Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/5YKkUDX_0UX-ENEUTyQ6Eaz8RU0.roa
File: 5YKkUDX_0UX-ENEUTyQ6Eaz8RU0.roa (raw, json)
Hash identifier: Gm+SBl8Qa8omZLlSmp/HzS4gYOBKFD0XJQ0A6oebNz8=
Subject key identifier: E5:82:A4:50:35:FF:D1:45:FE:10:D1:14:4F:24:3A:11:AC:FC:45:4D
Certificate issuer: /CN=52dc9c218b510c07bc6659b09fbd32afe68abfd2
Certificate serial: 018C006EF815DF3FB0D77448AD9C2D8572A3
Authority key identifier: 52:DC:9C:21:8B:51:0C:07:BC:66:59:B0:9F:BD:32:AF:E6:8A:BF:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UtycIYtRDAe8Zlmwn70yr-aKv9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/5YKkUDX_0UX-ENEUTyQ6Eaz8RU0.roa
Signing time: Fri 24 Nov 2023 08:25:21 +0000
ROA not before: Fri 24 Nov 2023 08:25:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47869
IP address blocks: 109.235.48.0/21 maxlen: 21
178.239.48.0/20 maxlen: 20
94.185.80.0/21 maxlen: 21
194.110.67.0/24 maxlen: 24
37.46.192.0/22 maxlen: 22
91.205.232.0/22 maxlen: 22
37.46.199.0/24 maxlen: 24
91.199.50.0/24 maxlen: 24
37.46.196.0/23 maxlen: 23
31.171.132.0/22 maxlen: 24
94.228.208.0/20 maxlen: 20
2a00:dd0::/32 maxlen: 48
2a00:dd0:bbbb::/48 maxlen: 48
2a00:dd0:aaaa::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:00:6e:f8:15:df:3f:b0:d7:74:48:ad:9c:2d:85:72:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52dc9c218b510c07bc6659b09fbd32afe68abfd2
Validity
Not Before: Nov 24 08:25:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e582a45035ffd145fe10d1144f243a11acfc454d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:99:70:ab:b1:0c:8e:d9:9c:31:59:c3:b6:56:
49:6f:31:2f:c9:87:c3:68:21:15:9d:72:e1:ba:7e:
88:75:5c:7e:19:60:1e:88:e0:02:da:c2:9a:9a:35:
f2:79:38:c5:4e:84:7e:42:07:25:92:2c:cf:90:04:
d9:63:14:46:e0:4b:e1:6c:7f:7e:d0:2c:09:9f:9b:
e3:f2:16:cc:84:22:2b:4f:af:97:d0:45:f2:30:a0:
5f:1c:11:16:b1:70:e9:d1:20:c5:78:a8:31:47:b9:
66:d0:39:f3:30:b0:27:aa:7a:cc:65:23:bc:d9:24:
c3:72:16:1d:e8:01:90:07:3e:22:5f:50:3f:fd:15:
5d:b4:67:07:9b:d0:ee:e6:b6:73:4c:bc:f8:33:cf:
e7:62:5c:c8:be:74:89:24:fc:06:9a:8d:7d:95:23:
ef:69:d5:d7:25:2b:db:05:f0:3c:37:70:84:41:a3:
ce:b4:21:41:63:05:a1:21:91:3a:84:53:cf:c0:00:
01:36:73:58:6e:2d:5e:a1:a4:48:16:df:8b:2e:9a:
12:c4:c2:80:5a:3d:d4:f4:26:1e:65:3c:58:77:31:
c1:30:d3:41:60:53:c9:49:b2:68:a8:67:6d:df:4d:
77:c3:5f:67:6f:fa:f2:08:37:df:cc:6b:11:20:90:
45:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:82:A4:50:35:FF:D1:45:FE:10:D1:14:4F:24:3A:11:AC:FC:45:4D
X509v3 Authority Key Identifier:
keyid:52:DC:9C:21:8B:51:0C:07:BC:66:59:B0:9F:BD:32:AF:E6:8A:BF:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UtycIYtRDAe8Zlmwn70yr-aKv9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/5YKkUDX_0UX-ENEUTyQ6Eaz8RU0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.171.132.0/22
37.46.192.0-37.46.197.255
37.46.199.0/24
91.199.50.0/24
91.205.232.0/22
94.185.80.0/21
94.228.208.0/20
109.235.48.0/21
178.239.48.0/20
194.110.67.0/24
IPv6:
2a00:dd0::/32
Signature Algorithm: sha256WithRSAEncryption
80:09:70:49:e2:aa:f5:5e:da:50:ed:86:05:c8:3b:7f:b0:79:
71:2f:f4:d4:5a:04:d0:06:24:fa:b7:db:0c:63:a2:27:bb:82:
ce:2e:f5:12:0b:14:16:ad:bf:c1:1f:d9:59:13:17:67:92:de:
1c:63:f4:c4:f9:bc:38:7d:a6:9b:80:71:e0:8e:92:25:4a:a5:
5d:89:2e:80:27:6c:6f:3a:0a:ba:84:08:c9:15:ba:1d:46:02:
05:be:d4:2b:51:60:44:42:ea:97:e9:f1:1c:ad:60:9c:ad:2b:
a4:71:e5:5c:1e:a7:f1:04:f3:f6:68:f5:50:b8:2c:88:35:b9:
0d:64:c3:8c:2c:c5:42:50:95:13:e1:a0:c0:91:25:87:ee:9b:
9a:49:f6:fd:56:fe:89:59:4d:ec:0f:8f:0d:2b:e1:05:fa:f9:
32:41:50:f1:f7:dd:56:39:b6:71:83:89:4b:19:e8:c5:76:6e:
7b:8a:a9:e7:54:1d:7e:1b:63:00:07:0c:00:ca:a5:27:ef:76:
40:2f:27:1b:4f:f1:af:fb:eb:7f:c8:62:59:dd:97:9d:1f:26:
59:a6:29:49:86:cb:c2:e6:e8:c6:07:0e:2b:b1:f3:65:dc:8a:
a1:9d:e5:c0:51:ae:73:fb:3d:00:93:5d:b5:58:3a:cd:a3:e8:
5f:8a:87:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:12 2024 by rpki-client on console-ams.rpki-client.org