Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/1931cd-d77c-42d0-8022-c779e14dd089/1/90g5XsBgIK-VHiWNKXRfdwdytjM.roa
File: 90g5XsBgIK-VHiWNKXRfdwdytjM.roa (raw, json)
Hash identifier: /aL5H5xp9TraQE7nzANzuzQ9XNsy02YgzaU04Q2yUY0=
Subject key identifier: F7:48:39:5E:C0:60:20:AF:95:1E:25:8D:29:74:5F:77:07:72:B6:33
Certificate issuer: /CN=5d0c9500834dd9e5c7bdc1f31ac58d7c1b2497f3
Certificate serial: 0D9BF666
Authority key identifier: 5D:0C:95:00:83:4D:D9:E5:C7:BD:C1:F3:1A:C5:8D:7C:1B:24:97:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XQyVAINN2eXHvcHzGsWNfBskl_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/1931cd-d77c-42d0-8022-c779e14dd089/1/90g5XsBgIK-VHiWNKXRfdwdytjM.roa
Signing time: Sat 01 Jan 2022 02:53:23 +0000
ROA not before: Sat 01 Jan 2022 02:53:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31595
IP address blocks: 185.25.188.0/22 maxlen: 24
185.25.188.0/23 maxlen: 24
83.167.160.0/19 maxlen: 24
2001:4be8::/32 maxlen: 64
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 228324966 (0xd9bf666)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d0c9500834dd9e5c7bdc1f31ac58d7c1b2497f3
Validity
Not Before: Jan 1 02:53:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f748395ec06020af951e258d29745f770772b633
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:e7:ab:a5:ab:9d:26:28:4e:8f:bf:47:fe:df:
ed:2c:4a:e5:01:59:b1:2c:e0:f9:ad:3e:fb:d2:75:
c2:26:6a:f4:06:41:3d:8d:38:18:4a:8d:04:eb:be:
d9:a1:c9:52:08:a5:f7:f1:cb:cb:0a:67:37:50:3c:
b5:cd:34:f0:d8:25:7f:58:2c:75:74:63:73:11:5e:
aa:ad:7f:87:0c:df:24:76:09:db:09:aa:1f:b8:25:
b6:27:e4:af:3e:55:c7:cd:74:ab:a0:e0:32:64:c1:
36:58:31:9a:8c:1a:46:b5:31:7d:4a:49:59:ca:8c:
37:ca:9d:68:62:b4:bb:57:6d:a4:9b:b2:0d:b1:36:
af:0e:aa:37:10:be:da:44:29:37:65:b9:f8:0e:11:
72:96:0a:a3:bf:5b:6a:ef:27:e4:fd:39:9c:1a:4f:
09:33:5e:2c:3d:cb:07:ab:e2:3b:03:d3:76:f9:0c:
95:34:57:6e:ff:25:62:74:d4:c4:f6:cc:d9:b3:1d:
fd:37:f9:78:a2:46:60:e8:53:32:d8:9e:f9:fd:dc:
8d:1c:63:2e:7c:ea:05:7c:19:c2:c8:52:c7:2b:a5:
b0:cd:7b:ed:c8:d8:21:10:04:a9:6c:2d:d4:cc:d0:
24:5f:ff:3f:b6:06:42:04:03:83:fe:9b:e9:ce:a2:
47:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:48:39:5E:C0:60:20:AF:95:1E:25:8D:29:74:5F:77:07:72:B6:33
X509v3 Authority Key Identifier:
keyid:5D:0C:95:00:83:4D:D9:E5:C7:BD:C1:F3:1A:C5:8D:7C:1B:24:97:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XQyVAINN2eXHvcHzGsWNfBskl_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/1931cd-d77c-42d0-8022-c779e14dd089/1/90g5XsBgIK-VHiWNKXRfdwdytjM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/1931cd-d77c-42d0-8022-c779e14dd089/1/XQyVAINN2eXHvcHzGsWNfBskl_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.167.160.0/19
185.25.188.0/22
IPv6:
2001:4be8::/32
Signature Algorithm: sha256WithRSAEncryption
29:28:67:b8:50:79:2a:26:0f:00:88:02:62:38:95:a2:ab:d0:
99:ca:7d:70:22:91:51:81:ff:91:5c:74:71:77:6c:a0:a3:4b:
0b:2b:d6:0a:5b:cf:cc:a4:cc:ed:7b:38:52:a6:93:40:8d:5f:
e9:3f:c9:53:a5:80:9f:d5:c1:3e:fa:fc:43:ce:15:74:20:25:
a6:de:ff:04:78:04:bf:bc:de:6f:c1:6e:27:91:b1:1a:82:21:
a3:d4:56:ec:72:e1:c3:7b:d9:2e:79:49:39:ac:10:43:21:84:
1b:77:7d:3d:8c:7b:c3:c3:fa:f3:fc:21:ba:4b:27:90:3b:bb:
50:72:0f:ce:13:e2:66:09:5e:d1:22:2f:56:70:dc:79:c8:21:
b1:da:e5:3a:a8:77:9b:01:12:ab:d0:9c:c5:72:92:7b:d6:25:
4a:0b:87:c3:aa:a0:22:87:5e:ef:c9:b2:5a:8f:fb:93:13:ae:
2c:21:65:e2:12:51:49:64:72:c5:84:fb:b0:64:dc:a4:0d:f5:
d3:7b:51:82:04:85:43:c9:5b:e1:8f:f7:de:e5:37:13:9b:0c:
1b:df:81:cd:0c:53:9a:43:e4:c7:da:3e:42:19:e5:93:1d:72:
40:f5:b4:e9:0f:b7:6a:6d:0a:57:ea:85:ca:94:aa:fc:e5:09:
a8:6c:6e:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:50 2023 by rpki-client on console-ams.rpki-client.org