5a:79:2a:
52:c9:18:66:71:a2:61:c9:43:a6:0a:a1:b4:ec:4c:37:69:50:
f1:1e:27:ad:61:58:7e:bc:a0:01:f5:b0:0c:64:a7:54:6d:7b:
04:f2:81:89:c5:17:71:90:3d:53:f5:1c:4c:01:7f:8c:67:51:
28:50:7c:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:44 2023 by rpki-client on console-ams.rpki-client.org