Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/yz4TpcwsBkRkoCSuPdjgsUXuMtI.roa
File: yz4TpcwsBkRkoCSuPdjgsUXuMtI.roa (raw, json)
Hash identifier: dVTe4VuzQkcjYKnLDWGzG8392caJc7bSM2K4jB3Jv8k=
Subject key identifier: CB:3E:13:A5:CC:2C:06:44:64:A0:24:AE:3D:D8:E0:B1:45:EE:32:D2
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 49EF7948
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/yz4TpcwsBkRkoCSuPdjgsUXuMtI.roa
Signing time: Thu 26 May 2022 15:13:13 +0000
ROA not before: Thu 26 May 2022 15:13:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35277
IP address blocks: 91.243.40.0/24 maxlen: 24
91.243.43.0/24 maxlen: 24
5.189.216.0/24 maxlen: 24
5.188.50.0/24 maxlen: 24
5.188.179.0/24 maxlen: 24
5.189.253.0/24 maxlen: 24
5.189.255.0/24 maxlen: 24
5.101.44.0/24 maxlen: 24
5.188.202.0/24 maxlen: 24
5.188.201.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1240430920 (0x49ef7948)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: May 26 15:13:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cb3e13a5cc2c064464a024ae3dd8e0b145ee32d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:94:c7:2c:58:4e:78:99:ab:4a:b6:e8:92:a0:
98:24:4a:0e:95:73:51:3d:a3:d5:21:80:3a:fa:e4:
31:7e:8d:85:73:71:7b:2f:62:67:38:1a:33:1c:d8:
c4:a4:60:e4:74:0e:ae:86:d3:45:a5:a5:60:1d:e6:
b4:99:63:7b:de:c8:68:a1:75:4f:6a:5c:f9:91:d5:
46:38:bd:c4:9a:15:9d:8d:cf:7b:c8:5f:3b:df:0d:
88:ac:da:a0:98:22:76:25:66:35:90:06:7f:d8:50:
72:bf:8d:f7:0c:21:d1:eb:5b:de:88:30:6f:66:a0:
d3:97:ec:35:5f:af:b1:65:94:74:6c:be:62:fd:2b:
b4:cb:fa:4d:19:8a:58:85:71:68:e3:1c:fb:17:c9:
d8:4b:f6:38:04:4a:41:09:bb:11:03:3c:1d:ce:94:
1c:f2:f7:7e:b2:27:3a:55:5f:81:0b:6c:1b:72:8c:
83:21:a4:22:ed:c1:91:68:f5:31:10:db:d0:72:9e:
d4:f1:a3:d6:88:10:d7:7c:b5:e0:87:39:4e:0f:05:
6f:a7:1b:2d:90:ae:6c:1a:94:56:0e:94:1b:bb:f0:
ae:41:39:c1:3c:fc:cf:92:c5:93:1c:7e:33:05:24:
c5:a5:4b:81:44:bd:78:b6:cb:e0:e8:6a:19:7c:7d:
a5:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:3E:13:A5:CC:2C:06:44:64:A0:24:AE:3D:D8:E0:B1:45:EE:32:D2
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/yz4TpcwsBkRkoCSuPdjgsUXuMtI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.101.44.0/24
5.188.50.0/24
5.188.179.0/24
5.188.201.0-5.188.202.255
5.189.216.0/24
5.189.253.0/24
5.189.255.0/24
91.243.40.0/24
91.243.43.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:ff:4b:79:67:58:9c:d3:81:17:02:d4:6c:47:31:50:d6:bb:
a0:f0:18:01:d7:a0:fa:cd:7f:65:72:27:d5:13:bf:43:2e:36:
22:a5:37:ca:60:fe:1a:09:1a:cc:15:37:46:d1:a9:79:3b:72:
93:7c:c5:d5:bc:12:cb:d1:4d:16:b6:ef:aa:0e:2f:4c:3a:62:
0e:97:d6:77:c4:35:03:e7:a0:cf:d8:02:74:b9:37:e0:8e:d5:
d5:99:db:f9:8a:92:4c:39:36:99:dc:41:24:3c:bb:c7:2d:88:
ff:62:ed:da:e1:c5:6b:15:8b:e6:38:d3:47:0c:4a:e0:a5:ac:
44:aa:84:94:da:bd:42:b6:97:4f:90:8f:89:b4:f5:f1:13:21:
ba:d3:09:2f:c7:d6:20:61:11:81:35:48:3e:17:40:9a:c3:09:
89:ed:d5:d0:cf:3d:bd:f4:55:86:d3:39:07:57:40:9d:41:aa:
4e:80:5d:10:0a:96:8e:2c:16:45:8a:09:5a:6c:68:d7:e9:4b:
d8:1d:37:32:11:42:f2:07:ba:f3:29:ed:67:a4:67:a0:7d:0d:
d4:3a:46:52:15:24:85:01:5d:7c:04:35:19:c3:ed:32:ad:91:
83:79:e1:cd:7a:f8:bc:50:7b:fb:42:9c:86:1a:4b:b6:8a:f9:
66:be:04:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:44 2023 by rpki-client on console-ams.rpki-client.org