Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/95eebb-0a9d-4f71-b3f9-5649e1b192bb/1/A53H6I_aeG6y5_JYPKoz_HmyMdw.roa
File: A53H6I_aeG6y5_JYPKoz_HmyMdw.roa (raw, json)
Hash identifier: q2VSogu0hjVfZJcBsNhiy0UGyvP28sS5mZ8sPs8d5zA=
Subject key identifier: 03:9D:C7:E8:8F:DA:78:6E:B2:E7:F2:58:3C:AA:33:FC:79:B2:31:DC
Certificate issuer: /CN=fbf62f7606273f41a6ccc8e2956076f3c0a1eb54
Certificate serial: 0184F93A55C0C38CCDBC17898D1F0009DDCA
Authority key identifier: FB:F6:2F:76:06:27:3F:41:A6:CC:C8:E2:95:60:76:F3:C0:A1:EB:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-_YvdgYnP0GmzMjilWB288Ch61Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/95eebb-0a9d-4f71-b3f9-5649e1b192bb/1/A53H6I_aeG6y5_JYPKoz_HmyMdw.roa
Signing time: Fri 09 Dec 2022 23:31:00 +0000
ROA not before: Fri 09 Dec 2022 23:31:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48265
IP address blocks: 91.210.137.0/24 maxlen: 24
91.210.138.0/24 maxlen: 24
91.210.136.0/24 maxlen: 24
91.210.139.0/24 maxlen: 24
109.104.131.0/24 maxlen: 24
109.104.132.0/24 maxlen: 24
109.104.129.0/24 maxlen: 24
109.104.130.0/24 maxlen: 24
109.104.128.0/24 maxlen: 24
109.104.138.0/24 maxlen: 24
109.104.139.0/24 maxlen: 24
109.104.136.0/24 maxlen: 24
109.104.137.0/24 maxlen: 24
109.104.135.0/24 maxlen: 24
109.104.133.0/24 maxlen: 24
109.104.134.0/24 maxlen: 24
109.104.145.0/24 maxlen: 24
109.104.143.0/24 maxlen: 24
109.104.144.0/24 maxlen: 24
109.104.141.0/24 maxlen: 24
109.104.142.0/24 maxlen: 24
109.104.140.0/24 maxlen: 24
109.104.159.0/24 maxlen: 24
109.104.157.0/24 maxlen: 24
109.104.158.0/24 maxlen: 24
109.104.155.0/24 maxlen: 24
109.104.156.0/24 maxlen: 24
109.104.154.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f9:3a:55:c0:c3:8c:cd:bc:17:89:8d:1f:00:09:dd:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbf62f7606273f41a6ccc8e2956076f3c0a1eb54
Validity
Not Before: Dec 9 23:31:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=039dc7e88fda786eb2e7f2583caa33fc79b231dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:a2:29:06:3a:38:34:17:2f:66:63:e9:ee:f2:
a0:13:41:95:82:30:3c:49:9c:05:13:98:77:e8:7f:
52:f0:06:5c:2c:af:48:32:76:56:03:aa:fc:c4:4b:
f1:78:47:17:b6:18:37:dd:10:d5:5a:03:20:4e:13:
99:91:04:86:d3:59:74:f8:29:47:9a:f6:eb:f2:8b:
d2:ba:5d:30:79:c3:d7:e4:06:eb:66:8e:d9:9d:1e:
5e:b4:d2:88:d0:ec:63:01:7f:57:dd:f1:34:f0:01:
71:89:27:8e:d0:9c:fb:90:86:e4:96:e4:5c:71:70:
b4:91:47:d7:12:f5:05:a6:7e:7f:57:e3:5b:88:93:
f5:e5:2a:9c:ba:59:ec:cc:26:82:e2:1a:33:b9:c3:
a2:b2:9d:d6:2d:02:91:ef:5e:08:e2:94:6f:27:83:
77:3f:59:c0:39:53:3a:ef:fe:fe:ff:23:74:d1:83:
a5:b6:b1:0a:55:f9:4d:dd:f4:46:d1:e5:81:2b:7d:
32:a4:84:4b:40:75:39:f4:df:e2:e6:83:54:86:55:
01:d9:e8:6c:15:c8:ef:29:78:09:a8:db:c3:89:5d:
de:77:7a:48:a0:a0:e1:72:39:d6:66:9c:b3:af:57:
f3:92:73:e8:f8:1d:bf:69:06:de:71:ed:43:9b:db:
df:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:9D:C7:E8:8F:DA:78:6E:B2:E7:F2:58:3C:AA:33:FC:79:B2:31:DC
X509v3 Authority Key Identifier:
keyid:FB:F6:2F:76:06:27:3F:41:A6:CC:C8:E2:95:60:76:F3:C0:A1:EB:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-_YvdgYnP0GmzMjilWB288Ch61Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/95eebb-0a9d-4f71-b3f9-5649e1b192bb/1/A53H6I_aeG6y5_JYPKoz_HmyMdw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/95eebb-0a9d-4f71-b3f9-5649e1b192bb/1/1-_YvdgYnP0GmzMjilWB288Ch61Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.210.136.0/22
109.104.128.0-109.104.145.255
109.104.154.0-109.104.159.255
Signature Algorithm: sha256WithRSAEncryption
b2:ac:56:94:16:b9:50:32:22:94:21:e5:2f:61:cd:fd:be:1c:
70:68:d6:ee:64:1f:5a:16:43:f6:c6:3a:59:fe:24:4d:bc:fd:
5a:58:6e:28:f8:5f:24:4c:b5:09:06:e0:87:69:3e:80:8c:4a:
1a:62:e1:04:04:11:7a:50:13:02:99:2f:05:ba:ba:30:07:2d:
86:33:e1:e9:e0:5c:14:6a:d1:fe:c1:b1:e0:d7:3f:38:4a:8c:
d2:cc:6f:a9:5c:9e:7e:7b:6e:68:d0:68:0e:cc:f1:d1:6d:0e:
0b:e0:05:e8:0e:4a:27:d4:c3:8b:d5:c7:3f:17:30:1e:fc:33:
d3:bc:b6:15:a3:52:f0:df:6b:df:34:a3:0c:74:40:10:68:0e:
8a:cb:fc:e0:f2:e9:32:7e:75:af:87:e5:21:e7:ec:c1:6f:f9:
40:04:12:fb:37:cd:57:16:78:6f:d7:9a:ac:86:ce:62:b1:c5:
91:78:61:7b:49:c2:36:b0:b7:36:21:de:37:e4:ad:49:7e:bd:
f4:fd:36:ae:4f:a7:3a:a5:89:aa:9b:0a:60:19:2b:4d:f9:59:
ab:33:d5:7a:86:21:4d:79:5d:2b:da:6b:ab:a4:14:06:17:c6:
2a:46:5e:e8:d5:82:e8:56:54:18:ac:97:75:a9:67:ec:4d:cb:
10:c0:cf:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:26 2024 by rpki-client on console-fra.rpki-client.org